Member Avatar for java_programmer

Hi,
I was using MS Windows XP but my antivirus was expired and I forgot to update it.
Last week when I was downloaing something< i got a virus which tries to read my saved passwords in browser/machine and it also effects most of the dll and exe files.
Hence I was not able to run some software and even can not enter into my control panel and can not connect to Internet after that.

Then I logged in safe mode to troubleshoot the problem. But still I can't connect the Internet so that I will download some antivirus.

After that, I repair my existing OS using recovery cd, now I loggeg in safe mode and can enter into control panel and can install/uninstall software. But still can't connect to Internet. And when I try to log in in normal mode, just after booting, the virus is deleting the dlls again and can't run many application.

My question is,
1. if I download some antivirus from other machine and install in the affected
machine in safe mode, will it be able to detect and remove the virus?
Does AVG or Avast free edition can deal with this type of viruses?
2. Will I be able to connect Internet after removing the virus or spyware ? Or I need
to install the modem driver or need to repair the existing OS/
3. Can anyone please suggest some good free antivirus and antispyware for home use?

Thanks and regards,

Edited by java_programmer because: n/a
  • 2 Contributors
  • 1 Reply
  • 204 Views
  • 18 Hours Discussion Span
  • Latest Post Latest Post by Simeon Naranjit

Dani AI

Generated

— short, practical plan you can follow now (I’m expanding on ’s Malwarebytes suggestion).

  1. Don’t put the infected PC back on the Internet. Use a clean machine to download tools and copy only your personal documents/photos (not .exe, .zip installers or scripts) to an external drive. Boot the infected PC from a rescue ISO (Kaspersky, Avira, AVG rescue media — they scan outside Windows and are the safest first step). (support.kaspersky.com)

  2. Preferred workflow (works when malware blocks normal installs):

  • From a clean PC download a rescue ISO or a portable scanner (KVRT/Kaspersky, Malwarebytes offline installer) and write it to USB/DVD.
  • Boot the infected PC from that rescue media, update signatures (if the rescue environment can go online) and run a full scan; remove/quarantine everything found.
  • If you can’t boot a rescue disk, try Safe Mode with Networking and run an on‑demand scanner from USB — some installers won’t run in plain Safe Mode, so the rescue environment is more reliable. (support.kaspersky.com)

  1. Quick network and redirection fixes to run from an elevated command prompt after scanning (these often restore broken Internet caused by proxies, Winsock/TCP corruption or DNS cache):

    ipconfig /release
ipconfig /flushdns
ipconfig /renew
netsh winsock reset
netsh int ip reset c:\resetlog.txt

    Also check Internet Explorer → Internet Options → Connections → LAN Settings and disable any proxy, and reset the Hosts file to the default if it was modified. (support.microsoft.com)

  2. If the virus keeps deleting DLLs or reappears in normal mode, it’s either in a user file/startup item or the repair install didn’t remove the payload. Inspect startup entries (msconfig, autoruns), scan any backed‑up data on a clean PC before restoring, and if the system integrity is badly damaged do a clean Windows install (backup data first). Use a rootkit/bootkit tool (KVRT or vendor rescue) for stubborn infections. (support.kaspersky.com)

Finally: Windows XP is unsupported (April 8, 2014) and stays risky even after cleaning — if possible migrate to a supported OS or keep the machine isolated. (learn.microsoft.com)

If the rescue scan finds rootkits or can’t remove everything, a wipe-and-clean-install is the safest outcome.

Member Avatar for Simeon Naranjit

1. You can transfer it from another machine but you might have trouble installing it in Safe Mode.
2. You should be able to connect after it is removed. It most likely entered a proxy address to redirect your internet.
3. Use Malwarebytes, it always works.

Your should try to boot up in regular mode and install Malwarebytes as fast as you can before the virus dlls/process can start up. A little patience and effort and you will get it done.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.