From: Quilljar on


--
Yrs Quilly (Winchester UK)


"Buffalo" <Eric(a)nada.com.invalid> wrote in message
news:hgj2dl$9je$1(a)news.eternal-september.org...
>
>
> Quilljar wrote:
>> I have suddenly been infected with a nasty which may be called
>> Win32/NugelE (there is a file called abjsysguard.exe which windows 7
>> notification has come up with.)
>>
>> It is preventing me from using Malarebytes and keeps alerting me to a
>> supposed virus whch directs me to a web page about Anti-Viruus Live.
>> this is obviously a scam and I would like to know how to gt rid of
>> it.
>>
>> I have started a long scan with MS Security Essentials, which does
>> not seem to be infected, but wll take ages.
>> I am having to write this on another computer as the attack has
>> affected my ability to get on line.
>
> Curious if you are using the pro version of MBAM and was it running in
> real-time when you got infected?
> Thanks,
> Buffalo
> PS: http://www.2-spyware.com/remove-antivirus-live.html
>
> The above page describes how to manually delete the "anti-virus
> live"
> trojan.
> It sounds pretty simple if you are comfortable deleting entries in the
> Registry.
>
> One suggestion was to use msconfig and boot into diagnostic mode
> and then run MBAM.
>
> However, read the whole page and choose what you want to do.
>
>

From: Buffalo on
Quilljar, no message came through.
Please answer the MBAM question.
Have you looked at the link I provided?
It sounds pretty easy to fix.
Buffalo

Quilljar wrote:
>
> "Buffalo" <Eric(a)nada.com.invalid> wrote in message
> news:hgj2dl$9je$1(a)news.eternal-september.org...
>>
>>
>> Quilljar wrote:
>>> I have suddenly been infected with a nasty which may be called
>>> Win32/NugelE (there is a file called abjsysguard.exe which windows 7
>>> notification has come up with.)
>>>
>>> It is preventing me from using Malarebytes and keeps alerting me to
>>> a supposed virus whch directs me to a web page about Anti-Viruus
>>> Live. this is obviously a scam and I would like to know how to gt
>>> rid of it.
>>>
>>> I have started a long scan with MS Security Essentials, which does
>>> not seem to be infected, but wll take ages.
>>> I am having to write this on another computer as the attack has
>>> affected my ability to get on line.
>>
>> Curious if you are using the pro version of MBAM and was it running
>> in real-time when you got infected?
>> Thanks,
>> Buffalo
>> PS: http://www.2-spyware.com/remove-antivirus-live.html
>>
>> The above page describes how to manually delete the "anti-virus
>> live"
>> trojan.
>> It sounds pretty simple if you are comfortable deleting entries in
>> the Registry.
>>
>> One suggestion was to use msconfig and boot into diagnostic
>> mode and then run MBAM.
>>
>> However, read the whole page and choose what you want to do.


From: VanguardLH on
Quilljar wrote:

> Thanks fo the advice all of which iam trying. /but this is a baaad vius.
> Cananyone tell me how to get Windows 7 into safe mode ? the normal way
> oftapping F8 does not work.

Windows 7 is the same as Windows Vista which is similar to ...

http://www.bleepingcomputer.com/tutorials/tutorial61.html

Maybe you are hitting the F8 too late. Many pre-built computers shove a
spam splash screen on the monitor. Ooooh, it's a Dell as if you didn't
know. As soon as you hit the Reset key to reboot or when you power up, just
keep tapping the F8 key.
From: Sir_George on
To start in "Safe Mode"

"Start" button>type "MsConfig" in the caption box>Select "MsConfig.exe" from
the list>select "Boot" from the menu tabs>under "Boot Options" select "Safe
Mode" and OK your way out.

--
Sir_George

"Quilljar" <Not(a)home.today> wrote in message
news:x7ydnUluVpw40rDWnZ2dnUVZ8smdnZ2d(a)bt.com...
> Thanks fo the advice all of which iam trying. /but this is a baaad vius.
> Cananyone tell me how to get Windows 7 into safe mode ? the normal way
> oftapping F8 does not work.
>
> --
> Yrs Quilly (Winchester UK)
>
>
> "VanguardLH" <V(a)nguard.LH> wrote in message
> news:hgj3e6$krn$1(a)news.albasani.net...
>> Quilljar wrote:
>>
>>> I have suddenly been infected with a nasty which may be called
>>> Win32/NugelE
>>> (there is a file called abjsysguard.exe which windows 7 notification has
>>> come up with.)
>>>
>>> It is preventing me from using Malarebytes and keeps alerting me to a
>>> supposed virus whch directs me to a web page about Anti-Viruus Live.
>>> this is
>>> obviously a scam and I would like to know how to gt rid of it.
>>>
>>> I have started a long scan with MS Security Essentials, which does not
>>> seem
>>> to be infected, but wll take ages.
>>> I am having to write this on another computer as the attack has affected
>>> my
>>> ability to get on line.
>>
>> Will MBAM run okay if you reboot into Windows' safe mode?
>
From: Quilljar on
Thanks all you guys, but you have not taken on board that this virus does
not allow me to do anything. I cannot run msconfig or get to safe mode or
any of the simple stuff you have kindly suggested. After half an hour on the
phone with two BT helpline engineers plus their supervisor, I have been
advised that I will have to send my machine back to the makers (not Dell!)
I have 15 years experience of all the MS operating systems as well as Acorn,
Amstrad and Mac.
I have never come across a virus like this one. I hope none of you ever do!
I will give one more try phoning the makers tomorrow, then I guess
I will have to re-install windows 7. I am sending this post on my old Window
XP machine. Thank God I still have it and everything backed up.

--
Yrs Quilly (Winchester UK)


"Sir_George" <Sir_George(a)noreply.com> wrote in message
news:7p587cF3iuU1(a)mid.individual.net...
> To start in "Safe Mode"
>
> "Start" button>type "MsConfig" in the caption box>Select "MsConfig.exe"
> from the list>select "Boot" from the menu tabs>under "Boot Options" select
> "Safe Mode" and OK your way out.
>
> --
> Sir_George
>
> "Quilljar" <Not(a)home.today> wrote in message
> news:x7ydnUluVpw40rDWnZ2dnUVZ8smdnZ2d(a)bt.com...
>> Thanks fo the advice all of which iam trying. /but this is a baaad vius.
>> Cananyone tell me how to get Windows 7 into safe mode ? the normal way
>> oftapping F8 does not work.
>>
>> --
>> Yrs Quilly (Winchester UK)
>>
>>
>> "VanguardLH" <V(a)nguard.LH> wrote in message
>> news:hgj3e6$krn$1(a)news.albasani.net...
>>> Quilljar wrote:
>>>
>>>> I have suddenly been infected with a nasty which may be called
>>>> Win32/NugelE
>>>> (there is a file called abjsysguard.exe which windows 7 notification
>>>> has
>>>> come up with.)
>>>>
>>>> It is preventing me from using Malarebytes and keeps alerting me to a
>>>> supposed virus whch directs me to a web page about Anti-Viruus Live.
>>>> this is
>>>> obviously a scam and I would like to know how to gt rid of it.
>>>>
>>>> I have started a long scan with MS Security Essentials, which does not
>>>> seem
>>>> to be infected, but wll take ages.
>>>> I am having to write this on another computer as the attack has
>>>> affected my
>>>> ability to get on line.
>>>
>>> Will MBAM run okay if you reboot into Windows' safe mode?
>>