Search : in
By :

Spyware/virus has taken over Administrator

Last answer on Aug 9, 2009 5:24:16 am BST Gemerald, on Nov 6, 2008 3:42:57 am GMT 
 Report this message to moderators

Hello,
I've managed to download a virus or spyware that has taken over my administrator rights on my computer. I have run Spybot, but can't delete the files because I don't have administrator rights. Windows defender has named the file as win32/Fake Powav. I can't find any information on removal tools to remove the virus or spyware (I am unsure which it is). Also it has taken over my Internet Explorer. I am unable to view any 'pictures' on webpages without first right clicking on it and telling it to show picture. It also opens random websites, like doctor websites? Strange, it's not porn. Example of website that keeps popping open.. http://medical-association.net/...
Any advice you could give would be so grateful for. I am hoping to avoid having to do a total reinstall.

Configuration: Windows Vista
Firefox 3.0.3
Internet Explorer 7

Best answers for « spyware/virus has taken over Administrator » in :
Download InfoArmor Anti-Spyware Show During your internet browsing, untimely advertizing windows invade your screen, and your PC slows down when you start it and even during its use. All these indications, even isolated, suggest the presence of spyware, viruses on your system. Anti...
The different types of malicious programs Show The different types of malicious programs Malware Spyware Viruses Worms Trojans Keyloggers Dialer Rootkits Malware Regroups viruses, spyware, Trojans, and all sorts of small programs designed to harm your system, steal...
The First Steps to Virus/Spyware/Adware Removal ShowThe First Steps to Virus/Spyware/Adware Removal Step 1: Delete Temporary Files How to delete Temporary Files? How to delete Temporary Internet Files? Step 2: Get a good all in one Antivirus/Anti Spyware/ Anti Adware...
[Virus] Your computer is infected Show[Virus] Your computer is infected If your computer displays regular windows with the following message: Your computer is infected It is probably due SpyAxe, a fairly tough spyware using the message service of Windows to display messages...
.exe is not a valid Win32 application Show.exe is not a valid Win32 application Downloaded File IDE controller badly configured CD/DVD is unreadable File system corrupt File unregistered Virus/spyware Problem with browser configuration When you launch an executable file,...
Download ShadowSurfer ShowShadowSurfer eliminates new spyware, viruses, worms, cookies, Internet history and malware. With ShadowSurfer you can surf the Internet without leaving a trace and can surf the Internet without having to clean your tracks. Advantage You can...
Cmd - cmd.exe Showcmd - cmd.exe cmd.exe (cmd signifiant Windows Command Prompt) is a Windows NT/2000/XP generic process which opens a text-mode console for running programs using a command line. The process cmd is not in any way a virus, a worm, a Trojan horse,...
Viruses - Introduction to viruses ShowVirus A virus is a small computer program found within the body of another program which, when run, loads itself into the memory and carries out the instructions programmed by its author. The definition of a virus may be: « Any computer...
The LovSan/Blaster virus ShowIntroduction to the LovSan virus Appearing in the summer of 2003, LovSan (also known as W32/Lovsan.worm, W32/Lovsan.worm.b, W32.Blaster.Worm, W32/Blaster-B, WORM_MSBLAST.A, MSBLASTER, Win32.Poza, Win32.Posa.Worm, and Win32.Poza.B) is the first...

1

griever09, on Nov 6, 2008 4:32:55 am GMT
  • +6

Try booting to safemode and ran spybot again, you can boot to safemode by tapping on F8 while your pc is staring up.

Reply to griever09

6

hellocat, on Jul 18, 2009 7:42:58 am BST

Yes, you can try to go to safe mode.
cleaning registry is the most efficint way to remove a spyware.
check this link and do a free scan
http://answers.yahoo.com/question/index?qid=20090319130324AA­knjBc

Reply to hellocat

2

JImmy, on Mar 5, 2009 5:44:23 pm GMT
  • +3

Alright everybody. Check this out. I have read a lot of post about this virus, which has many names, and every single one of them do the same thing to one degree or another. It takes over you background, blocks you out of your administrator tools, wont let you access your task manager or run msconfig. I have also come across this virus in a flavor that does all this and deactivates you antivirus and wont let you install antivirus or spyware tools from websites or USB drives. Smart little bastard it is. After all the battling I have done with this virus, and lost by having to do a reinstall, I have finally found the solution without having to reinstall. For those of you who arent techs you will need a USB to IDE adapter kit we techs have which is inexspensive and another PC with Malewarebytes and Comodo Antivirus.

So heres the solution. Take out your hard drive. Slave to other PC using your adapter. It'll show up on the other PC as an external HD. Right click on the location and scan first using Malewarebytes, which is the best out there for removing any spyware, trojans, worm and adware. I dont care what anyone says. This program is the shit. Once it has scanned, remove all infections then scan with Comodo antivirus. Once it has removed all infections, reinstall your HD. Trust me. It'll run fine. Install Malewarebytes and Comodo on your PC and then run again.

You can thank me later when its running again.

Jimmy Miranda
Nectarcomputer.com
support@nectarcomputers.com

Reply to JImmy

3

CrazyGata, on May 17, 2009 5:15:24 pm BST
  • +1

Jimmy,

For us mere civilians, how do I remove the hardware from my HP laptop?

Reply to CrazyGata

4

Cece 200988, on Jul 5, 2009 11:43:38 pm BST
  • +1

That's easier said than done, I have malwarebytes on my PC and my laptop and after scanning the PC once with malwarebytes and removing the viruses and trojans (so I thought) I restarted to find that there was still something on my PC which was now adding porno icons to my desktop O.o

how do I get rid of it??? for some reason I can't get malwarebytes to run again, I get sent to an internet explorer website (which I never use, I usually run Mozilla FireFox)

Reply to Cece 200988

5

DLR, on Jul 17, 2009 4:59:01 pm BST

I have reinstalled and tried every spyware, malware. It won't dump the memory - after reinstall looks new, I still find old files and it has taken over my internet connection and is trying to send data to a virtual storage file. I even installed a new harddrive and it still is in control! HELP!!!!!

Reply to DLR

8

worn-out, on Aug 9, 2009 12:55:17 am BST

I am having the same problems. My AVG was rendered useless, I can't reinstall it. The Malawarebytes scan starts then just quits and disappears. Many of my admin rights have disappeared. It won't even let me boot into Safe Mode ! Originally the trojan showed as 'Advanced Virus Remover' (looking just like the AVG gui). It sends you to a website to buy 'PC Security Shield'. I called them and of course they claim its a 'rogue'. They should be hunted down and strung up!!!! DON'T BUY 'PC SECURITY SHIELD'. I really don't want to connect this harddrive to my healthy computer, so I guess its a wipe!

Reply to worn-out

7

so3, on Jul 24, 2009 7:20:37 am BST
  • +3

The best Spyware software is "Spyware Doctor" and you can download from Jordysoft.net.

Here is the link to the download page http://www.jordysoft.net

Reply to so3

9

 Noni, on Aug 9, 2009 5:24:16 am BST
  • +4

It is a fake rogue spyware infection, dont be worried, you can fix this problem by using one of these (FREE) anti spyware programs
Super Anti Spyware
http://darfuns.com/download-super-anti-spyware/
Malware Bytes Anti Malware
http://darfuns.com/download-malwarebytes/

Good Luck

Reply to Noni