Antimalware progs wont run, URLs redirected to "localhost"

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by wingalls, Feb 4, 2009.

  1. wingalls

    wingalls Private E-2

    I haven't identified this virus yet because of the way it prevents common antimalware tools from running.

    I was able to get SUPERAntiSpyware to run, but only by using the provided "RUNSAS.EXE" file.

    I recommend that you add the following information to the "SUPERAntiSpyware - running & getting a log" FAQ (http://forums.majorgeeks.com/showthread.php?t=127217), just before "If asked to update the program definitions..":

    If you are unable to run SUPERAntiSpyware from the icon, it may be because a virus is preventing it. Try going to C:\Program Files\SUPERAntiSpyware folder and double-click on "RUNSAS.EXE".


    http://forums.majorgeeks.com/showthread.php?t=127217
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Thanks for the comment however it is no so straight forward. That procedure contains downloading, installing and running steps. For many people, new malware does not even allow them to download the installer file or they may be able to download the installer file, but they cannot run the installation.

    RUNSAS.EXE will only help once you have been successful at downloading and installing the program. In addition, RUNSAS only loads the icon into the tray and does not popup the program onto the Desktop. Most people miss this fact and just assume SUPERAntiSpyware is not working. If you run it twice it will actully show the forms to run scans. Or after the icon appears in the tray, you can double click it to get the proper window to show.

    If you have been able to download and install SAS and then goto Start, All Programs, SUPERAntiSpyware, you will see there is a selection titles SUPERAntiSpyware Alternate Start which actually just runs RUNSAS.exe instead of SUPERAntiSpyware.exe During our initial instructions, no one is running it this way because they are simply downloading and installing it for the first time and it just may not work. Thus they will not even get to this point of trying to use RUNSAS or using Start, All Programs......etc.

    Frequently are renaming tip will help. With some new infections it does not.

    All of this is just to much of an annoyance and complication to have to add to the instructions which are long enogh already in an attempt to work past all kinds of problems.

    Another tip we give people is the below since this infection can block SAS and other tools from running.

     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds