Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: ctfmona virus  (Read 4174 times)

0 Members and 1 Guest are viewing this topic.

bubble

    Topic Starter


    Greenhorn

    ctfmona virus
    « on: May 19, 2008, 07:03:19 AM »
    somehow, probably through a dodgy download, the ctfmona virus infected my computer (bugs crawling across screen, blue screen saying warning - your computer has been infected with spyware...!). at the time, stupidly, I didn't have any anti virus protection. following advice from searching forums, by downloading norton anti virus and superspyware, i think i have deleted it as it isn't found in a superspyware scan, and it isn't present in the registry edit anymore but i can't be 100% sure as I don't know that much about computers - does anyone know a way I can check? when researching this i've found lots about doing a hijackthis log but i've no idea how or what this means.
    since it happened, my laptop has been really slow - any advice? does this mean the virus is still there?
    also, when running superspyware again, it doesn't find cftmona but it does find adware tracking cookies - are these normal or part of the virus?
    one website i found said that even if you think you've removed ctfmona you should think twice about using the computer again for anything involving passwords because part of the virus will always be tracking you and therefore your security will always be compromised. is this true?
    any help would be greatly appreciated!
    Bubble

    SuperDave

    • Malware Removal Specialist
    • Moderator


    • Genius
    • Thanked: 1020
    • Certifications: List
    • Experience: Expert
    • OS: Windows 10
    Re: ctfmona virus
    « Reply #1 on: May 19, 2008, 07:39:27 AM »
    Please read and follow the instructions in the first thread at the top of this forum.
    Windows 8 and Windows 10 dual boot with two SSD's

    Carbon Dudeoxide

    • Global Moderator

    • Mastermind
    • Thanked: 169
      • Yes
      • Yes
      • Yes
    • Certifications: List
    • Experience: Guru
    • OS: Mac OS
    Re: ctfmona virus
    « Reply #2 on: May 19, 2008, 07:41:00 AM »

    evilfantasy

    • Malware Removal Specialist
    • Moderator


    • Genius
    • Calm like a bomb
    • Thanked: 493
    • Experience: Experienced
    • OS: Windows 11
    Re: ctfmona virus
    « Reply #3 on: May 19, 2008, 10:42:07 AM »
    Please start here. It is very risky following the directions from others help thread. Please run our removal instructions and then post the logs.

    bubble

      Topic Starter


      Greenhorn

      Re: ctfmona virus
      « Reply #4 on: May 22, 2008, 12:45:09 AM »
      thank you, I am working my way through the steps but everything is taking a long time cuz computer is running so slow! will post the logs asap

      evilfantasy

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Calm like a bomb
      • Thanked: 493
      • Experience: Experienced
      • OS: Windows 11
      Re: ctfmona virus
      « Reply #5 on: May 22, 2008, 12:50:37 AM »
      No problem. Things should start to speed up the further you get along with the removal guide.

      bubble

        Topic Starter


        Greenhorn

        Re: ctfmona virus
        « Reply #6 on: May 22, 2008, 10:46:29 PM »
        Hi, not sure about two items on add/remove programs: AC3 Filter (last used the day I got the virus...) and XVid 1.1.3 final uninstall - should I delete them or are they ok?
        Thanks

        evilfantasy

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Calm like a bomb
        • Thanked: 493
        • Experience: Experienced
        • OS: Windows 11
        Re: ctfmona virus
        « Reply #7 on: May 22, 2008, 10:49:19 PM »
        If you need it then it is OK http://ac3filter.net/

        If you didn't install XVid then it can be removed.

        bubble

          Topic Starter


          Greenhorn

          Re: ctfmona virus
          « Reply #8 on: May 25, 2008, 01:19:49 PM »
          Here are the logs!

          [recovering space - attachment deleted by admin]

          evilfantasy

          • Malware Removal Specialist
          • Moderator


          • Genius
          • Calm like a bomb
          • Thanked: 493
          • Experience: Experienced
          • OS: Windows 11
          Re: ctfmona virus
          « Reply #9 on: May 25, 2008, 01:25:42 PM »
          Open Hijackthis and select Do a system scan only.

          Place a check mark next to the following entries: (if there)

          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

          Important: Close all windows except for Hijackthis and then click Fix checked.

          Exit Hijackthis.

          ----------

          Is Norton a paid version? It isn't running properly.

          bubble

            Topic Starter


            Greenhorn

            Re: ctfmona virus
            « Reply #10 on: May 25, 2008, 01:45:56 PM »
            Ok, done it. What was it?
            Anything else?
            Yeah it is a paid version - what's wrong with it? do u know how I can go about fixing it?

            evilfantasy

            • Malware Removal Specialist
            • Moderator


            • Genius
            • Calm like a bomb
            • Thanked: 493
            • Experience: Experienced
            • OS: Windows 11
            Re: ctfmona virus
            « Reply #11 on: May 25, 2008, 01:49:25 PM »
            Have you updated it lately?

            Set a New Restore Point to prevent possible reinfection from an old one
            Setting a new restore point AFTER cleaning your system will enable your computer to roll-back to a clean working state if needed.
            • Go to Start > Programs > Accessories > System Tools and click System Restore
            • Choose the radio button marked Create a Restore Point on the first screen then click Next Give the Restore Point a name then click Create.
            • The new restore point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
            • Next go to Start > Run and type Cleanmgr
            • Click OK
            • Click the More Options Tab.
            • Click Clean Up in the System Restore section to remove all previous restore points except the newly created clean one.
            .
            Use the Secunia Software Inspector to check for out of date software.
            • Click Start Now
            • Check the box next to Enable thorough system inspection.
            • Click Start
            • Allow the scan to finish and scroll down to see if any updates are needed.
            • Update anything listed.
            .

            Check out Keeping Yourself Safe On The Web for tips and free tools to keep you safe in the future.

            Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.

            bubble

              Topic Starter


              Greenhorn

              Re: ctfmona virus
              « Reply #12 on: June 08, 2008, 09:48:34 AM »
              thank you so much for your help evil fantasy! I definitely recommend your services!