There's a virus in my PC! I need help :S
 

Hi all, i have discovered that there's a virus in my PC that makes the task manager and the registry don't work :S and i have noticed that there is a folder in my C drive and it's called "bifrost" (it contains an "msn" file with a strange icon and it's created in the day the virus infected my PC) and every time I delete it, it comes back ,anyway I formatted my PC but after the format that damn virus is still in my PC and the task manager and the registry are still disabled. When I press Alt+Ctrl+Del an error massage appears "Task Manager has been disabled by your administrator." and when I try to open the registry another error massage appears "Registry editing has been disabled by your administrator." and that Bifrost thing is still in my C drive. Please help me :(

information -> http://en.wikipedia.org/wiki/Bifrost_%28trojan_horse%29

removing -> http://www.exterminate-it.com/malpedia/remove-bifrost

removal tool -> http://www.2-spyware.com/remove-bifrost-gi.html

info + tool -> http://www.411-spyware.com/bifrost-fr-trojan-removal

I downloaded Spyware Doctor, and it found 58 threats and cleaned them, but it didn't solve the problem , the task manager and the registry won't open :(

thats cos the permissions probably changed, did you reboot, rescan, clean (about 3 times?) cos some of the viruses variants are rootkits too, check the information in the manual removal portion of the pages, you might have missed a registry key

I tried that, it didn't solve it :S

I installed windows 7, and for some reason the task manager opens normally, and maybe the virus is gone, but now my PC turn-off by it self every 2 hours or something like that, i don't know why, maybe the virus is still there?

Thats because you downloaded an out of date beta of Windows 7 or a warez release you didnt authenticate.

Either way you got from a dodgey source.

You think it's the "unauthenticated warning black screen"? :p

Lets put it this way, you cant get the old beta from MS anymore, so he must have got from a not so reputable source.

And when you dont authenticate correctly the PC shuts down every now and again.

So not sure what version he has, but the fact remains he didnt get it from proper sources.

Thread closed, then.