Gaming ave.exe

[.Chris]

A new powerful virus is on the net. its called "ave.exe". some links:
how to remove ave exe malware
ave-exe-a-multiple-rogues-in-one-trojan-fakerean-2010
virus-removal remove-antivirus-2010


My vista computer had been infected by it and all the anti-virus programs can't find it, cant install, or cant run.
oh yeah, has anyone have been infected by this virus? it is also accompanied by "csrss.exe", there is a fake and real so be careful not to delete the wrong one.
I'm not sure but i was browsing though a well known torrent site, then minimized the browser and it closed automatically.
Any help would do, these websites didn't do much help for me.

Edit 1: it also generates a fake anti-virus program along with a fake windows security
Edit 2: I have tried and using Windows Safe Mode. I am now running my second anti-virus program (Malwarebyte' Anti-Malware) and it couldn't find anything yet.

 

[Pliskron]

I don't get nasty things like this any more since I switched to Linux.

 

[FluffyLunamoth]

I don't get nasty things like this any more since I switched to Linux.

Sure you don't. Mac fanboys like to say that too. And I'm now 100% sure you're a damn troll.

 

[.Chris]

Just please, BACK ON TOPIC!

 

[Deleted User]

Malwarebytes anti-malware. Go.

 

[.Chris]

Malwarebytes anti-malware. Go.

its not finding the virus.

 

[Tripp]

Ad-Aware Free Anti-Malware

http://download.cnet.com/Ad-Aware-Free-Ant...dl&tag=top5

Manual update if needed but net version preferred http://www.lavasoft.com/mylavasoft/securitycenter/blog


Spybot - Search & Destroy©® 1.6.2 - product description

md5: 54ACBA9CFD7154C02CEACF6310CF3CFA

http://www.safer-networking.org/en/mirrors/index.html

Detection updates© 2010-03-17 - product description

md5: FEA2DC6EA6016168DBD3C4E2E37E8300

http://www.spybotupdates.biz/updates/files...sd_includes.exe

Good Luck I hope this helps...

 

[redact]

I don't get nasty things like this any more since I switched to Linux.

Sure you don't. Mac fanboys like to say that too. And I'm now 100% sure you're a damn troll.

what?
what do you mean sure he doesn't? he's telling the truth...

i'm not saying there are no linux virusses, but how many people do you know that have ever experienced having to get rid of a virus on a linux box?

 

[BlackDave]

might wanna use one of these

Might consider erasing your HDD clean...

 

[Originality]

And now for something a little bit more helpful: before you do anything, go into safe mode.

Safe mode stops any "seeded" malware from regenerating itself the moment you (or an anti-malware program) remove it. Whilst in safe mode, you have to find all related files and quarantine/remove them (brand name anti-virus software help here like Norton, McAfee or Kaspersky) and try and find any registry entries that look abnormal (however, if you're not an advanced user, don't touch the registry and leave that to the anti-virus progs).

Of course, there's always the option to system restore to an earlier date (cleans the registry), or taking to your comp with a sledgehammer (great fun), or nuking your HDD and starting over (makes the comp faster), or switching to a non-M$ OS (linux is great, MacOS I feel is a bit snobbish). Generally though, stop downloading unlawful music, games, applications and pr0n from shadey sites filled with ads, and stop clicking every darn thing your friends send you in IM/email apps - those are the easiest ways to catch (and spread) viruses.

 

[Rydian]

Check the sticky about removing viruses and such.

 

[FAST6191]

Wow this one seems to be getting around quite a bit.

When I saw it the thing was running from one of the application data folders including a startup pointing to it. First step is to kill those.

http://www.emsisoft.com/en/software/download/ - a-squared HiJackFree is my chosen application here- scanners and automated removal have been poor for many years now (no real fault of their own). From here you can uncheck the startup entry, kill any hidden exe files better than task manager can and see locations of various things. Doing this in safe mode will mean only the very basics will be running and prevent reinfection (I can not recall if this is one of those apps that will create itself again/regenerate).

 

[.Chris]

Yes, I have tried safe mode and opened up malwarebytes-anti malware
but it didnt find it...

 

[playallday]

I'm clean.

 

[Jiggah]

Malwarebytes can remove it. I just did it. You need to make sure you have network access so you can update the definitions.