Computer Viruses

Log into Windows Safe Mode. To get to safe mode reboot your computer and start pressing the F8 key repeatedly until the Safe Mode options screen appears. You want Safe Mode which is the first option, not Safe Mode with Networking.

If any user id's how up select the Administrator, if not don't worry about it. Once safe mode is up Click on My Computer and open your C: drive. Click on Tools/Folder Options/View. Then click on Show Hidden Files and Folders.

Green AV is normally located by navigating to the following directories: C:\Program Files\Documents and Settings\All Users\Application Data\GAV\gav.exe

1. Delete gav.exe which is the executable module for the virus
2. Delete mgrdll.exe this is the messenger for gav that keeps sending you the messges and popups
3. Delete the folder GAV (just hit your back arrow one time to get back to folder Application Data then you will be able to see and delete folder GAV
4. Right Click on your Recycle Bin and select Empty Recycle Bin or Double Click on your Recycle Bin and select Empty Recycle Bin

Now reboot your system and you should be rid of the pesky virus

Well im not sure but i take it you have an illegally downloaded copy of this program from a torrent site, this will dis-allow you to update the program as it would void your fake key.

Im not sure if this is the case or not, because you simply should be able to click "Fix It" And the updates should just automatically download.

Thank you and good day

Answer 2:

The above answer made a number of unfortunate assumptions, that I will attempt to clear up.

There are no illegal copies of Kaspersky Anti-virus or Internet security on torrents or otherwise, the simple reason being that Kaspersky offer a 1 month free trial version of either program on their website. However fake keys for Kaspersky do exist. A fake key/or duplicate would give a "key blacklisted" message (as described on their website), and not a "database obsolete" message.

If you're Kaspersky virus definitions are out of date, you will get a "database out of date" message, after this if Kaspersky is not updated for a while, the next message you get is "database is obsolete".

This can happen if you have your updater set to manual and not automatic, or if your current purchased license has expired. So either do a manually update (press update button), or set updates to automatic (i.e., it will update automatically whenever new virus definitions are available). If your license has expired, then you'll have to buy another one to update. If you can't update your database with these options then contact their customer support, or ask for help on their forum.

In either event, Kaspersky does not become inactivated if the database is obsolete (no matter for how long it is left for), and will work as normal. However it will use the old virus definitions until it is updated.

Trojan dropper can be cleaned and removed with the hep of your licensed antivirus. sometimes you might not get exactly where the torjan exists, so recommended opt for Antivirus scan.

Trojan Dropper is a backdoor Trojan computer virus. This means that once the Trojan infects your computer, it opens a security home (or "backdoor"), which can then be used by remote hackers to access your private information and download large amounts of adware onto your computer. Moreover, Trojan Dropper will slow your computer and generate pop-ups. Fortunately, the Trojan can be removed manually before causing irreparable damage.

1.Press "Ctrl," "Shift" and "Escape" simultaneously to open the Task Manager.

2.Click the "Processes" tab.3.Click "Show Processes From All Users."4.End the following processes (o do so, right-click the process and select "End Process"):

• search[2].exe
• sysrtmvs.exe
• senh.exe
• wd7gi8nnew.exe
• visfx500new.exe
• OEM.exe
• numbsoftnew.exe
• Mendoza1.exe
• Mendoza.exe

5.Close the Task Manager.

6.Click "Start," type "regedit" into the "Search" box, and press "Enter" to open the Registry Editor.

7.Delete the following registry entry from the left pane of the Registry Editor: Microsoft\Windows\CurrentVersion\Emitt

• To delete a registry entry, right-click the entry and select "Delete." If you are having trouble locating the entry, click "Edit," "Find" and type the name of the entry into the "Find" box.

8.Close the Registry Editor.

9.Click "Start," and click the "Search" box.

