TechSpot

Super antispyware infected?

By Habylab
May 17, 2008
  1. I have just swapped from avast to avg and during my first scan, it found superantispyware to be a virus(I-Worm/Bagle) It also found the same problem with the driver that runs my wireless mouse. It also found lots of spyware, which is surprising, considering i has just run a S&D test, which found nothing. It found Virtumonde, CoolWebSearch and titan antipyware among many others, which were all found in the same folder, and internet explorer one, which i don;'t even use! (100 i think)
    I haven't deleted anything yet but when i had installed avg my computer kept restarting for some random reason. Until i found this process called 11701 (something like that) that was running and during the scan avg had detected it as I-Worm/Bagle AKA, so i stopped the process, which stopped the restarting.
    I have attached a hijackthis log
    Cheers,
    Habylab
     
  2. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Actually I had that issue too

    I did a full scan, and it came up with all these registry errors (CoolWebSearch and others)
    I found it strange too, because I scan with lots of other prgrams, and didn't realize I had 100+ entries in registry (?) What's AVG doing?

    Anyway, I said remove them all, which took ages.
    I restarted thinking, here we go Windows won't work, but all was ok.

    So maybe just do a full scan, and allow it to do its thing, probably just tracks (left overs) I decided not to go through the list (ie too many)
     
  3. Habylab

    Habylab TS Rookie Topic Starter Posts: 307

    I have done that, and have just deleted them from my virus vault, but my wireless is playing up now... I have to edit the registry and restart it to make it work, same with the security centre.
    Thank you for replying though!
    Anyway i did another S&D scan and it found the same thing, but one more item. I deleted them and restarted, so i am assuming everything is ok.
    Also my avg isn't showing up in CCleaner as a start-up icon, and it isn't in the system tray when i close the main window.How can i change this? It also says that the "Email Scanner" Isn't active.
    EDIT: also my COMODO isn't starting up now.. It says it isn't a valid W32 Application, something like that
    Please help me!!!
     
  4. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

  5. Habylab

    Habylab TS Rookie Topic Starter Posts: 307

    I have sorted that out, but i can't go on the internet, it keeps connecting to "BTopenzone". It can't find any wireless networks, and it can't find the one i am usually connected to, which i ha a 70-80% signal... What should i do! The virus keeps popping back up, and because of this, i can't connect to the internet meaning no avg updates...
    PLEASE HELP ME!!!!!!!!

    I can't boot into save mode either... I found a virus and it was in the sytstem32\drivers\downld directory, and it keeps popping back up. Now i think it is stopping me from going into safe mode. When I try to boot into safe mode, it does that list of things, something like system32\driver\.... and then it reboots
     
  6. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    But I'd hard wire it to the modem, not wireless
    Also run MSCONFIG and turn off everything starting (except avg stuff)
    Remove all the temp files in IE (including all the ones in Start->Run->%temp%)
    Go to C:\windows\system32\drivers and checkout this download directory and probably remove all the stuff in that.

    Hopefully after restart, (+ hard wired using ethernet cable) you can get on the net
     
  7. Habylab

    Habylab TS Rookie Topic Starter Posts: 307

    Sorry but a direct connection isn't available, its in the next room, and wouldn't reach.I'll try what you say, but some of my files on my desktop aren't "valid wins32 applications".
    Should i just go back to avast or should i stick with avg?
    How can i get into safe mode? i think it restarts when it reaches a avg__ files but it could be a coincidence...
     
  8. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Safe Mode (repeatively pressing F8 at system startup, then selecting Safe Mode) will allow your computer to startup with minimal set of drivers (ie Without: AntiVirus and Wireless drivers and sound; and others)

    Inside Safe Mode you can turn off any startups (happening in Normal Mode)
    Run MSCONFIG and remove startup programs
    Remove temp files (that may usually be locked by the system)
    And a number of other things (remove faulty drivers so forth)

    I prefer AVG (but AVG Free Ver.8 I mean) if you have version 7.5 this can be removed (and must be removed to install version 8)

    edit:

    Also if you can, move the computer to the Modem/Router

    Edit:

    I now prefer Avira
    And I hate AVG
     
  9. Habylab

    Habylab TS Rookie Topic Starter Posts: 307

    I can't get inot safe mode! Thats the thing it stops at a avg__ file...
    I'm going to unistall avg, and install avast, much better, apart from the lentghy scanning...
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.