|
Help! Can't get rid of viruses!
|
|
Member
|
26. December 2005 @ 05:41 |
Link to this message
|
|
Hi, i scanned my computer with the latest versions of ad-aware and avg free edition and they both found viruses in the restore temp folder. I told both programs to delete the files but they couldn't. Avg says it healed all 31 files and that i have to restart the computer. I pressed 'yes' but everytime it never restarts and it freezes. I don't know what to do. Can someone help me please? Thanks. P.S. I also put my hijacktis log file and somebody told me there was only one thing i needed to fix, so i can't do that either.
|
|
Advertisement
|
 |
|
|
Senior Member
|
26. December 2005 @ 08:10 |
Link to this message
|
hi, yeh as jjssj said ewido is a brillaint program and will find spyware, hijackers,trogans, dialers and loads more its graet and its been graet for me, this is the free trial, after the trial you can still use it the only loss is realtime protection it has all the other features http://www.ewido.net/en/download/ , should clean up a bit.
oh yeh, make sure you disable system restore for a while start>controll panel>performance and miantanence>system>click systme restore tab and disable it.
then restart.
theese will help sort it too.
ccleaner http://www.ccleaner.com/
cwshredder http://www.intermute.com/products/cwshredder.html
ad-aware se http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-...
spybot s&d http://www.majorgeeks.com/download2471.html
download, update & run in safemode for the above in this order
online virus scan http://housecall.trendmicro.com/housecall/start_corp.asp
thoose are very usefull too,all that is provided by ddp kindly posting it on other threads itll realy help, make sure you do the online virus scan very good.
theese will help sort it,post back here is still no luck, im sure me and jjssj are more than capable of sorting you out so no worrys ok.
This message has been edited since posting. Last time this message was edited on 26. December 2005 @ 11:59
|
|
spertti
Senior Member
|
26. December 2005 @ 09:49 |
Link to this message
|
|
Just simply shut down the system restore program ( don´t know the name of it in english ). Reboot, and then turn it back on. That´ll kill the viruses that are on older restore points. After this you can´t ofcourse restore your system, but it´ll start making new restore points after you turn it back on. I´m totally sorry for my English, but I hope you understood what I was trying to say =)
This message has been edited since posting. Last time this message was edited on 26. December 2005 @ 10:55
|
Member
|
27. December 2005 @ 06:15 |
Link to this message
|
|
thanks for all your help. I'll do some of the scans and then get back to you. But i can't get ewido because i use a windows me system.
|
Member
|
27. December 2005 @ 08:48 |
Link to this message
|
|
By the way, i have some trojans, worms and a couple of generics.
|
Senior Member
|
27. December 2005 @ 09:01 |
Link to this message
|
|
have you tryed what i told you to try yet?
|
Senior Member
|
27. December 2005 @ 12:41 |
Link to this message
|
|
@jjssj
oh i see your sig moves, i couldnt see that in firefox as javascript was disabled, thats a clever sig btw but i prefere theese ones.
i disagree with you there jjssj when you say you should not use freebeis for anti viurs, i went from bitdefender pro to avg free and escan and ive been much beter.
ps, this is the only exception as escan and avg free are top programs and are brilaint freebies, i dont think anything else comes close, maybe avast free.
This message has been edited since posting. Last time this message was edited on 27. December 2005 @ 12:46
|
|
ddp
Moderator
|
27. December 2005 @ 19:44 |
Link to this message
|
|
i've been using avg on my system & about 100 customers for the past 3yrs.
|
Member
|
28. December 2005 @ 03:03 |
Link to this message
|
|
yh, i know jjssj but it's only for temporary use because my norton antivirus subscription ran out and now I am thinking about getting ez etrust antivirus as my main antivirus protection; is it good? And by the way, what's wrong with avg free edition? I think it's a great product and finds more than many non-free products.
|
Senior Member
|
28. December 2005 @ 04:11 |
Link to this message
|
|
AVG free is fine use it all you want,why dont you try trend micros products they are top or kaspersky.
that is is you want a new anti virus, anyway try what i told you to and then post back.
i think youll love bitdefender, its got all you need and a excelent anti virus maybe the best.
i hope it works
This message has been edited since posting. Last time this message was edited on 28. December 2005 @ 04:13
|
Member
|
28. December 2005 @ 09:10 |
Link to this message
|
I done what rav009 said but with no results. They can't be deleted. Escan came up with the most results for me. This is the log file:
File C:\_RESTORE\TEMP\A0104170.0 tagged as not-a-virus:AdWare.Win32.PowerScan.d. No Action Taken.
