Virus that keeps coming back!!

Forums › Microsoft Windows › Virus that keeps coming back!!

shabba121

17 posts

Geek

#13749 27-May-2007 20:52

Hi guys,

I have been using my laptop for ages with no problem, but recently I've been virus ridden. I'm using Win XP with IE7 and Office XP that are all up to date in terms of patches etc. I'm using Avast anti-virus, aShampoo firewall and Ad-Aware and have been for years. But now every time I start up my laptop, I get trojans found in my Local Settings/Temp folders and everytime I'm on the internet, popups appear that keep showing OK and Cancel buttons for system scanner programs that Avast says are Adware. They aren't connected to any website in particular because they appear no matter what pages I'm viewing! What annoys me the most is that when I run a Avast scan to get rid of all these files, Avast finds them and moves them to the vault, but they're all back when I reboot the damn laptop!! THEY JUST WON'T GO AWAY! HEEEEEELP!

Nety

2584 posts

Uber Geek
+1 received by user: 5

Retired Mod

Trusted

Lifetime subscriber

#72419 27-May-2007 21:00

Run ad-aware AND spy bot search and destroy and if that does not work throw Microsoft defender into the mix. One tool is never enough these days and it may take several to clean the PC properly. Avast will only clean the virus it will not clean the program that is putting the files there which can be a batch file or registry or any number of other things.

It is a good idea to do a search once you know that the virus is and find out how to clean it. Suggest Symantec's web site for this as it is very complete.

Good luck

Media centre PC - Case Silverstone LC16M with 2 X 80mm AcoustiFan DustPROOF, MOBO Gigabyte MA785GT-UD3H, CPU AMD X2 240 under volted, RAM 4 Gig DDR3 1033, HDD 120Gig System/512Gig data, Tuners 2 X Hauppauge HVR-3000, 1 X HVR-2200, Video Palit GT 220, Sound Realtek 886A HD (onboard), Optical LiteOn DH-401S Blue-ray using TotalMedia Theatre Power Corsair VX Series, 450W ATX PSU OS Windows 7 x64

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#72422 27-May-2007 21:12

avast is a great antivirus, but you need an antispyware solution as well - so follow Nety's suggestions...

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

rwales

122 posts

Master Geek

#72424 27-May-2007 21:24

Also, assume the worst. Backup your important data now.

All your base are belong to us.

Batman

Mad Scientist
30012 posts

Uber Geek
+1 received by user: 6217

Trusted

Lifetime subscriber

#72850 30-May-2007 16:24

and make sure you keep your antispyware on the run at all times from now

shabba121

17 posts

Geek

#72867 30-May-2007 17:44

Hey guys,

I have done all you mention, but had no luck. So I looked up the virus on a virus database site and found a resolution for it. I downloaded a program called "VundoFix.exe" which is specfically made for my type of virus. It removed all the .dll files that make the pop-ups appear etc. It's all sorted now though, Thanks alot for your help guys. Much appreciated.

Saptha

35 posts

Geek
Inactive user

#72931 31-May-2007 06:20

what abt AVG even there is a free version ,
My favorite is AVG plus & NOD32

AliExpress

Shop now on AliExpress (affiliate link).

Batman

Mad Scientist
30012 posts

Uber Geek
+1 received by user: 6217

Trusted

Lifetime subscriber

#72960 31-May-2007 10:11

currently avg only offers free antivirus not antispyware (spyware ranges from tools used to infiltrate into your system to either do fatal vandalism or monitor your every keystroke to harmless cookies) - you need to pay for subscription but there are free ones. as you found out not all antispywares find every spyware - although you have to say those that are missed are usually trivial (like cookies for mainly which one prog may consider it a spyware while another may not). so have a few - have windows defender, and the ones suggested above.

Saptha

35 posts

Geek
Inactive user

#72968 31-May-2007 10:20

do anyone like to use SPY BOT its all free and u can get updates continuously.

Tarq57

156 posts

Master Geek

#73435 5-Jun-2007 12:00

I still use Spybot, and AdAware (new version to be released out of Beta shortly), but they are fairly outdated though still useful. AVG Antispyware (15day trial then reverts to a demand scanner) is very good. Superantispyware (free demand and pay resident versions) is excellent, and can also clean most infections previously needing Vundofix or Smitrem to deal with.
OP, I do recommend you turn off system restore to delete all restore points and reboot the computer. Reboot again into safe mode and perform a full scan with either of those two, to be sure. Then reboot into normal and turn system restore back on.
That should do the job.
Some folk recommend re-installing windows after a trojan infestation. If you keep getting these symptoms, I'd probably do just that.

Oh God, what've I done to it now??

Jama

1420 posts

Uber Geek
+1 received by user: 1

Trusted

#73438 5-Jun-2007 12:36

I use Hijackthis but only recommended for expert use. It shows what applications are running and resident in memory. Anything suspicious can then be terminated and removed from 'startup' at boot time. It works a treat.