BitDefender ?

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by jarcher, Sep 24, 2004.

  1. jarcher

    jarcher I can't handle a title

    I run Avg, avast, and trendmicro(not at the same time)
    avg is what I runn all the time, the other two I scan with from time to time
    anyway. . .
    avast said I had a virus but could not fix it so
    I ran RAV online and it said it found one infected and didn't fix whatever it was
    so then I rad BitDefender

    found 3 cleaned one

    now I googled and found removel sites for one( going through the reg. and looking for keys, etc. wich I had not a single key
    then I googled another and it sent me here:

    http://www.nsclean.com/trolist.html
    saying its ad/spyware/BHO

    shoul I just install what ever they offer?

    I have run everything I have
    adaware se
    SBS&D
    HjT

    and nothing ever gets rid of them(two)
    I know where the files are, but I don't know if I need them od if O can just delete them and go take a crap and relax
     
    Last edited: Sep 24, 2004
    jarcher, Sep 24, 2004
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You did not:
    - tell us your OS
    - tell us what virus were found
    - which ones were fixed
    - which ones were not fixed

    Also you only said you ran:
    adaware se
    SBS&D
    HjT

    You know the procedure requires you to follow all the steps in this Sticky thread < READ ME FIRST: Basic Spyware, Trojan And Virus Removal >

    If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

    Make sure you run Stinger and the online scans.

    Having multiple virus scan applications on your PC at the same time (even if not running at the same time) is a bad idea. They can interfere with each other. Choose one and stick withit. Get additional scans by using all the online scans which do not interfere with your full blown virus application.

    I'm not familiar with
    http://www.nsclean.com/trolist.html

    Perhaps someone else had tried them.
     
    chaslang, Sep 25, 2004
    #2
  3. jarcher

    jarcher I can't handle a title

    sorry,
    xp home

    C:\WINDOWS\hhU.dll=>(Upx) infected: Trojan.Spy.Spung.A
    C:\WINDOWS\hhU.dll=>(Upx) unable to disinfect
    C:\WINDOWS\system32\iagold3.exe=>(Upx) infected: Trojan.Golid.A
    C:\WINDOWS\system32\msxmlfilt.dll infected: Trojan.MSNSearch
    C:\WINDOWS\system32\msxmlfilt.dll unable to disinfect


    C:\WINDOWS\hhU.dll=>(Upx) infected: Trojan.Spy.Spung.A
    I looked for, found only the file, can delete it
    but there might be a reg key I cannot find
    I looked at a removel for it and they all say "if" you have these keys remove them
    and I do not


    C:\WINDOWS\system32\msxmlfilt.dll infected: Trojan.MSNSearch
    I removed the reg key, and deleted it

    and yes I have done everything in the text
    and ther is nothing in my hjt logs
    to even go there
     
    jarcher, Sep 25, 2004
    #3
  4. jarcher

    jarcher I can't handle a title

    yea, I thought my OS was in my sig still
    anyway, I'll worry about if later
    thamks for cheking on me anyway
    sorry for wasting your time
     
    jarcher, Sep 25, 2004
    #4
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Have you checked out this link:
    http://sarc.com/avcenter/venc/data/pf/adware.hungryhands.html

    If I read you correctly the only problems remaining are:
    C:\WINDOWS\hhU.dll <--- try the steps in the above link
    C:\WINDOWS\system32\iagold3.exe <--- did you look for this file and delete it? You did not say.

    HungryHands will usually put a line like the below in your registry and HJT should show it:
    O2 - BHO: (no name) - {BCF96FB4-5F1B-497B-AECC-910304A55011} - C:\WINDOWS\hhU.dll


    All steps to clean should be performed after booting in safe mode and viewing of hidden files must be enabled. And system restore should be disabled.
     
    chaslang, Sep 25, 2004
    #5
  6. jarcher

    jarcher I can't handle a title

     
    jarcher, Sep 25, 2004
    #6
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay let us know. But if you have not disabled system restore you could some day bring these problems back from a restore point.
     
    chaslang, Sep 25, 2004
    #7
  8. jarcher

    jarcher I can't handle a title

    yea I know
    I have disabled it

    again thanks
    I just posted prematurely
    (another problem I have)
     
    jarcher, Sep 25, 2004
    #8
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.
     
    chaslang, Sep 25, 2004
    #9

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds