Please help - lots of viruses that no antivirus is removing

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by superclio, Jun 10, 2005.

  1. superclio

    superclio Private E-2

    HI there,
    I managed to pick up a handful of horrible viruses/trojans that nothing is removing. ABG Grisoft recognised them at first, but wouldn't remove them - now it doesn't even recognise them. Trend micro did the same, and Pandasoft recognises them, tell me the solutions is to delete them when I'm offered that, but it doesn't actually offer this and the report states that the files were not disinfected. When I searched this website it doesn't seem to recognise the names I have. According to the Pandasoft log the details are as follows:

    Exploit/Codebase X in my temp internet files
    VBS/Psyme C in temp internet files
    Trj/Lowzones.HE in windows/system 32
    Bck/Pidor A also in windows/system 32

    It also tells me that I have an enormous amount of adware that AdAware hasn't recognised, nor has Microsoft's Beta AntiSpyware. I also downloaded an antivirus program called TCMonitor which also seems to be identifying the viruses but I cannot figure out how to remove them using this software. In fact that software is kind of driving me nuts. TCMonitor tells me:

    Virus identified Jave/ByteVerify Infected, Embedded object (2 are in temp interent files, another 2 are in C:\RECYCLERS)
    Virus identified Java/ByteVerify Infected, Archive (1 is in the temp interent file, 1 in RECYCLERS)

    As far as I am aware my browser has been hijacked - my homepage has been reset and I cannot do any searches (it brings up porn searches). If it has done more than that I am not yet aware of it.
    I use Windows XP, (have SP2) with Zonelabs, AdAware, Grisoft AVG Antivirus and Microsoft AntiSpyware. But still I can't shift these buggers.

    PLEASE HELP!!
    Thank you very much.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please follow the steps below:

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

    Also try the following. Download HOSTER and then follow the below steps.
    • Unzip Hoster to a convenient folder such as C:\Hoster
    • Run Hoster.exe, click Restore Original Hosts and then click OK.
    • Click the X to exit the program

    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds