Join Date: Dec 2006
Location: Cap Haitian, Haiti
Friend's PC is toast!
Hey, I'm not a novice at removing infections and use to be a spyware/virus technician for a few companies but my friends pc is completely jacked with some horrible infections.
He had braviax.exe in his startup and also has Antivirus 2010 which I know is an infection among other thins on his computer.
He cannot get online, so I put a bunch of programs on a USB drive and put them on his pc.
90% of them cannot run. I cannot access any file on his desktop unless I use the task manager. He's got like 3 svchost in his processes which I know are infected but whenever I end the process I get some error saying the remote procedure bla bla bla and it shuts down the pc in under a minute.
Disabled his services in msconfig and startup files and went t safemode.
The programs I tried using which do not even open or if they open cannot run are:
Autoruns, (pisses me off I can't run this)
Combofix, (pisses me off I can't run this)
Hijackthis, (pisses me off I can't run this)
Killbox, (pisses me off I can't run this)
Was able to run Avast antivirus and told it to run before boot and it found one trojan (forgot to write the name down) and cleaned it but if I run it again it'll find it again. I'll try running it and copying the name down next time.
Ran spysweeper and it says the pc is clean which is bs.
Vundo fix and virtuavundobegone found nothing.
So I tried a lot of different things and even went through the registry to remove all variants of braviax.exe but the problem about me not being able to use the scans I want to use is still present.
Lastly, I tried process explorer and it works but when I try to suspend those damn svchost.exe files I cannot use the taskmanager anymore and that's the only way I can browse around the system.
Therefore, if any of you are really technically inclined any help will be useful since I'm a nose hair away from saving his data and formating his pc!!
1. BJ "The Prodigy" Penn
2. Dan "Hollywood" Henderson
3. George "Rush" St Pierre