Computer Hope
Software => Computer viruses and spyware => Topic started by: Frymaster on January 18, 2008, 04:16:48 PM
-
Hi everyone, recently I've had problems with a virus..I run my AVG scan and it finds a file in my Documents and Settings/Local Settings/Temp folder...the file name changes, but it starts with a $ and then is a bunch of seemingly random numbers and letters, with an ending of .t$m
When AVG picks it up, it detects two files right after one another; the first one with a name of, say, $123BBDW56.t$m and then the second one would be $223BBDW56.t$m, like there's a numerical order.
Anybody know what this is? The files get quarantined but keep reappearing each time I do a check and I believe it's affecting which programs I can install (for instance, I tried getting the new iTunes but it couldn't be run due to a bad signature..I'm blaming the virus but I'm not totally sure).
-
1. Run free ESET Online Scanner at: http://www.eset.com/onlinescan/ (http://www.eset.com/onlinescan/)
Note: This Scanner is for Internet Explorer Only
1. You will notice that the "Start" button is grayed out. Place a check mark at "Yes, I accept the Terms of use". The "Start" button will become visible. Click on it.
2. If it wants to install an ActiveX component allow it
3. You will be asked to install an ActiveX, click the "Install" button (Note: If you have a Firewall install you may have to approve the installation)
4. Once ActiveX control is installed click on the "Start" button to initialize the scanner
5. After initialization is complete uncheck\untick "Remove found threats"
6. Check\tick "Scan unwanted applications"
7. Click the "Scan" button
8. Once the scan is done, you will find a log in C:\Program Files\esetonlinescanner\log.txt
Post ESET's log.
2. Download SUPERAntiSpyware Free for Home Users:
http://www.superantispyware.com/ (http://www.superantispyware.com/)
Print these instructions out.
* Double-click SUPERAntiSpyware.exe and use the default settings for installation.
* An icon will be created on your desktop. Double-click that icon to launch the program.
* If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here: http://www.superantispyware.com/definitions.html (http://www.superantispyware.com/definitions.html).)
* Close SUPERAntiSpyware.
Restart computer in Safe Mode.
To enter Safe Mode, restart computer, and keep tapping F8 key, until menu appears; pick Safe Mode; you'll see "Safe Mode" in all four corners of your screen
* Open SUPERAntiSpyware.
* Under "Configuration and Preferences", click the Preferences button.
* Click the Scanning Control tab.
* Under Scanner Options make sure the following are checked (leave all others unchecked):
o Close browsers before scanning.
o Scan for tracking cookies.
o Terminate memory threats before quarantining.
* Click the "Close" button to leave the control center screen.
* Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
* On the left, make sure you check C:\Fixed Drive.
* On the right, under "Complete Scan", choose Perform Complete Scan.
* Click "Next" to start the scan. Please be patient while it scans your computer.
* After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
* Make sure everything has a checkmark next to it and click "Next".
* A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
* If asked if you want to reboot, click "Yes".
* To retrieve the removal information after reboot, launch SUPERAntispyware again.
o Click Preferences, then click the Statistics/Logs tab.
o Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
o If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
o Please copy and paste the Scan Log results in your next reply with a new HijackThis log.
* Click Close to exit the program.
Post SUPERAntiSpyware log.
3. Download HijackThis:
http://www.snapfiles.com/get/hijackthis.html (http://www.snapfiles.com/get/hijackthis.html)
Post HijackThis log.
-
All files are attached..first is HiJack, second Eset, third spyware.
[file cleanup - saving space - attachment deleted by admin]
-
Everything looks clean.
1. Download, and install CCleaner: http://www.ccleaner.com/download/builds. Get "Slim" version.
2. Read CCleaner instruction from here: http://www.jahewi.nl/ccleaner/ccleaner.html, and run CCleaner
-
Can't install CCleaner. Attached is error message that comes up, the same one I've seen with every other program I try and install that fails.
[file cleanup - saving space - attachment deleted by admin]
-
Clear your browser's cache.
Download, and install fresh Windows Installer: HERE (http://www.microsoft.com/downloads/details.aspx?familyid=889482FC-5F56-4A38-B838-DE776FD4138C&displaylang=en)
Download CCleaner again.
-
You are running two antivirus. This is unnecessary and can lead to system slowdowns, conflicts and crashes. This also could be part of the problem you are having now.
It is your choice which to keep but personally I would uninstall Norton and keep AVG.
Disable Spybot's TeaTimer so it does not interfere with uninstalling anything.
- Right click Spybot in the System Tray (looks like a calendar with a padlock symbol)
- Choose Exit Spybot S&D Resident
- Open Spybot S&D
- Click Mode, check Advanced Mode
- Go To Left Panel, Click Tools, then also in left panel, click Resident
- If your firewall raises a question, say OK
- Uncheck the box labeled Resident Tea-Timer and OK any prompts.
