also @ TechSpot: Weekend Open Forum: Have you upgraded to Windows 7 yet?
Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Login to participate.

Go Back   TechSpot OpenBoards > Operating Systems & Software > Virus & Malware removal

Picked up a virus off MSN

Closed Thread
Page 1 of 2 1 2
Bookmark Thread Tools
  #1  
Old 01-05-2009
Newcomer, in training
 
Member since: Jan 2009, 12 posts
Picked up a virus off MSN

hi everyone im only new here, but need sum help please!!
ive got no idea really when it comes to computers so sorry if im a bit slow!! lol
ive recently picked up a virus off msn, i stupidly clicked on a link, nd now its sending it to everyone on my list.very frustrating!
ive done avg full computer scans, and 7 trojan horses have come up but its not alowing me to delete them or remove to virus vault.
i went into msconfig and unticked msn from the list, and it seems to have disappeared, but msgs r still being sent to friends!
i have no idea what to do, ive been googling all arvo with no success!
heres one of the virsus'es that comes up

"D:\USER-PC\Backup Set 2008-06-10 160932\Backup Files 2008-06-10 160932\Backup files 11.zip:\C\Users\User\AppData\Local\VirtualStore\Program Files\NetProject\ot.ico";"Trojan horse Generic_c.ABVQ";"Infected"

thanks heaps

Last edited by kimsland; 01-05-2009 at 02:01 AM.. Reason: changed title from: "Please help"
  #2  
Old 01-05-2009
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,034 posts
Have a look at:

UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions
To remove this ad, sign in. To register for a new account, click here.
  
  #3  
Old 01-05-2009
Newcomer, in training
 
Member since: Jan 2009, 12 posts
wil do!!!
thanks heaps!

Quote:
Originally Posted by BMummy View Post
wil do!!!
thanks heaps!
quick q
with step no 3 it says to turn off real tine in spyware
i have avg anti virus, is this the same thing? sorry im really hopeless!
otherwise im not sure where im looking or what to turn off
dont want to skip a step thats al
thankyou

Last edited by kimsland; 01-05-2009 at 03:06 AM.. Reason: posts merged. please use edit instead of replying to yourself
  #4  
Old 01-05-2009
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,034 posts
Glad you asked.

Uninstall your AVG Antivirus
Then run the removal tool
Here is the 32Bit version (most users): http://www.avg.com/filedir/util/avg_...avgremover.exe
Here is the 64Bit version: http://www.avg.com/filedir/util/avg_...removerx64.exe

Install Avira free AntiVirus (and keep it on)
  #5  
Old 01-05-2009
Newcomer, in training
 
Member since: Jan 2009, 12 posts
thankyou! ive done as u said, the avira is downloading now
should ido a scan with avira and keep the results? or just go to the next step and scan with malwarebytes?
  #6  
Old 01-05-2009
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,034 posts
Keep Avira active (you know just as default, sitting near the clock)
Then run a full Malwarebytes scan ( ==> Updated)

You'll be amazed of how well they work together
When Avira finds any issues it'll popup with, what to do. Make quarantine the default action (for all found issues) it'll then just beep when finding and removing Viruses, (in the background )
  #7  
Old 01-05-2009
Newcomer, in training
 
Member since: Jan 2009, 12 posts
hope this has worked!!

well i did my scan just adding it now(hope it works) hehe

super anti spy ware scan

can someone please have a look and see how ive gone? hehe
Attached Files
File Type: txt mbam-log-2009-01-05 (19-51-09).txt (32.4 KB, 4 views)
File Type: log SUPERAntiSpyware Scan Log - 01-05-2009 - 21-11-42.log (4.2 KB, 1 views)
File Type: log hijackthis.log (10.8 KB, 1 views)

Last edited by BMummy; 01-05-2009 at 06:56 AM.. Reason: adding my logs
  #8  
Old 01-05-2009
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,034 posts
Quote:
Originally Posted by kimsland View Post
Then run a full Malwarebytes scan ( ==> Updated
Your version:
Quote:
Malwarebytes' Anti-Malware 1.31
Database version: 1456
Current version:
Quote:
Malwarebytes' Anti-Malware 1.32
Database version: 1617
Er hmm! (I'm not even going to say it)

Doh! Update Malwarebytes, and run it again. !
  #9  
Old 01-05-2009
Newcomer, in training
 
Member since: Jan 2009, 12 posts
ok im running manwarebytes updated again!
what did i do wrong last time?told u im computer illiterate! haha
To remove this ad, sign in. To register for a new account, click here.
  