File C:\_RESTORE\TEMP\A0115186.0 infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115187.0 infected by "Trojan-Downloader.Win32.IstBar.ij" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115188.0 infected by "Trojan-Downloader.Win32.Dyfuca.ei" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115189.0 infected by "Trojan.Win32.Crypt.t" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115190.0 infected by "Trojan-Downloader.Win32.Apropo.g" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115191.0 infected by "Trojan-Downloader.Win32.Agent.ro" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115192.CPY infected by "Trojan-Downloader.Win32.Apropo.ag" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115193.CPY infected by "Trojan.Win32.Crypt.t" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115194.CPY infected by "Trojan.Win32.Crypt.t" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115195.CPY infected by "Trojan-Downloader.Win32.Apropo.ag" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115197.CPY infected by "Trojan.Win32.Crypt.t" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115198.CPY infected by "Trojan.Win32.Crypt.t" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115199.CPY infected by "Trojan.Win32.Crypt.t" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115200.CPY infected by "Trojan.Win32.Crypt.t" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115202.0 infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115204.0 infected by "Trojan-Downloader.Win32.IstBar.jm" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115205.0 tagged as not-a-virus:AdWare.Win32.SideFind. No Action Taken.
File C:\_RESTORE\TEMP\A0115206.0 tagged as not-a-virus:AdWare.Win32.SideFind. No Action Taken.
File C:\_RESTORE\TEMP\A0115207.0 infected by "Trojan-Downloader.Win32.IstBar.ms" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0115213.CPY tagged as not-a-virus:AdWare.Win32.SurfAccuracy.d. No Action Taken.
File C:\_RESTORE\TEMP\A0119771.CPY tagged as not-a-virus:AdWare.Win32.SurfAccuracy.d. No Action Taken.
File C:\_RESTORE\TEMP\A0120837.CPY infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121587.CPY infected by "Trojan.Win32.VB.aad" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121611.CPY infected by "Trojan.Win32.VB.aad" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121612.CPY infected by "Trojan.Win32.VB.aad" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121616.CPY infected by "Trojan.Win32.VB.aad" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121618.CPY infected by "Trojan.Win32.VB.aad" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121619.CPY infected by "Trojan.Win32.VB.aad" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121620.CPY infected by "Trojan.Win32.VB.aad" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121625.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121629.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121630.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121634.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121636.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121637.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121638.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121919.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121923.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121924.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121928.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121930.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121931.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0121932.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0122635.0 infected by "Trojan-Downloader.Win32.IstBar.lu" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0124934.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0124935.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0124939.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0124941.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0124942.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0124943.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0124962.1 infected by "Trojan-Downloader.Win32.IstBar.lu" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0126521.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0126522.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0126526.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0126528.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0126529.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0126530.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0130754.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0130755.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0130759.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0130761.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0130762.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0130763.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0137384.CPY tagged as not-a-virus:AdWare.Win32.Altnet.e. No Action Taken.
File C:\_RESTORE\TEMP\A0143849.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0143850.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0143851.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0143856.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0143858.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0143859.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0143860.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0143863.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0143864.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0143868.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0143870.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0143871.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0143872.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0144093.CPY infected by "Trojan-Downloader.Win32.PassAlert.c" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0144100.CPY infected by "Trojan-Downloader.Win32.PassAlert.c" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0144101.CPY infected by "Trojan-Downloader.Win32.PassAlert.c" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0144105.CPY infected by "Trojan-Downloader.Win32.PassAlert.c" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0144107.CPY infected by "Trojan-Downloader.Win32.PassAlert.c" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0144108.CPY infected by "Trojan-Downloader.Win32.PassAlert.c" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0144109.CPY infected by "Trojan-Downloader.Win32.PassAlert.c" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146150.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146154.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146155.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146159.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146161.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146162.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146163.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146632.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146636.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146637.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146641.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146643.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146644.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0146645.CPY infected by "Email-Worm.Win32.VB.an" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0149467.CPY infected by "Trojan-Downloader.Win32.IstBar.ns" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0149468.CPY infected by "Trojan-Downloader.Win32.IstBar.ns" Virus. Action Taken: File to be deleted on reboot.
