virus help

JHuschke · 07-22-08, 01:26 AM

What are you using? You should get a better firewall, get ZL.

http://www.zonealarm.com/store/content/home.jsp

It's what I use, hunts em down and kills em.

Skybird · 07-22-08, 03:01 AM

This would be the time for me to turn on paranoid mode, since éven after a "repair" I am not able to put trust in my installation anymore. I would format and reinstall, not using any saved data from the time period since you became aware of something beeing messed up.

Guys, use an installation image on a separate drive to do a backup of your basic installation. that way reinstallaing is a breeze, only updates and working files/save games you need to copy over by hand. This has been one of the best investments in my PC I ever did. Acronis software 45 euros, second HD in frame 50-60 euros - "und gut is'. " just do not leave the image HD connected to the computer, so that it cannot get infested. Physical separation/interruption is always a million times better than any software solution to protect a device from something - every software code can be beaten.

d@rk51d3 · 07-22-08, 03:08 AM

Also, try booting into "safe mode" first , THEN run your scans. You'll usually detect even more nasties.

SteveW1 · 07-22-08, 04:11 AM

I had this same situation recently myself, every time I opened up explorer an advert would load instantly telling me to download their program.

I tried multiple adware programs as well as virus scanners, they wouldn't pick up diddly squat so in the end I backed up 8 DVD's worth of data and reformatted my hard drive.

No problems now after formating and reinstalling.

Hope you get your problem sorted nikimcbee.

Steve

kiwi_2005 · 07-22-08, 04:17 AM

Hijacked. I got a similar one once, Spybot killed it.

Skybird · 07-22-08, 05:07 AM

Quote:

Originally Posted by SteveW1

I tried multiple adware programs as well as virus scanners, they wouldn't pick up diddly squat so in the end I backed up 8 DVD's worth of data and reformatted my hard drive.

You must be aware that it holds a risk to create backups from the time your system already has been affected. It is better to do regular backups, or incremental backups, of your wokring files, and have three sets of them from the past three (or how many you want) timestamps, so that you can always go back to a backup originating from a time when everything still was in order. else you reinstall your system, copy your infested data back to it - and you are were you started, in the middle of the mess.

UnderseaLcpl · 07-22-08, 05:29 AM

Had the same problem. I looked it up on google, found a forum that addressed it and listed registry values to delete. I wouldn't download any auto-fixes as some of them are malware as well.

I don't know anything about the registry or programming but I managed to get it to work.

Of course there is always factory restore if you have the disk.

Or you could get a mac

SUBMAN1 · 07-22-08, 10:43 PM

A good virus will watch the registry since it is typically executed from 2 or more locations. Try and delete one, and it will automatically replace it.

Same with BHO's. Delete one, and a good virus or Adware program will automatically replace it.

The only real way to delete one is to use software, or to do it manually from a safe mode or even a command prompt repair mode from your XP CD.

Spybot however will get rid of what it is you have issue with. Spybot however cannot repair any damage caused by whatever you have so if it has physically damaged something, not much you can do about it.

Skybird mentions he doesn't like repair mode since he doesn't trust it. That is nonsense. Repair mode however is a last resort since you will be loading patches again to fix holes.

-S

07-22-08, 03:01 AM	#2
Skybird Soaring Join Date: Sep 2001 Location: the mental asylum named Germany Posts: 42,687 Downloads: 10 Uploads: 0	This would be the time for me to turn on paranoid mode, since éven after a "repair" I am not able to put trust in my installation anymore. I would format and reinstall, not using any saved data from the time period since you became aware of something beeing messed up. Guys, use an installation image on a separate drive to do a backup of your basic installation. that way reinstallaing is a breeze, only updates and working files/save games you need to copy over by hand. This has been one of the best investments in my PC I ever did. Acronis software 45 euros, second HD in frame 50-60 euros - "und gut is'. " just do not leave the image HD connected to the computer, so that it cannot get infested. Physical separation/interruption is always a million times better than any software solution to protect a device from something - every software code can be beaten. __________________ If you feel nuts, consult an expert.

07-22-08, 04:11 AM	#4
SteveW1 Watch Officer Join Date: Dec 2005 Location: Melbourne, Australia Posts: 331 Downloads: 75 Uploads: 0	I had this same situation recently myself, every time I opened up explorer an advert would load instantly telling me to download their program. I tried multiple adware programs as well as virus scanners, they wouldn't pick up diddly squat so in the end I backed up 8 DVD's worth of data and reformatted my hard drive. No problems now after formating and reinstalling. Hope you get your problem sorted nikimcbee. Steve __________________

07-22-08, 04:17 AM	#5
kiwi_2005 Eternal Patrol Join Date: May 2004 Location: Aeoteroa Posts: 7,382 Downloads: 223 Uploads: 1	Hijacked. I got a similar one once, Spybot killed it. __________________ RIP kiwi_2005 Those who can't laugh at themselves leave the job to others.

07-22-08, 05:29 AM	#7
UnderseaLcpl Silent Hunter Join Date: May 2008 Location: Storming the beaches! Posts: 4,254 Downloads: 0 Uploads: 0	Had the same problem. I looked it up on google, found a forum that addressed it and listed registry values to delete. I wouldn't download any auto-fixes as some of them are malware as well. I don't know anything about the registry or programming but I managed to get it to work. Of course there is always factory restore if you have the disk. Or you could get a mac __________________ I stole this sig from Task Force

07-22-08, 10:43 PM	#8
SUBMAN1 Rear Admiral Join Date: Apr 2005 Posts: 11,866 Downloads: 0 Uploads: 0	A good virus will watch the registry since it is typically executed from 2 or more locations. Try and delete one, and it will automatically replace it. Same with BHO's. Delete one, and a good virus or Adware program will automatically replace it. The only real way to delete one is to use software, or to do it manually from a safe mode or even a command prompt repair mode from your XP CD. Spybot however will get rid of what it is you have issue with. Spybot however cannot repair any damage caused by whatever you have so if it has physically damaged something, not much you can do about it. Skybird mentions he doesn't like repair mode since he doesn't trust it. That is nonsense. Repair mode however is a last resort since you will be loading patches again to fix holes. -S __________________

07-22-08, 01:26 AM	#1
JHuschke XO Join Date: May 2008 Location: Munich, Germany Posts: 432 Downloads: 32 Uploads: 0	What are you using? You should get a better firewall, get ZL. http://www.zonealarm.com/store/content/home.jsp It's what I use, hunts em down and kills em.

07-22-08, 03:08 AM	#3
d@rk51d3 Sea Lord Join Date: Sep 2006 Location: Adelaide, South Australia Posts: 1,952 Downloads: 207 Uploads: 0	Also, try booting into "safe mode" first , THEN run your scans. You'll usually detect even more nasties.