Gaming This appears to be a virus!!! Help!!!

[Bean_BR]

I was a total fucking-retarded-noob some minutes ago (and now). Well, I have downloaded some msn hacking tools (because a friend of mine was irritating me).My avast! detected viruses and autorestricted them. But I was a idiot and executed a one called "MSN Hacker.exe", and when I executed it it disappeared from my desktop (it was there) and it was keeping being executed and the windows task doesn't get rid of it through the "kill process". and the avast! don't detect it as a virus.Then i restarted the pc and it was gone but now a "IsassNonCrypted.exe" keep poping up and avast ask me if i let it run in sandbox mode or not. Right now i'm doing a complete scanning process of my pc with avast! . I want help, please !!!

sorry to bother and sorry for my english

thanks!!!

 

[deathking]

go to safe mode and run the virus scan
or do a system restore to before you got the virus

 

[tagzard]

go to safe mode follow deathkigs advice

 

[ProjectVirtue]

dont even bother with the above
system restore wont remove it anymore.
given that your explorer in regular boot is nonfunctional, your only choice now is to go into safe mode, back up the stuff you want to save onto another hard drive, and then reformat your computer.

restoring will NOT, fix your computer to the way it was before. Its just not the way it works.
in its effort to preserve data, fragments of the virus (or maybe the entire entity) is still lurking in your
computer afterwards. So, just dont be lazy, and reformat.

on a side note, i highly advocate against using antivirus programs, they dont really do much besides slow
down your computer with their poorly optimized coding. Windows defender does a great job of stopping
erroneous connections, it just comes down to you as a user to make RESPONSIBLE decisions.
whether you're torrenting, surfing, or talking to mates on MSN. Just think twice before you click on
all the links out there. gl hf.

Posts merged

dont even bother with the above
system restore wont remove it anymore.
given that your explorer in regular boot is nonfunctional, your only choice now is to go into safe mode, back up the stuff you want to save onto another hard drive, and then reformat your computer.

restoring will NOT, fix your computer to the way it was before. Its just not the way it works.
in its effort to preserve data, fragments of the virus (or maybe the entire entity) is still lurking in your
computer afterwards. So, just dont be lazy, and reformat.

on a side note, i highly advocate against using antivirus programs, they dont really do much besides slow
down your computer with their poorly optimized coding. Windows defender does a great job of stopping
erroneous connections, it just comes down to you as a user to make RESPONSIBLE decisions.
whether you're torrenting, surfing, or talking to mates on MSN. Just think twice before you click on
all the links out there. gl hf.

 

[tagzard]

you could bet malware bytes program

 

[Bean_BR]

go to safe mode and run the virus scan
or do a system restore to before you got the virus

sorry, but i don't remeber how to go to safe mode and i have forgotten one thing: avast is asking me if i let this "IsassNonCrypted.exe" be opened by C:\WINDOWS\Explorer.EXE
what to do?

 

[ProjectVirtue]

go to safe mode and run the virus scan
or do a system restore to before you got the virus

sorry, but i don't remeber how to go to safe mode and i have forgotten one thing: avast is asking me if i let this "IsassNonCrypted.exe" be opened by C:\WINDOWS\Explorer.EXE
what to do?

deny it.

and reboot your computer, spam F8 / L depending on your motherboard until the prompt comes up to select boot method
make sure its default safe mode, and not "safe mode with networking" or anything like that.

 

[Bean_BR]

dont even bother with the above
system restore wont remove it anymore.
given that your explorer in regular boot is nonfunctional, your only choice now is to go into safe mode, back up the stuff you want to save onto another hard drive, and then reformat your computer.

restoring will NOT, fix your computer to the way it was before. Its just not the way it works.
in its effort to preserve data, fragments of the virus (or maybe the entire entity) is still lurking in your
computer afterwards. So, just dont be lazy, and reformat.

on a side note, i highly advocate against using antivirus programs, they dont really do much besides slow
down your computer with their poorly optimized coding. Windows defender does a great job of stopping
erroneous connections, it just comes down to you as a user to make RESPONSIBLE decisions.
whether you're torrenting, surfing, or talking to mates on MSN. Just think twice before you click on
all the links out there. gl hf.

i was blind with hate and i have done this big shit. you know why this IsassNonCrypted.exe wants to be opened by explorer?

 

[Splych]

liveboot through a linux disk [such as ubuntu] and do a virus scan .

 

[fischju]

on a side note, i highly advocate against using antivirus programs, they dont really do much besides slow
down your computer with their poorly optimized coding. Windows defender does a great job of stopping
erroneous connections, it just comes down to you as a user to make RESPONSIBLE decisions.
whether you're torrenting, surfing, or talking to mates on MSN. Just think twice before you click on
all the links out there. gl hf.

