Cant remove qvo6 virus

HUNTER.P · 20 Apr 2013 at 17:24

Have any of you ever encountered this before? Its a redirect virus which I doing my nut in.

I've run a full scan of Microsoft Security Essentials and Malwarebytes and they aren't throwing up anything.

The help found through google searching hasnt helped either.

Hyburnate · 20 Apr 2013 at 17:27

Boot into Safe mode without networking and see if you can run Malwarebytes, what browser are you using?

HUNTER.P · 20 Apr 2013 at 17:29

Firefox buts its also got internet explorer too

Hyburnate · 20 Apr 2013 at 17:33

Check the Programs list Control Panel > Programs > Uninstall a program and see if there's anything there. Download Chrome and see if it does it there.

Akagi · 20 Apr 2013 at 17:36

You could also try getting some better antivirus

The best free one I know of is Avast Free, though you might be able to get a free trial of NOD32 (widely regarded as the best antivirus around) and then run a scan to see if it finds anything.

Swordfish · 20 Apr 2013 at 17:40

Safe mode with networking.

Download and run combofix from Bleepingcomputer.com (http://www.bleepingcomputer.com/download/combofix/)

Download and run malwarebytes anti rootkit form malwarebytes.org (http://www.malwarebytes.org/products/mbar/)

Download and run Microsoft MATS tool to reset host file. (http://support.microsoft.com/kb/972034#FixItForMeAlways)

Reset IE to defaults

Check IE and Chrome for nasty addons.

The redirect is 99% caused by a dodgy host file.

Once running normally turn off system restore to delete all restore points. Turn back on and create a clean one (if you want).

Akagi · 20 Apr 2013 at 17:53

Swordfish said:
turn off system restore to delete all restore points.

What. Why? That seems like a terrible idea.

Swordfish · 20 Apr 2013 at 18:01

acme15 said:
What. Why? That seems like a terrible idea.

I clean around 5-6 infected systems per day (on top of everything else) and first rule is switch off system restore. Chances are that any restore point you have created will have the infect in it as well.

Clean the system and then create a fresh new restore point.

Akagi · 20 Apr 2013 at 18:20

Swordfish said:
I clean around 5-6 infected systems per day (on top of everything else) and first rule is switch off system restore. Chances are that any restore point you have created will have the infect in it as well.

Clean the system and then create a fresh new restore point.

What about if the restore points aren't infected, and you find yourself needing to use one because what you already tried hasn't worked, but youve deleted them all?

HUNTER.P · 20 Apr 2013 at 18:46

Swordfish said:
Safe mode with networking.

*SNIP*

Done all that and its still here

I'm not long after a full reformat of my PC but this option is looking to be the easiest

Deleted member 77746 · 20 Apr 2013 at 19:37

Backup your data then format.

Orcvader · 20 Apr 2013 at 20:37

Have you checked your DNS server as well to see if that's been changed?

Swordfish · 20 Apr 2013 at 21:16

acme15 said:
What about if the restore points aren't infected, and you find yourself needing to use one because what you already tried hasn't worked, but youve deleted them all?

Because the method I use will solve the problem 99 times out of 100. On the odd it occasion it does not work then a backup format is required so restore points are still useless.