Virus Help please

silentrunner · 08-28-08, 09:59 PM

My parents desktop which runs on Windows XP has been infected. My dad turned his computer on and a fake anti-virus program prompted him for installation. It also changed the desktop background to a fake warning message. Avast detected two infected files one was in my documents, and the other is in a WINDOWS file. I can't delete that file repair it. When I try to repair it It sais access denied. Will I have to reinstall XP or what? plz help

FIREWALL · 08-28-08, 10:11 PM

If you still have some control of your computer D\L SuperantiSpyware . It's free and kicks ass.

I had a similar problem that put Symantec\Norton on it's knees.

This fixed it immediately.

Thomen · 08-28-08, 10:20 PM

Quote:

Originally Posted by silentrunner

My parents desktop which runs on Windows XP has been infected. My dad turned his computer on and a fake anti-virus program prompted him for installation. It also changed the desktop background to a fake warning message. Avast detected two infected files one was in my documents, and the other is in a WINDOWS file. I can't delete that file repair it. When I try to repair it It sais access denied. Will I have to reinstall XP or what? plz help

Boot into safe mode with networking and then run an online virus scanner like housecall.

silentrunner · 08-28-08, 11:05 PM

I did another virus scan, and Avast detected a Rootkit, I am in the process of scanning during boot time, because it would not let me run a scan wile the virus was activated. How would I go about getting rid of the rootkit?

Gato76 · 08-29-08, 12:04 AM

same thing happen to me 2 weeks ago, i start my pc and i was welcome by a blue and yellow sign telling me You have malaware install antivirus,i couldn't get rid of the damn thing and i can fix any problem on a pc ,it was just nasty,back up your files and format the hard drive.that's the only way to fix it

Task Force · 08-29-08, 12:14 AM

I tell you the people who start and make Virusis realy need to go get a life (or a Job.)

You should probably do a Virus sweep to see if you could do it the easy way.

(If someone put a Virus on my machine Id be P***** off. Thats why Subsim is the only place I download free stuff from.)

Blacklight · 08-29-08, 12:25 AM

If you can get to it... try this. It works wonders. Do a Full Service Scan. It takes several hours, but it works really well and it also cleans the registry, and all kinds of other good stuff. This is the only thing that got rid of the Virtumonde virus when my PC got infected with it.

http://onecare.live.com/site/en-US/d....htm?s_cid=sah

Jimbuna · 08-29-08, 08:56 AM

You could try either of these:

http://www.kaspersky.com/

http://housecall.trendmicro.com/uk/

08-29-08, 10:56 AM

Quote:

Originally Posted by Task Force

I tell you the people who start and make Virusis realy need to go get a life.

Actually, once I am Evil Overlord of the Earth, they'll be hunted down like rats,
put on public display via world-wide TV, and everyone will watch as a firing squad
puts 30 clips of ammo into their worthless bodies, which are then left to rot in the
street as an example of what happens if you infect the computer belonging to the
Evil Overlord of the Earth.

SUBMAN1 · 08-29-08, 11:12 AM

Quote:

Originally Posted by Zayphod

I'd have to say that this would make me lose any real respect for the person with a head on a stick by his front door.

I might respect the fact that I might also have my head on the stick, but this is a good example of people thinking that respect means power. Hardly. Respect means honesty and integrity. That is what gets 'real' respect.

Don't let me highjack the thread of course!

-S

mcf1 · 08-29-08, 11:46 AM

I had a similar problem a couple months ago.
A message pop up on the IE window and said "your computer has been infected download (a program I don't remember the name) and run a FREE scan, the thing is that my PC downloaded ran the scan itself. And it said that the whole PC was scanned and about 120 threats were found, the scan lasted only a few seconds.
The WHOLE pc scanned in only seconds and I'm talking about 120GB of USED hard disk space, my antivirus would need hours to do that

.
And I was supposed to pay 50$ to "get rid of the threats"
I had only 1 solution in mind, reinstal windows.
My opinion about these "threats" is that you get them from some "whannabe" companies or hackers that want to sell their fake software.

That's it. I left my anger about that out and now I'm feeling great

SUBMAN1 · 08-29-08, 11:59 AM

Avast should get it during the boot time virus check, but since no drivers are loaded to speed up your HD during this test, it TAKES FOREVER!!!

Works though.

Second thing you need to do is download AdAware. Make sure you update the definitions. That will squash all the bugs that are spyware, and this app you are dealing with is spyware by the way.

When you are done with the Adaware scan, you need to pull up a run box and type services.msc. This will bring up the page of services on the machine - stop the Adaware service, and then set it to manual on boot up. This will prevent it from interfering with our next app.

