viruses

Advertise at AfterDawn.com

Link to us!

Private messages

Compose a private message

List of all updated threads

Threads without replies

Search messages

Thursday 21.11.2024 / 08:24

Search AfterDawn Forums:

afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > viruses

Browse by topic

Forums

Start a new thread

viruses

Jump to:

Posted

Message

rump

Newbie

21. December 2005 @ 13:12

Link to this message

ive had 2 virises on my computer for some time now and ive tried ad-aware and avg to get rid of them but they dont get rid of them what can i do to remove them from my computer

[ + quote]

ddp

Moderator

21. December 2005 @ 16:34

Link to this message

download, update & run in this order.
ccleaner http://www.ccleaner.com/
cwshredder http://www.intermute.com/products/cwshredder.html
ad-aware se http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-...
spybot s&d http://www.majorgeeks.com/download2471.html
online virus & spyware scan http://housecall60.trendmicro.com/en/start_corp.asp

moved

[ + quote]

rump

Newbie

21. December 2005 @ 18:05

Link to this message

i used the links you listed but there are still these 2 that my avg scanner detects but cant get rid of them they are called- Trojan horse Downloader.Generic.CW

[ + quote]

-kemisti-

AfterDawn Addict

22. December 2005 @ 00:31

Link to this message

@rump: Try ewido -> http://www.ewido.net/en/download

Install and update it. Then do a "complete system scan", let it delete what it finds and save report. Send that report here.

[ + quote]

rump

Newbie

22. December 2005 @ 11:19

Link to this message

it found a whole bunch
---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 4:17:57 PM, 12/22/2005
+ Report-Checksum: C2EA63C2

+ Scan result:

HKLM\SOFTWARE\Classes\CLSID\{2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} -> Spyware.MiniBug : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Spyware.NewDotNet : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{B5AB638F-D76C-415B-A8F2-F3CEAC502212} -> Spyware.AproposMedia : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{BC333116-6EA1-40A1-9D07-ECB192DB8CEA} -> Spyware.AproposMedia : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{BC333116-6EA1-40A1-9D07-ECB192DB8CEA} -> Spyware.AproposMedia : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Spyware.NewDotNet : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82315A18-6CFB-44a7-BDFD-90E36537C252} -> Spyware.NewDotNet : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\AMeOpt -> Spyware.InternetOptimizer : Cleaned with backup
HKU\S-1-5-21-2052111302-162531612-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Spyware.NewDotNet : Cleaned with backup
HKU\S-1-5-21-2052111302-162531612-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82315A18-6CFB-44A7-BDFD-90E36537C252} -> Spyware.NewDotNet : Cleaned with backup
C:\Documents and Settings\CLuigiZ\Cookies\cluigiz@atdmt[2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
C:\Documents and Settings\CLuigiZ\Cookies\cluigiz@com[2].txt -> Spyware.Cookie.Com : Cleaned with backup
C:\Documents and Settings\CLuigiZ\Cookies\cluigiz@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\CLuigiZ\Cookies\cluigiz@fastclick[2].txt -> Spyware.Cookie.Fastclick : Cleaned with backup
C:\Documents and Settings\CLuigiZ\Cookies\cluigiz@media.fastclick[2].txt -> Spyware.Cookie.Fastclick : Cleaned with backup
C:\Documents and Settings\CLuigiZ\Cookies\cluigiz@questionmarket[1].txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
C:\Documents and Settings\CLuigiZ\Cookies\cluigiz@tribalfusion[2].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
C:\Documents and Settings\CLuigiZ\Local Settings\Temp\Cookies\cluigiz@a.tribalfusion[2].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
C:\Documents and Settings\CLuigiZ\Local Settings\Temp\Cookies\cluigiz@ad.yieldmanager[2].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\CLuigiZ\Local Settings\Temp\Cookies\cluigiz@com[2].txt -> Spyware.Cookie.Com : Cleaned with backup
C:\Documents and Settings\CLuigiZ\Local Settings\Temp\Temporary Internet Files\Content.IE5\SDF1699Z\installer_VENDARE[1].cab/installer_VENDARE.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\CLuigiZ\Local Settings\Temporary Internet Files\Content.IE5\5B7U9601\mm[2].js -> Spyware.Chitika : Cleaned with backup
C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Spyware.Wheaterbug : Cleaned with backup
C:\Program Files\NewDotNet\uninstall3_88.exe -> Spyware.NewDotNet : Cleaned with backup
C:\Program Files\themexp\Themexp.org File\NNEZTA388.exe -> Spyware.NewDotNet : Cleaned with backup
C:\Program Files\themexp\Themexp.org File\TBEZA127Q.exe -> Spyware.Quick : Cleaned with backup
C:\trufkz.html -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\70tovmto.ini -> Adware.SAHA : Cleaned with backup
C:\x.bat -> Trojan.LowZones.f : Cleaned with backup

::Report End

[ + quote]

rav009

Senior Member

22. December 2005 @ 11:20

Link to this message

does AVG say that Trojan horse Downloader.Generic.CW is embedded?
if so where, as if it is in the temp like what happend to a friend of mine this is how i got rid of it.
Boot into Safe Mode (start tapping the F8 key at Startup, before the Windows logo screen)

Go to Control Panel > Internet Options.
On the General tab under "Temporary Internet Files" Click "Delete Files".
Put a check by "Delete Offline Content" and click OK.
Click on the Programs tab then click the "Reset Web Settings" button.
Click Apply then OK.
Empty the Recycle Bin.
Restart.

then tell us if AVG detects it, i hope this works for you as it worked when i did it for my friend recently.

[ + quote]

Yours Truly; Rav
BitTorrent Safety Guide: http://forums.afterdawn.com/thread_view.cfm/395674
Free Security Software: http://forums.afterdawn.com/thread_view.cfm/292257
The cleverest of all, in my opinion, is the man who calls himself a fool at least once a month. - Fyodor Dostoevsky

rump

Newbie

22. December 2005 @ 13:26

Link to this message