This is bullshit advice. Check out the hard data from AV-Comparatives and you'll see that anti-virus programs are effective. No wonder your solution is to do a wipe and reinstallation if you don't think anti-virus programs work. Avast! is a top scoring program.

Did you keep Avast! up to date? It should have stopped execution of the virus in the first place if it was actually on. But either way you'll need to boot in safe mode (F8) and run at least Avast, probably more programs to get rid of it. I'd do a boot scan with Avast (you can schedule this within the program), then install Avira and Spybot Search and Destroy in Safe Mode and do full scans with these. (Remember to disable or unistall either Avast! or Avira before booting normally) Malwarebytes will not work in Safe Mode.

You can also get a LiveCD like UBCD4Win and use it to virus scan. Ubuntu Live Disks at most have ClamAV, which will not be nearly as effective.

 

[Bean_BR]

now it don't want to be opened by explorer but by itself (wtf?)

 

[Bean_BR]

on a side note, i highly advocate against using antivirus programs, they dont really do much besides slow
down your computer with their poorly optimized coding. Windows defender does a great job of stopping
erroneous connections, it just comes down to you as a user to make RESPONSIBLE decisions.
whether you're torrenting, surfing, or talking to mates on MSN. Just think twice before you click on
all the links out there. gl hf.

This is bullshit advice. Check out the hard data from AV-Comparatives and you'll see that anti-virus programs are effective. No wonder your solution is to do a wipe and reinstallation if you don't think anti-virus programs work. Avast! is a top scoring program.

Did you keep Avast! up to date? It should have stopped execution of the virus in the first place if it was actually on. But either way you'll need to boot in safe mode (F8) and run at least Avast, probably more programs to get rid of it. I'd do a boot scan with Avast (you can schedule this within the program), then install Avira and Spybot Search and Destroy in Safe Mode and do full scans with these. (Remember to disable or unistall either Avast! or Avira before booting normally) Malwarebytes will not work in Safe Mode.

You can also get a LiveCD like UBCD4Win and use it to virus scan. Ubuntu Live Disks at most have ClamAV, which will not be nearly as effective.

yeah, i update it often and it don't detected it as a virus (MSN Hacker.exe). this thing is gone but now is this IsassNonCrypted.exe that keep poping up. I will go to safe mode now and see if i can fix this.

 

[Rydian]

 

[Bean_BR]

i went to the safe mode and did the restoration point process (some hours before i've done that shit) and aparently this worked, and that thing isn't showing up anymore.
you guys helped me a lot, thank you very much!!!!!

 

[Rydian]

System restore does not remove infections.

 

[Splych]

but it does remove installations .
it'd be safe to do a scan now though just to be safe .

 

[Bean_BR]

i'll scan with avast again. maybe that thing wasn't a virus.

 

[Bean_BR]

I hope that I'm not having a false feeling of relief

 

[twiztidsinz]

1). It was a virus (or some form of malware if you want to be one of those guys).
2). System restore does not remove virus, in fact it can make them HARDER to fully remove.

Task Manager (ctrl+alt+esc) is your friend. "Show processes from all users" and look for odd files.
Google the ones you're unsure of, make note of any misspelled ones or ones that appear multiple times.
Search your computer for any suspect files, IsassNonCrypted.exe and MSN Hacker.exe should be on the top of your list and delete (or rename) the files. If you get a 'file in use' error go back to Task Manager and look for the process and kill it. If you still cannot delete it, try installing Unlocker and unlocking the file (right click -> Unlocker).
Also search for common system files (explorer.exe, taskhost.exe, taskmgr.exe) and look for ones that aren't where they should be.

Be careful of any files you delete, the wrong one can break your system.
Avoid deleting any files that MAY be system files unless you're SURE they are not. You should be able to repair system files by running "sfc /scannow" from the command prompt.

 

[Bean_BR]

1). It was a virus (or some form of malware if you want to be one of those guys).
2). System restore does not remove virus, in fact it can make them HARDER to fully remove.

Task Manager (ctrl+alt+esc) is your friend. "Show processes from all users" and look for odd files.
Google the ones you're unsure of, make note of any misspelled ones or ones that appear multiple times.
Search your computer for any suspect files, IsassNonCrypted.exe and MSN Hacker.exe should be on the top of your list and delete (or rename) the files. If you get a 'file in use' error go back to Task Manager and look for the process and kill it. If you still cannot delete it, try installing Unlocker and unlocking the file (right click -> Unlocker).
Also search for common system files (explorer.exe, taskhost.exe, taskmgr.exe) and look for ones that aren't where they should be.

Be careful of any files you delete, the wrong one can break your system.
Avoid deleting any files that MAY be system files unless you're SURE they are not. You should be able to repair system files by running "sfc /scannow" from the command prompt.

when i use the pc i leave the task manager opened (and all users process) all the time to see if there is nothing strange. and now everything appears to be normal, the number of process is normal and the executables are the ones i know.