  #10  
Old 01-05-2009
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,034 posts
You didn't update it (as mentioned above)
Make sure that you update it first
  #11  
Old 01-06-2009
Newcomer, in training
 
Member since: Jan 2009, 12 posts
oh ok sorry!!
have updated this time, and its scaning away!
thankyou


hope ive done it right this time!

sorry about realease notes, added it by accident!

howd i go this time? lol
Attached Files
File Type: txt mbam-log-2009-01-06 (10-42-55).txt (28.7 KB, 1 views)

Last edited by kimsland; 01-06-2009 at 03:27 AM..
  #12  
Old 01-06-2009
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,034 posts
Thanks for the "bump" (new reply) I must have missed your last reply before that

Due to the extreme amount of Malwares found and removed
Start up Malwarebytes again; Update it; then run a full scan (remove all found Malwares)
You need to run this multiple times, until all hidden Malwares are uncovered and removed
  #13  
Old 01-06-2009
Newcomer, in training
 
Member since: Jan 2009, 12 posts
kool thankyou!
so i should just keep updating and scaning with malware until i have no things come up??
y do i have so many?
  #14  
Old 01-06-2009
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,034 posts
You have the hidden ones being found and removed
Yes keep going until clean
  #15  
Old 01-06-2009
Newcomer, in training
 
Member since: Jan 2009, 12 posts
sorry for all the questions!
but all the ones in the vault, can i just delete and they will b gone?prob a reallly silly question, but dont wanna stuff it all up!!
thanks heaps for ur help and advice, ur a gem!!
  #16  
Old 01-06-2009
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,034 posts
Yes you can (although I agree the words "delete" or "remove" in these vaults are not clear)
Or just leave them there until you've finished cleaning
If they're in the vault, there is no concern
  #17  
Old 01-06-2009
Newcomer, in training
 
Member since: Jan 2009, 12 posts
yay no mailcious items!! yay
so what hapens now? am i all clean?
mt friends r still geting msn msgs from me aparantely!
soo frustrating
Attached Files
File Type: txt mbam-log-2009-01-06 (17-08-39).txt (845 Bytes, 1 views)
  #18  
Old 01-06-2009
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,034 posts
Well done

Please run CCleaner
Then restart
Then create a new HJT log and attach it to a new reply
  #19  
Old 01-06-2009
Newcomer, in training
 
Member since: Jan 2009, 12 posts
ok so i did the cc clean and re booted
done a HJT log and here it is!!
fingers crossed!
Attached Files
File Type: txt hijackthis2.txt (9.6 KB, 1 views)
  #20  
Old 01-06-2009
kimsland's Avatar
TS Special Forces
 
Location: Australia
Member since: Dec 2007, 17,034 posts
Please run HijackThis and click Scan
Place checks next to the following entries and fix them (confirming all\any Internet browsers are closed first)

Quote:
O1 - Hosts: ::1 localhost
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
Then Download Combofix from here: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Restart to Safe Mode (pressing F8 before Windows starts, to see this option)
Locate the downloaded Combofix program
Double click on it to run

This process may take up to 10 mins to complete
Your Desktop and clock may reset during that time (completely normal)
Wait until it's finished (oh you may need to agree to the scanning, things like that)
Then save the log and attach it to a new reply

Last edited by kimsland; 01-06-2009 at 03:36 AM..
Closed Thread
Page 1 of 2 1 2

Tip: Download Advanced SystemCare 3 Freeware - 1 Click A Day to Clean, Repair, Protect & Optimize your PC.

Thread Tools


Similar Topics
Topic Category Replies Last Post
CD/DVD drives not been picked up General Hardware 2 01-26-2008 01:45 PM
I've picked up a trojan Zlob - X.a and am not quite sure if its still there or not... Virus & Malware removal 14 12-04-2007 06:22 AM
ive picked up something called Hope That.exe Virus & Malware removal 10 02-15-2007 04:44 PM
Cd drive not being picked up in bios General Hardware 5 01-04-2006 04:46 PM
CDROM & DVD not picked up on 2nd master & slave Windows OS 3 05-25-2004 05:22 AM


All times are GMT -4. The time now is 12:13 AM.