10.Search for and delete each of the following files:

• search[2].exe
• sysrtmvs.exe
• aouei
• senh.exe
• wd7gi8nnew.exe
• visfx500new.exe
• OEM.exe
• numbsoftnew.exe
• Mendoza1.exe
• Mendoza.exe

11.Restart your computer.

sysupd.exe is a process process associated with an Dialer application. It tries to disconnect your current internet connection and dial a toll number with ...

www.liutilities.com/products/wintaskspro/processlibrary/sysupd/

Run Malwarebytes Anti-Malware

Run the anti spyware removal programs spybot

Run Superantispyware

Run a complete scan with free curing utility Dr.Web CureIt!

1) Write a batch file killsysupd.battop

ren sysupd.exe xxx del sysupd.exe goto top

Start this batch file - it will run continuously.

2) Press Ctrl-Alt-Del to go into Task Manager. Right click on the sysupd process and select Set Priority. Set it to Low. Now find the process for your batch file and set this to High.

3) Highlight the sysupd process and choose End Process.Confirm Yes and the batch file running at high priority should be able to kill the program before it can restart.

4) Switch to the batch file window. When it starts saying file not found you can press Ctrl-C to end the batch file.

Here is more input:

• Install a firewall on your machine. there are free ones you can find easily. using the firewall you can stop the sysupd.exe from doing whatever it is doing online, which was prohibiting you from stopping the service. ctrl+alt+delete to bring up the task manager and stop the service. if you close task manager, I've found the sysupd.exe starts right back up, so don't close the task manager until you've searched for the sysupd.exe on your machine, and deleted it completely. cool.

enjoy.

• Sysupd.exe is a known dialer and also accompanies dpusys.ini usually found on the desktop, but known to other locations as well. To get rid of, end process on sysupd.exe. Make sure that you are set to see all hidden system files and folders. Search your hard drive for the following SYSUPD.EXE and DPUSYS.INI. Delete all found instances of these files. Reboot!

• Delete the sysupd.exe from registry. Download the adaware 6.0 {www.tinyurl.com/tjxr} do a complete scan..delete all infected files. Do a complete chk for sysupd.exe in the whole system. Delete it. It should work out.

• Make sure you check the Startup folder (Start->Program Files->Startup) and look for a wscript file. It is a Visual Basis script file that generates network traffic via Internet Explorer and (I believe) always tries to reinfect the PC.

• I found deleting sysupd.exe difficult. It worked in conjuction with a program called Advertimondo. I tried to delete if from the start-up menu and it wouldn't let me. McAfee viruscan found it but since it contstantly runs it wouldn't let me delete it. I finally went to the registry and did a find on sysupd.exe and deleted all references. One problem is it is resident in the reg start up folder. doing this apparently got rid of it since it no longer runs and I can find no reference to it in task manager, McAfee and the startup menu. The program was also imbedded in Advertimondo. This was really a pain in the neck.

• To end and delete 'sysupd.exe' from WinXP this is what I had to do: run a command prompt; find the sysupd.exe file in C:\windows; RENAME the file to sysupd.old (attempting to delete the file while in memory returns "access denied" error). Once the file is renamed then you may end the process in Taskmgr and once that process is killed you can go back into C:\Windows and delete the file you renamed (sysupd.old), reboot and run SpybotS&D, AdAware, Webroot Spysweeper, etc., to remove any remnants of the bundle that remain.

• Here's what worked for me: locate the directory containing sysupd.exe. Open Task Manager Processes and find sysupd.exe. Run some CPU intensive apps to slow your machine down, this should give you a couple of seconds between killing the process and it restarting, enough to flip over to the directory and deleting the .exe

• I wrote this batch file, started some CPU intensive task, and ran this. pskill sysupd ren c:\windows\sysupd.exe sysupd.old del c:\windows\sysupd.exe del c:\windows\sysupd.old dir c:\windows\sysupd.* In this order it was fast enough to delete it. Remember to clean your registry as well afterwards. No reboot required.

• I found this really hard to get rid of - the process restarts itself as fast as you terminate it in Task Manager and the file is recreated eevry time you rename or delete it.

Filter Results is an adware in fact sneaking into your PC without making you any inform and warning. When you are aware of its existence, it is too late, because it has made you in trouble.

If you want to know more about it and remove it from your PC, there are two removal guides-manual removal and automatic removal guides in virusremovalexpert.blogspot.com. I hope you can get help from it.