EXTREME Overclocking Forums
Home | Reviews | Forums | Downloads | $ EXTREME Deals $ | RealTime Pricing | Free Magazines | Gear | Folding Stats Newsletter | Contact Us


Go Back   EXTREME Overclocking Forums > Software Discussion > Antivirus & Spyware

Closed Thread
 
Thread Tools
Old 10-09-2010, 11:26 AM   #1
arjunmallik
Running System Stock
Forum Newbie
 
Join Date: Oct 2010
Posts: 1
how to get rid of .ink virus?

hello! can anyone solve my issue?

my memorycard in phone and all the pendrives are getting affected with .ink extensions.
i'm unable to access any folder......

even my browsers chrome,firefox and othr applications like picasa image viewer, pc suite etc. are getting shut down frequently.........

pls someone help me out........ im attaching the hijackthis boot file...
Attached Files
File Type: txt hijackthis.txt (6.8 KB, 115 views)
Offline  
Old 10-09-2010, 11:48 AM   #2
JJT*90
I love Conroes.
Senior Member
 
JJT*90's Avatar
 
Join Date: Apr 2009
Location: Indiana
Age: 25
Posts: 1,068
iTrader: 0 / 0%
Requested a move to the anti-virus section for you. You will probably have better luck there.
__________________
Offline  
Old 10-10-2010, 10:36 PM   #3
crunchie
Mad Warranty Voider
Senior Member
 
crunchie's Avatar
 
Join Date: May 2007
Location: Mandurah. Aussie
Age: 58
Posts: 1,539
iTrader: 0 / 0%
Sorry to be the bearer of bad news, but there is only one way to get rid of the .ink virus aka Virut aka Sality and that is a full reformat.
__________________
AMD 1090T BE @ 4050 1.375vcore
Gigabyte GA-890FXA-UD5 F3 BIOS
GSkill Flare 2x2Gb 1.65v F3-16000CL7D-4GBFLS 6-8-6-22-1T @ 1800Mhz
GSkill Phoenix Pro 120Gb SSD
Gigabyte HD6870's xfired
Corsair HX850
CM HAF-X


Offline  
Old 10-10-2010, 11:24 PM   #4
Neox69
Ike
Senior Member
 
Neox69's Avatar
 
Join Date: Feb 2008
Location: Chicago
Age: 32
Posts: 1,045
iTrader: 48 / 100%
Old, but a work around to save your files:

http://forums.extremeoverclocking.co...d.php?t=219620
__________________
"You are to my fun, as a clown dressed like a tumor is to a paediatric oncology ward." - Zlander79

"Honestly i just wanted to run enough voltage to fry a testicle through it and see if it would do 4GHz." - K31TH3R

"And also, as long as the gun doesn't put you into bankruptcy, or kills your cat, or slices off your b@lls, why not own one?" - FX5200

"We got skynet by the balls now!" - Jason

"So many ball sigs in your sig..." - krone6 (in reference to my sig)
Offline  
Old 10-13-2010, 07:35 PM   #5
thread
Mad Warranty Voider
Senior Member
 
thread's Avatar
 
Join Date: Jun 2006
Location: Melbourne, Aus
Age: 30
Posts: 2,259
iTrader: 1 / 100%
Try this for a clean from a removable read-only disk (scroll down to NT instructions):
http://www.sophos.com/support/disinfection/pedis.html

Additional Comment:

(ie CD-ROM)

Additional Comment:

This is for "lightly infected" computers, dunno what category yours is.
__________________

Last edited by thread; 10-13-2010 at 07:35 PM. Reason: Automerged Doublepost
Offline  
Old 10-14-2010, 03:37 AM   #6
crunchie
Mad Warranty Voider
Senior Member
 
crunchie's Avatar
 
Join Date: May 2007
Location: Mandurah. Aussie
Age: 58
Posts: 1,539
iTrader: 0 / 0%
Quote:
Originally Posted by thread View Post
Try this for a clean from a removable read-only disk (scroll down to NT instructions):
http://www.sophos.com/support/disinfection/pedis.html

Additional Comment:

(ie CD-ROM)

Additional Comment:

This is for "lightly infected" computers, dunno what category yours is.
Heavily
__________________
AMD 1090T BE @ 4050 1.375vcore
Gigabyte GA-890FXA-UD5 F3 BIOS
GSkill Flare 2x2Gb 1.65v F3-16000CL7D-4GBFLS 6-8-6-22-1T @ 1800Mhz
GSkill Phoenix Pro 120Gb SSD
Gigabyte HD6870's xfired
Corsair HX850
CM HAF-X


Offline  
Old 10-16-2010, 03:10 PM   #7
imshirazy
User #4927/165903
Senior Member
 
imshirazy's Avatar
 
Join Date: Nov 2004
Location: CT
Age: 28
Posts: 1,355
iTrader: 1 / 100%
ughhh go****itttt i've had that virus 3 times and I was able to get rid of it the last time. I had a thread on THIS forum about it I think...brb


edit: sorry dude can't find it...I remember that there were two files you need to find. One file restores the active shortcuts on your desktop, the other one does something similar. They are both registry files you need to find online. At that point you can go back online. If you can't find them, you can still go on the internet even though all your extensions are changed. Simply open up any regular folder, and type in the URL.

Additional Comment:

or do what crunchie says here
http://forums.extremeoverclocking.co...d.php?t=326824
__________________
ما در طبیعت، هر یک از دیگر صدمه دیده است، برای شما فقط به خودتان صدمه
I've had experience in banking management/underwriting/insurance/securities/investments, I don't mind PMs with questions in regards to these, so please ask!!

Last edited by imshirazy; 10-16-2010 at 03:10 PM. Reason: Automerged Doublepost
Offline  
Old 10-16-2010, 09:44 PM   #8
Neox69
Ike
Senior Member
 
Neox69's Avatar
 
Join Date: Feb 2008
Location: Chicago
Age: 32
Posts: 1,045
iTrader: 48 / 100%
^^^ I linked your post, look up.
__________________
"You are to my fun, as a clown dressed like a tumor is to a paediatric oncology ward." - Zlander79

"Honestly i just wanted to run enough voltage to fry a testicle through it and see if it would do 4GHz." - K31TH3R

"And also, as long as the gun doesn't put you into bankruptcy, or kills your cat, or slices off your b@lls, why not own one?" - FX5200

"We got skynet by the balls now!" - Jason

"So many ball sigs in your sig..." - krone6 (in reference to my sig)
Offline  
Sponsored Links:
Closed Thread

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -6. The time now is 12:03 PM.

Copyright 2000 - 2016, vBulletin Solutions, Inc.
Powered by vBulletin
Copyright 2000 - 2016, EXTREME Overclocking