Virus, trojan, or both?

Status
Not open for further replies.
this morning before work, I went into safe mode, tried ESET online scanner again, I got an update error while initializating under administrator name. I went and downloaded superantispyware in safe mode and install but I got "you can not install as you are not an administrator" this thing is kickin my butt.
 
Do you have everything backed up? If so, reinstall the operating system. Then, get some disk imaging software and an external HD, and once you get everything back to square one, make a disk image.

IMO, reinstalling the system is the only good way to know your system is clean after an infection, and by using imaging software, you essentially reinstall the system back to exactly how it was the last time you made an image. Takes 10 minutes!
 
Originally Posted By: Drew99GT
Do you have everything backed up? If so, reinstall the operating system. Then, get some disk imaging software and an external HD, and once you get everything back to square one, make a disk image.

IMO, reinstalling the system is the only good way to know your system is clean after an infection, and by using imaging software, you essentially reinstall the system back to exactly how it was the last time you made an image. Takes 10 minutes!



I like formatting and installing. Should make things a little faster too.
But 10 minutes?
Let's be realistic here.
 
Originally Posted By: xpeteyjtx

I like formatting and installing. Should make things a little faster too.
But 10 minutes?
Let's be realistic here.


I am pretty sure they were referring to the time required to restore your system *from it's backup disk image*; in which case 10 minutes is a reasonable estimate.
 
Originally Posted By: uc50ic4more
Originally Posted By: xpeteyjtx

I like formatting and installing. Should make things a little faster too.
But 10 minutes?
Let's be realistic here.


I am pretty sure they were referring to the time required to restore your system *from it's backup disk image*; in which case 10 minutes is a reasonable estimate.


Oh ok, I can see that, sorry.
 
Originally Posted By: xpeteyjtx
Originally Posted By: uc50ic4more
Originally Posted By: xpeteyjtx

I like formatting and installing. Should make things a little faster too.
But 10 minutes?
Let's be realistic here.


I am pretty sure they were referring to the time required to restore your system *from it's backup disk image*; in which case 10 minutes is a reasonable estimate.


Oh ok, I can see that, sorry.


No problem... Truth be told, *I* was about halfway done my own knee-jerk response that started with

"10 minutes?! Apparently you, sir, have never actually *installed* Windows, or..."

... at which point I, too realized that we were talking oranges, not apples.
LOL.gif
 
made some progress. Avast found the trojan when windows xp booted, moved to chest. I'm still surfering from pop ups. this time running a thorough scan with avast.
 
Avast has been running for over two hours now. After 290k files scanned, it says 0% completed??

avastscreenshot.jpg



look at the firefox icon for Avast.
avastmislabeled.jpg
 
One thing your probably gonna have to do, once you remove the offending spyware, turn off the system restore feature. If you do not, chances are next time you reboot, you will reinfect the system. It seems most virus/malware add registry entries that automatically tap the restore area and reinstall themselves. once you do turn it off, reboot, verify with another scan that you are virus, malware free, then turn it back on and reboot again.
 
virtumonde is a nasty virus this pc had. it would turn off xp automatic updates, turn off windows firewall, deactivated my windows xp. internet explorer and firefox icons would not open. Multitude of pop ups with internet explorer and firefox. would not allow you to install antispyware or run online antivirus scans in safe mode. totally bog down the processor, windows xp would not load, shut down was accomplished with holding down the power button. avast antivirus would take 9 hours to scan a 120 gb hard drive. This trojan would adapt and avast would not detect the trojan on subsequent scans.

malwarebytes anti-malware removed 30 infections of this trojan. found out how to remove this thing from bleepingcomputer.com spybot would detect and remove except for 3 virtumonde infections because it was in use. spybot said it would remove with a reboot but the trojan would reinstall upon reboot even after a spybot scan. superantispyware would not install in safe mode either because the trojan was blocking the install. I think it took me four days to totally get rid of this. I wouldn't wish this on my worst enemy.
 
Glad you figured it out. While it was a beast, you got to learn alot to help someone else down the road.
 
My wife was on facebook and using internet explorer at the time when this happened. I've told her to use firefox only before, she didn't listen.
 
antivirus 2008, antivirus 2009, etc. can be shut down using task manager to kill the application, but only if you don't click on anything. Malwarebytes seems to handle it nicely otherwise, along with others.

I tell the wife and kids to never install anything without asking me first, to avoid stuff like this. Instead of spending money on antivirus stuff we should start some sort of bounty for these people. Once a few them end up with every finger broken in a couple of places for a first offense we might see some of this drop off.
 
Originally Posted By: Cutehumor
My wife was on facebook and using internet explorer at the time when this happened. I've told her to use firefox only before, she didn't listen.


You should force her to use Linux, problem solved
wink.gif
 
Status
Not open for further replies.
Back
Top Bottom