Download Spybot Search and Destroy. Update its definitions and then run a scan with this. It will pick up what the other missed. This will take a long time too. Worse, it will most likely find something that can't be removed while the system is running, and it will want to shut down and scan at boot up in a not so similar manner to Avast that you describe above (except that it will boot further into the system). This will also take forever.

When all is said and done, pull up a runbox and type in cmd. In the command window, type in chkdsk /f to make sure your file system is intact (It is good to do this once in a while to avoid corruption). It will also want to reboot the machine, but it doesn't take very long.

Another thing you might want to follow up with is to Defrag your HD at some point. Should make things boot quicker in the future.

That is the process I would use if I were doing it. I've done it enough in my life to know what works. That is the reason I tell you to run those 2 Spyware checking apps in that order (They are the best in the business for spyware checking by the way). One will catch what the other misses.

I hope this helps, and let it be known, it is a very long process.

-S

Digital_Trucker · 08-29-08, 12:22 PM

After you get it cleaned up, use Spybot Search and Destroys "immunize" function to help avoid future infestations. Spyware Blaster and Ad-Aware 2008 are also good tools to help avoid/get rid of adware and other malware. Most important (as has been stated before) is keeping all of these protection tools updated and using them on a regular basis.

silentrunner · 08-29-08, 03:33 PM

I think I might just format the hard drive just to make shure the root kit is gone. There was actually three things at once. A VB virus that was the first one to appear. THen the next it booted the fake antivirus software poped up. Avst then dtected the trojan, but I could not dlete the filr. Than a while later it dtected that a root kit had been installed. So just to be 100% safe I am going to format the hard drive.

Jimbuna · 08-30-08, 07:29 AM

Reformatting is always the 100% surefire way of disposing of a nasty, but what a price to pay

08-28-08, 09:59 PM	#1
silentrunner Watch Officer Join Date: Aug 2007 Location: Mind your own business English Types Posts: 334 Downloads: 0 Uploads: 0	Virus Help please My parents desktop which runs on Windows XP has been infected. My dad turned his computer on and a fake anti-virus program prompted him for installation. It also changed the desktop background to a fake warning message. Avast detected two infected files one was in my documents, and the other is in a WINDOWS file. I can't delete that file repair it. When I try to repair it It sais access denied. Will I have to reinstall XP or what? plz help __________________

08-28-08, 10:11 PM	#2
FIREWALL Eternal Patrol Join Date: Mar 2006 Location: CATALINA IS. SO . CAL USA Posts: 10,108 Downloads: 511 Uploads: 0	If you still have some control of your computer D\L SuperantiSpyware . It's free and kicks ass. I had a similar problem that put Symantec\Norton on it's knees. This fixed it immediately. __________________ RIP FIREWALL I Play GWX. Silent Hunter Who ???

08-28-08, 11:05 PM	#4
silentrunner Watch Officer Join Date: Aug 2007 Location: Mind your own business English Types Posts: 334 Downloads: 0 Uploads: 0	I did another virus scan, and Avast detected a Rootkit, I am in the process of scanning during boot time, because it would not let me run a scan wile the virus was activated. How would I go about getting rid of the rootkit? __________________

08-29-08, 12:14 AM	#6
Task Force Rear Admiral Join Date: Jul 2008 Location: SPACE!!!! Posts: 10,142 Downloads: 85 Uploads: 0	I tell you the people who start and make Virusis realy need to go get a life (or a Job.) You should probably do a Virus sweep to see if you could do it the easy way. (If someone put a Virus on my machine Id be P***** off. Thats why Subsim is the only place I download free stuff from.) __________________ Task Force industries "Taking control of the world, one mind at a time"

08-29-08, 12:25 AM	#7
Blacklight Ocean Warrior Join Date: Sep 2006 Location: Connecticut Posts: 2,507 Downloads: 142 Uploads: 0	If you can get to it... try this. It works wonders. Do a Full Service Scan. It takes several hours, but it works really well and it also cleans the registry, and all kinds of other good stuff. This is the only thing that got rid of the Virtumonde virus when my PC got infected with it. http://onecare.live.com/site/en-US/d....htm?s_cid=sah __________________ Be my friend or be a mushroom cloud. "I am coming at you. You will explode in a couple of minutes !"