- Use File, Exit to terminate Spybot
- Reboot your machine for the changes to take effect.
.
---------------
Uninstall Norton Using The Removal Tool
**NOTE: This uninstalls ALL Symantec Products**
Please download the Norton Removal Tool (http://ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe) <--- Right click on the link and choose Save Target as..., and save it to your desktop.
Once downloaded please close ALL open browsers, also save any work because this may require a restart.
- Go to your desktop and double click on the removal tool.
- Click Next
- Read the Terms and Conditions then click Next
- Type in the letters/ Numbers that you see into the text box. Click Next.
- Then click Next and the tool will start running.
Once completed you may have to restart your computer.
---------------
(http://i154.photobucket.com/albums/s258/evilfantasy69/javaicon.jpg) Your Java is out of date leaving your system vulnerable.
Older versions of Java have vulnerabilities that malware can use to infect your system.
Step 1
Go to http://java.sun.com/javase/downloads/index.jsp (http://java.sun.com/javase/downloads/index.jsp)
On the Sun Java page scroll to the 4th download.
Java Runtime Environment (JRE) 6 Update 4
The Java SE Runtime Environment (JRE) allows end-users to run Java applications.
Click the (http://i154.photobucket.com/albums/s258/evilfantasy69/javabutton.jpg) button and save the installer to the desktop.
Double click the installer from the Desktop and follow the prompts to complete the installation.
Step 2
Go to Start > Control Panel > Add/Remove programs
Uninstall all older versions of Java.
Remove any item with Java Runtime Environment (JRE or J2SE) in the name.Do not remove Java 6 Update 4
Restart your computer once all Java components are removed.
Double click My Computer on the desktop, Locate this folder: C:\Program Files\Java
Open the Java folder and delete any subfolders except the jre1.6.0_04 folder which was just created by the newest Java installation.
---------------
Try turning off Spybots Tea Timer when downloading new programs and see if it helps.
-
Clear your browser's cache.
Download, and install fresh Windows Installer: HERE (http://www.microsoft.com/downloads/details.aspx?familyid=889482FC-5F56-4A38-B838-DE776FD4138C&displaylang=en)
Download CCleaner again.
Can't install Windows Installer, says file is corrupt...going through evilfantasy's post right now, I'll edit this with results.
edit: can't install Java 4 because my processor doesn't support it? doesn't make any sense to me..
and when I right click the Norton removal tool link, the download manager for FF pops up and says it's starting but then shuts down the dl manager w/out downloading anything..
2nd edit: however, i uninstalled symantec successfully with add/remove programs..
-
edit: can't install Java 4 because my processor doesn't support it? doesn't make any sense to me..
and when I right click the Norton removal tool link, the download manager for FF pops up and says it's starting but then shuts down the dl manager w/out downloading anything..
Did you download the right version?
Unless you're running a 64 bit windows you want either this file jre-6u4-windows-i586-p-iftw.exe or jre-6u4-windows-i586-p.exe. Doesn't really matter which one. The first downloads the files it needs during the setup, the other is a larger download but doesn't need to download anything during the setup.
-
edit: can't install Java 4 because my processor doesn't support it? doesn't make any sense to me..
and when I right click the Norton removal tool link, the download manager for FF pops up and says it's starting but then shuts down the dl manager w/out downloading anything..
Did you download the right version?
Unless you're running a 64 bit windows you want either this file jre-6u4-windows-i586-p-iftw.exe or jre-6u4-windows-i586-p.exe. Doesn't really matter which one. The first downloads the files it needs during the setup, the other is a larger download but doesn't need to download anything during the setup.
Yep, multiple times I had the right files on my desktop. I do have Java version 3, but..idk if that's good or not.
-
You are running two antivirus.
My eyesight must be failing....LOL
I do have Java version 3
You're fine, for now.
Did you follow evilfantasy's steps?
-
Yep, still can't install CCleaner or that Windows program.
-
Try doing a Disk Cleanup.
Go to:
- Start
- Run
- type: CLEANMGR.EXE
- Press Enter.
When prompted select the C: drive and click OK.
Check the boxes for:
- Temporary Internet Files
- Downloaded Program Files
- Recycle Bin
- Temporary Files
Click OK or Enter
Also try another download site.
http://filehippo.com/download_ccleaner/
http://fileforum.betanews.com/detail/CCleaner_Crap_Cleaner/1100194579/1
-
Done
same error for both sites.
-
Have you gotten all updates from the MS Updates?
www.update.microsoft.com
-
I did a system restore to December 17th and can now install CCleaner. I'm gonna run it now
-
Cool. Since you rolled back, don't forget about Windows updates.
-
Yep, already installed them. Thanks.