I rebooted and they still weren't deleted, as i scanned again with Ad-Aware to find them still there. I don't know what to do! Please help.
|
Member
|
28. December 2005 @ 09:18 |
Link to this message
|
|
That's the problem, i can't get ewido, because I use a windows ME system and it's only compatible with windows 2000 or xp. Any other ways?
|
|
spertti
Senior Member
|
28. December 2005 @ 09:21 |
Link to this message
|
|
|
Member
|
28. December 2005 @ 09:22 |
Link to this message
|
|
i posted a log a couple of days ago and i was told to only fix one line. Shall i do it again and can't i post it here?
|
|
spertti
Senior Member
|
28. December 2005 @ 09:28 |
Link to this message
|
|
Don´t post a new one. Your log is fine. Have you tried to run eScan in safe mode?
|
Member
|
28. December 2005 @ 09:30 |
Link to this message
|
|
i don't see what the difference is and anyway i can't because i downloaded it on my log in profile of the computer and safe mode only boots in to the first main log in profile of the computer. Are you sure there's no other solutions?
|
|
spertti
Senior Member
|
28. December 2005 @ 09:35 |
Link to this message
|
|
It could remove those files it says it removes on reboot if you run it in safe mode. Sure we can try something else, but thats what I would do first =) Can´t you save it for the other user, and then run it in safe mode?
|
Member
|
28. December 2005 @ 09:37 |
Link to this message
|
|
thanks for the comment spertti and i understand what you're saying but can you first post the other options, as i don't prefer to go into safe mode and do this stuff.
|
|
spertti
Senior Member
|
28. December 2005 @ 09:40 |
Link to this message
|
|
|
Member
|
28. December 2005 @ 09:41 |
Link to this message
|
|
which one would you say is the best online scanner out of those, apart from trend micro?
|
|
spertti
Senior Member
|
28. December 2005 @ 09:45 |
Link to this message
|
|
Panda could be worth trying.
|
Senior Member
|
28. December 2005 @ 10:41 |
Link to this message
|
|
seriously i recomend that you run a scan in safe mode as if it is comming back in normal mode safe mode should sort it, i know you prefere not to but i think its the best way.
|
Senior Member
|
28. December 2005 @ 11:04 |
Link to this message
|
Quote:
rav009 is using his brain @t last
thanks i geuss...
Quote:
Y becoz if u dont and sit there your computer might get confested with more viruses and the computer might blow up
"blow up", serisoly your talking bull now...
is "confested" a actual word
Quote:
PS u might get infested too lol
sorry but thats just lame,
nah im jokin jjssj...
This message has been edited since posting. Last time this message was edited on 28. December 2005 @ 11:36
|
Senior Member
|
28. December 2005 @ 12:41 |
Link to this message
|
|
yeh its a real word.
confest;
v., To waste or steal resources under the cover of a far more wasteful or corrupt entity. "The draining of the social fund was a cleverly confested scheme, with the stock inflation scandal taking the limelight."
(contraction: co-infestation)
but i think the term you are looking for is
INFESTED....
infested
adj : (often followed by `with' or used in combination) troubled
by or encroached upon in large numbers; "waters
infested with sharks"; "shark-infested waters"; "the
locust-overrun countryside"; "drug-plagued streets"
[syn: overrun, plagued]
|
|
Advertisement
|
|
|
Member
|
29. December 2005 @ 01:21 |
Link to this message
|
|
so, i scan in safe mode and when i have to reboot the computer to complete the scan i boot up in normal mode and then i'll be virus free? Also, where can i find this type of files:C:\_RESTORE\TEMP\? In my computer or in my local drives, just to make the scan more efficient and shorter or else it take 3 hours!
|
