Computer Hope

Software => Computer viruses and spyware => Topic started by: Venom56 on September 21, 2006, 04:31:46 PM

Title: This is getting out of hand!
Post by: Venom56 on September 21, 2006, 04:31:46 PM
I could use all the help I can get!

Yesterday, I downloaded something, I now regret. The file was laced with trojans and virus, one of those being the dreaded SpyQuake (As if the others weren't enough). Almost instantly I had over 10 popups, from SpyQuake to Winvirus!

First I tried AVG anti-virus. It cleaned out some. Then counter spy. It cleaned out over 300 infected regs. and 50+ infected programs/ files. But still, I had the pesky SpyQuake and Winvirus! So next I downloaded Spybot S&D. It got rid of over 50 different trojans! (I also downloaded Ewido, but it is only finding cookies =/). After that, I called it a night, unplugged my internet cable in went to bed.

This morning, I was expecting everything to be okay, but overnight, the gang of anti-virus/ anti- spyware each found (Auto  scans.. yay!) Their own virus and trojans! I deleted them, and ran more scans. Every scan I do, I keep finding more and more! All day I have been scanning and deleting, scanning and deleting. This afternoon, I noticed my background had been deleted to a blue screen! I fixed that problem, and thought I was in the clear.

I put up all the shields the programs offered, my firewall, and my settings to max security, and plugged in my internet. Things went smoothly, up until an hour ago. I was using FireFox and I noticed the WinVirus tabs and alerts. Also, my computer decided to slow down, and my internet started to move slower than my old dial up! (I am running broadband).

I ran spybot, and it found 3 trojans. I deleted them, and made sure to run Spybot again (I am paranoid =/). THE SAME THREE WERE BACK! I am running my others now, and so far counter spy found a trojan that spybot did not find.

How is this possible? How can they keep coming? Is there anyway some sort of 'hole' has been opened and someone/ some program is feeding them through?
Title: Re: This is getting out of hand!
Post by: Dilbert on September 21, 2006, 05:28:34 PM
Can you please download HijackThis and attatch a log in a .zip file?

http://www.majorgeeks.com/download3155.html
Title: Re: This is getting out of hand!
Post by: patio on September 21, 2006, 06:06:43 PM
Connect to the web and update all your current malware apps...
AVG
AdAware
SpyBot
Ewido.

Then DLoad the following :

Stinger
SmitFraud removal tool

Dis-connect from the web...unplug the modem if need be and grab a cup of coffee.

Next go to Start/Accessories/System Tools and turn off System Restore.

Run Stinger
Run the smitfraud removal tool (i believe it requires a re-boot to complete)

Now re-boot into safemode and run all your malware apps you just updated.

Then reboot into normal mode and run hijackthis and post your log here.
Title: Re: This is getting out of hand!
Post by: ale52 on September 21, 2006, 10:23:08 PM
Sounds like a wipe and reinstall to me  :-[

Alan <><  :D
Title: Re: This is getting out of hand!
Post by: patio on September 23, 2006, 11:40:17 AM
Not neccessarily if he follows the instructions given...
Title: Re: This is getting out of hand!
Post by: GX1_Man on September 23, 2006, 01:27:12 PM
And scans should be run in safe mode with system restgore turned off.  ;)
Title: Re: This is getting out of hand!
Post by: patio on September 23, 2006, 01:38:39 PM
Quote
And scans should be run in safe mode with system restgore turned off.  ;)

Another vowel movement ! !

 :D    :D
Title: Re: This is getting out of hand!
Post by: Raptor on September 23, 2006, 01:49:15 PM
Quote
Quote
And scans should be run in safe mode with system restgore turned off.  ;)

Another vowel movement ! !

 :D    :D

Spellcheck is your friend, and YOU can do it too!  ;D
Title: Re: This is getting out of hand!
Post by: mroilfield on September 24, 2006, 07:13:44 AM
What the heck did you download. I wan to be sure and stay away from it.
Title: Re: This is getting out of hand!
Post by: unlovedwarrior on September 26, 2006, 11:35:58 AM
he was probably dling music from a torrent site or bearshare or some thing..

or he was lucky enough to get a random infected file