removal help

By hydra13331
May 24, 2009
  1. My friend came to me with a computer that he had just installed the newest version of avg 8.0 (or 8.5?) and it said the computer was infected with He couldn't do anything with it because everything he did popped up saying infected. I have used avg free 7.5 on ubcd4win to remove It said several files were infected including lsass.exe, winlogon.exe, and svchost.exe. I believe avg deleted these files and maybe more, this is from my memory. There were more than 3 infections but some of them were the same file.

    The computer will no longer boot up to the desktop, even in safe mode. It gets to the agp.sys driver (not the correct file name but the one after mup.sys) and reboots.

    Can I replace these files and have a bootable system? If so, are they all located in C:\windows\system32?

    This is a friends computer and he has a lot of software he uses that he doesn't have the cd's for. It is an HP with a recovery partition, so I know I can do a system repair (from the recovery partition) and have his data files saved, but not his software. I have tried system restore (with erd commander 2007) to the last restore point and that still didn't fix it.

    I believe it is updated to service pack 3, but I am not sure, it could be 2.

    Thanks for any help,
  2. Bobbye

    Bobbye Helper on the Fringe Posts: 16,334   +36

    The Win32/PEPatch infection appears to be difficult to remove. However, please follow these steps first:

    Virus and Malware Removal:

    Please run a full system scan with the antivirus and include that log with the logs from the three programs above. If needed, you can download the programs onto a flash drive, then install them on the problem computer.

    Sorry but we need the specifics.

    Again, specifics are needed.
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...