08-29-08, 12:04 AM	#5
Gato76 Planesman Join Date: Apr 2008 Posts: 192 Downloads: 82 Uploads: 0	same thing happen to me 2 weeks ago, i start my pc and i was welcome by a blue and yellow sign telling me You have malaware install antivirus,i couldn't get rid of the damn thing and i can fix any problem on a pc ,it was just nasty,back up your files and format the hard drive.that's the only way to fix it

08-29-08, 08:56 AM	#8
Jimbuna Chief of the Boat Join Date: Feb 2006 Location: 250 metres below the surface Posts: 181,198 Downloads: 63 Uploads: 13	You could try either of these: http://www.kaspersky.com/ http://housecall.trendmicro.com/uk/ __________________ Wise men speak because they have something to say; Fools because they have to say something. Oh my God, not again!! GWX3.0 Download Page - Donation/instant access to GWX (Help SubSim)

08-29-08, 11:46 AM	#11
mcf1 Seasoned Skipper Join Date: Oct 2007 Location: Greece, Volos Posts: 710 Downloads: 10 Uploads: 0	I had a similar problem a couple months ago. A message pop up on the IE window and said "your computer has been infected download (a program I don't remember the name) and run a FREE scan, the thing is that my PC downloaded ran the scan itself. And it said that the whole PC was scanned and about 120 threats were found, the scan lasted only a few seconds. The WHOLE pc scanned in only seconds and I'm talking about 120GB of USED hard disk space, my antivirus would need hours to do that . And I was supposed to pay 50$ to "get rid of the threats" I had only 1 solution in mind, reinstal windows. My opinion about these "threats" is that you get them from some "whannabe" companies or hackers that want to sell their fake software. That's it. I left my anger about that out and now I'm feeling great

08-29-08, 11:59 AM	#12
SUBMAN1 Rear Admiral Join Date: Apr 2005 Posts: 11,866 Downloads: 0 Uploads: 0	Avast should get it during the boot time virus check, but since no drivers are loaded to speed up your HD during this test, it TAKES FOREVER!!! Works though. Second thing you need to do is download AdAware. Make sure you update the definitions. That will squash all the bugs that are spyware, and this app you are dealing with is spyware by the way. When you are done with the Adaware scan, you need to pull up a run box and type services.msc. This will bring up the page of services on the machine - stop the Adaware service, and then set it to manual on boot up. This will prevent it from interfering with our next app. Download Spybot Search and Destroy. Update its definitions and then run a scan with this. It will pick up what the other missed. This will take a long time too. Worse, it will most likely find something that can't be removed while the system is running, and it will want to shut down and scan at boot up in a not so similar manner to Avast that you describe above (except that it will boot further into the system). This will also take forever. When all is said and done, pull up a runbox and type in cmd. In the command window, type in chkdsk /f to make sure your file system is intact (It is good to do this once in a while to avoid corruption). It will also want to reboot the machine, but it doesn't take very long. Another thing you might want to follow up with is to Defrag your HD at some point. Should make things boot quicker in the future. That is the process I would use if I were doing it. I've done it enough in my life to know what works. That is the reason I tell you to run those 2 Spyware checking apps in that order (They are the best in the business for spyware checking by the way). One will catch what the other misses. I hope this helps, and let it be known, it is a very long process. -S __________________

08-29-08, 12:22 PM	#13
Digital_Trucker Silent Hunter Join Date: Jul 2007 Location: The Peach State Posts: 4,171 Downloads: 141 Uploads: 10	After you get it cleaned up, use Spybot Search and Destroys "immunize" function to help avoid future infestations. Spyware Blaster and Ad-Aware 2008 are also good tools to help avoid/get rid of adware and other malware. Most important (as has been stated before) is keeping all of these protection tools updated and using them on a regular basis. __________________ RSM-GIEP-Killflags-LV Tribute-Playable Elco __Peace be with you, Dave.

08-29-08, 03:33 PM	#14
silentrunner Watch Officer Join Date: Aug 2007 Location: Mind your own business English Types Posts: 334 Downloads: 0 Uploads: 0	I think I might just format the hard drive just to make shure the root kit is gone. There was actually three things at once. A VB virus that was the first one to appear. THen the next it booted the fake antivirus software poped up. Avst then dtected the trojan, but I could not dlete the filr. Than a while later it dtected that a root kit had been installed. So just to be 100% safe I am going to format the hard drive. __________________

08-30-08, 07:29 AM	#15
Jimbuna Chief of the Boat Join Date: Feb 2006 Location: 250 metres below the surface Posts: 181,198 Downloads: 63 Uploads: 13	Reformatting is always the 100% surefire way of disposing of a nasty, but what a price to pay __________________ Wise men speak because they have something to say; Fools because they have to say something. Oh my God, not again!! GWX3.0 Download Page - Donation/instant access to GWX (Help SubSim)