Windows Police Pro / Total Security Virus

[Wulfgang]

Well I've been totally ruined by this virus and have followed a number of manual steps to attempt to remove it. The situation has improved substantially since deleting a number of the bad registry keys and program files.

I'd like to try to follow Cephius' steps in his sticky, but there are a few issues. First, the virus has seemingly made it impossible to log into safe mode. Everytime I hit F8 I get a scrolling message of msdos commands (it looks like) then a blue error screen saying a serious error has occurred etc. Second, when I run Malwarebytes or other malware programs like Stopzilla, my computer will either lock up or another blue error screen will appear.

Also, has anyone ever heard of _ex-08.exe in their task manager processes? Didn't show up until recently.

I'd really prefer not to reformat.

[Ratatapa]

Ok Step 1

Download this and burn it to a CD

Hiren's Boot CD 9.9 and All Other Versions - HTTP Download

step 2) Boot with the CD and choose Start Mini windows XP

step 3) inside the mini windows XP use Super AntiSpyware.

step 4 reboot and problem should be solved


edit : this is a trojan that can do this

_EX-08.EXE has been seen to perform the following behavior:

* The Process is packed and/or encrypted using a software packing process
* Looks at the contents of the autoexec.bat file
* Reads email address and phone book details
* Uses hidden browser windows to connect to web sites without telling you
* Opens browser pop ups
* This process creates other processes on disk
* This Process is a file infector which modifies program files to include a copy of the infection
* Creates a new Background Service on the machine
* Visits web sites on your PC without you knowing

_EX-08.EXE has been the subject of the following behavior:

* Added as a Registry auto start to load Program on Boot up
* Created as a process on disk
* Executed as a Process
* Created by processes which appear to be checking for interception by security products
* Created as a new Background Service on the machine

[Wulfgang]

I burned the .iso file to a CD then tried to boot up using the CD only to get another blue error screen. Safe mode is still unavailable as well, this thing sucks.

[Ratatapa]

wait you booted with the CD?

When you boot you should have 3 options

1) boot from Hard drive
2) Boot from CD
3) Start mini windows XP

You have to take option 3.

I dont see how you can get blue screen for that, because it doesn't boot from HDD,