help with virus removal

[kpi_125]

hi

someone sent me a virus through msn but, it hasnt actually been 'installed' on my computer. everytime i start up my computer however it asks would i like to accept or decline. i always click decline so nothing happens

does anyone know how i can find the file and get rid of it without having to re-format my computer?

thanks

[infoseeker]

installed the following and [highlight]update them first[/highlight] then scan your pc with them

Ad-Aware: http://www.majorgeeks.com/Ad-Aware_SE_Personal_d506.html
Spybot: http://www.majorgeeks.com/SpyBot-Search_&_Destroy_d2471.html

after that installed AV [highlight]update them first[/highlight] then scan your pc
 AVG Free Edition: http://www.majorgeeks.com/download.php?det=886
(dont install/run 2 antivirus at the same time)

Scan your pc online
http://www.pandasoftware.com/products/activescan?NRMODE=Published&NRORIGINALURL=%2factivescan&NRNODEGUID=%7b3B202047-35D4-4DA2-B310-B1DBEC2971F2%7d&NRCACHEHINT=Guest

[Flame]

Can you tell us what the virus name is? What protection is currently installed?

Flame

[GX1_Man]

Have a read:

http://www.computerhope.com/cgi-bin/yabb/YaBB.cgi?num=1149948530

[kpi_125]

im using McAfee AntiSpyware

and when the box thing comes up its; jnciqoydlg.exe

[RemoteTechPC]

run spybot and adaware in safe mode and then download hijackthis and put a log here to help you out,

[GX1_Man]

im using McAfee AntiSpyware

and when the box thing comes up its; jnciqoydlg.exe

And does McAfee recognize this when you run it?

[RapedApe]

Find the file by going start -> search -> all files and folder and then type the name of the virus there. Once you find where it is you can just disable it's permission to run. Go start -> run -> cmd, then type

Code: [Select]

cacls c:\windows\system32\jnciqoydlg.exe /p guest:n
This is assuming the file is in the system32 folder, if it's in a different one you just put a different directory in it's place. Scans are still a good idea but if they don't help give this a shot.

[kpi_125]

thanks

but it kinda deleted itself, coz it wasnt 'saved' on 2 my computer and after asking if it wanted to open for like 3 days and i always click cancel it just went.

[unlovedwarrior]

well thats a good thing.. but did you search for it?

cuz it might have went and hybernated for alil bit