- This topic has 18 replies, 5 voices, and was last updated 17 years, 2 months ago by
.
-
Posts
-
my computer is slower then usual so after deciding to run a virus scan it found nothing… i always have a *edited* ton of processes open but that never phases my comp. I got a semi-new virus scanner and ran that, it found some stuff but wont let me delete it until i get the register number, but i opened up my system32 folder and googled a bunch of *edited* in there and deleted a trojan or 2.
I googled one of the items which happened to be a .dll, its a huge *edited*ing virus and I need to know hjow to remove it, I fear that even if i get the register number for the other virus software it may not be able to delete it. I have gone into safemode and attempted to delete it there too with no luck.
Any suggestions?
#1 suggestion. If you aren’t a computer genius stay out of the windows folder.
The virus may be bad but deleting the wrong dll is far worse.
suggestion #2 what kind of POS virus software are you running that lets you scan but not delete stuff without a registration code? Even AVG and avast! are better than that.
Download and run the following: http://download.bleepingcomputer.com/sUBs/ComboFix.exe and see if that helps at all.
dled and running… i specifically know what file it is otherwise I would remotely test my luck in there, but its gone now… i still have some other *edited* on here so i am running combofix now.
i have symantec and spybot search and destroy but neither caught it….
-Turn off System restore
-download malwarebytes and ccleaner.
-run ccleaner first
-update and run malwarebytes.
-remove the viruses and junk
-restart and voila!
malwarebytes cost mad money…
i ran combofix the whole way through and saved the txt log but now all my comp is showing is my background…there are no icons no bottom tool bar… no start menu option, what should I do?
i also dont know how to turn off system restore and dont have a liunk to ccleaner
936edit… i task managered a restart hopefully that will bring back *edited*
heres the log restarted and can see everything fine was using gfs comp for last post
edit:lol i know i have a bunch of random posts so far with updates but heres another… dled ccleaner and malwarebytes the free version. will run ccleaner first then malwarebytes, thank you so far guys this has really helped.
Only fake antivirus programs “find” things and then refuse to delete them without paying. You’re probably going to want to reformat.
Combofix, SDfix, Malwarebytes, Spybot S&D, HijackThis, and finish with a Onecare free scan.
like i said before symantec and S&D didnt find anything.
CCleaner works absolute wonders, right now malwarebytes is performing scan and is wicked fast too…
I did combofix then CCleaner now malwarebytes and i will restart after malwarebytes does its fix.
Another quick question. Should I dl these programs on my girlmanfriends comp? She has vista.
ok last post
Malwarebytes’ Anti-Malware 1.40
Database version: 2628
Windows 5.1.2600 Service Pack 3
8/14/2009 11:27:30 PM
mbam-log-2009-08-14 (23-27-30).txt
Scan type: Full Scan (C:\|)
Objects scanned: 190249
Time elapsed: 57 minute(s), 21 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 4
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CLASSES_ROOT\Interface\{892b2785-b0d0-4aa2-ae6a-0ed60b00a979} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{e81cf86b-f683-422a-b742-3f2427ea9d6a} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{00476c87-a276-49bf-86bc-ff005732430b} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
Thank you very much for all of your help.
You do realize those entries wouldn’t cause any slowdowns outside IE.
BHO = browser helper object
mywebsearch = IE trojan
Your problems likely lie deeper.
reboot in safe mode and run: http://www.bleepingcomputer.com/resources/link252.html
MasterP said:
You do realize those entries wouldn’t cause any slowdowns outside IE.BHO = browser helper object
mywebsearch = IE trojan
Your problems likely lie deeper.
They did lie deeper…in the 32 folder, i traced the virus back to where it was and one program detected it and deleted it. I am free!
no cause I didnt know what that was or what a reliable source to get it at was either… in hindsight the virus ate 5gigs of *edited*ing space and when I ran the programs I did I got back those 5 that were lost.
YouWinGameOver said:
no cause I didnt know what that was or what a reliable source to get it at was either…I *edited*ing linked to it for you:
Nickname said:
reboot in safe mode and run: http://www.bleepingcomputer.com/resources/link252.html
- The forum ‘PC Hardware Discussion’ is closed to new topics and replies.