Virus Need Help Please!!!!!!!!!

Wolf the Wild · Aug 22, 2005

I Have never goten a virus that smoked(Fubard) (messed up really bad) my computer. ok i have a virus called Bloodhound.W32.EP i have tryed to do a serch on it in several forums and i cant find info on it? is it new or am i looking in the wrong place? I have tryed everything and cant get it out let me tell you what it is doing. Ok All of a sudden now i get a message saying i have a driver that is not working and will be disables, then it disables it.....ooh this is just the start. It compleatly disabled my Norton corp. edition so i uninstall it and download the norton beta eddition, it was free for 15 days, in 15 seconds it shuts down says the 15 days is up and auto uninstalls. I tryed to install AVG i was told its a very good Anit Virus well it starts to dowload and half way threw it i get a message saying there is a error instalation can not continue please look and said web site for help. well of cours there was no info on the web site about my problem. NOTE: i tryed to instull and uninstall theses Anti Virus programs several times not just one time. This virus is attacking any anti virus program i try to instull. Also i have a Spy Wear pop up in my tool bar that will not leave it is always saying "Your Computer is infected with a virus you neeed bla bla bla. If i click on it then i go to a web site where i can buy some spywear crap. Also one time when i did get my norton to scan i deleted one virus but this one stayed and it left a Alert warning. I also keep getting this Alert warning that says System warning you have 4 errors 1 your computer is slowed down 2 your internet is slowed down and so on and then if i click on it , it wants me to download some spywhere.........IF you have read all this THANK YOU ANd PLEASE SOMEONE HELP ME!!!!!!! i dont know what else to do to get rid of this virus????????? Your humble NOOB needs help Wolf the Wild

chaslang · Aug 22, 2005

It is well documented. For one example see:

http://securityresponse.symantec.com/avcenter/venc/data/w95.cih.1049.html

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

Wolf the Wild · Aug 23, 2005

Hey!!!! I cant thank you enough i followed your steps and it worked /CHEER . i have on last problem however, when ever i restart my comp i get a pop up that says something about i have a driver that is unstable and can cause problems with my system and will be disabled. it gives me a web site to go to and try to get updates but when on that site i can not find any downloadable driver info or updates?. Is this a virus you think or did all the viruses i had just damage that driver and i just need to find a way to fix it? I did a driver scan with norton and it did not find anything wrong with any drivers, when i do a virus scan after i did all that you told me to do i have no viruses? The driver dont seem to effect anything on my comp that i know of but i have not tryed everything yet, it may be for a CD burner drive or something i have to tryed to use yet. What is the best way to find out what is wrong or how to fix this problem?? LAST but Not least THANK YOU VERY MUCH!!!!!! for sharing your knowledge with me, i would have been screwed if it was not for you being good enough to share this (FREE) information with me, words can not desribe how truely thankful i am for your help. Wolf the Wild UNITED STATE's AIR FORCE

chaslang · Aug 23, 2005

Your welcome!

Let's make sure you have no other hidden problems. Follow the directions I gave you and post your HijackThis log as an attachment. Also, can you give more specific info on the popup message about this "driver". Give the exact word for word message.

Wolf the Wild · Aug 23, 2005

Ok man/girl or whatever gender you are the message im getting is as follows.

Direct CD 3
A Driver is installed that causes Stability problems with your system. This Driver will be Disabled, Please Contact the driver Manufacturer for an update that is compatable with the verson windows

To Run the Program, click continu, For more info, click Details.
NOTE: when i click on more details it says that i need to go to Roxio easy media creator web site and look for updates so when i go to the link provided it takes me to Roxio web site i serch threw support ect ect and can find nothing about drivers/fix drivers/update drivers or anything? Mainly all i see is one buy roxi and 2 update or buy softwear.
OK thats it, Now when i click continue another box opens saying this.

Direct X Application Error, Application failed to initalize properly (0xc0000142).click ok to terminate the application.

Brief explanation about my system: Around the same time i got hit with all theses viruses i bought and installed 2 new things 1. Gforce FX 6200 256Mb Graphics card and 2.a DvD rom Drive, to the best of my knowledge they are both installed and bluged in corectly, my main CD rw is master and my DvD Drive is on slave. oooh also i have added a new sound card its called Montego DDL 7.1

ok i will attempt to add the hijack log below......ok not sure how to post hijack log i will try to post in ain a seperat message so i dont mess up or lose this info to you.

Wolf the Wild · Aug 23, 2005

ok lets se if this worked

chaslang · Aug 23, 2005

Actually you never completed all of the READ ME FIRST steps. The online scanners were never run. But your problem may be more due to the fact that you OS is so out of date. You have none of your required Windows Updates. Not sure how much of your other software is out of date. For example Direct CD is packet writing software for writing directy to CD and DVDs. Originally it was created by Adaptec but Roxio bought this along time ago. You still have the old stuff from Adaptec. It may be out of date too.

You also have Added by the SDBOT.T backdoor TROJAN indicated by:

O4 - HKLM\..\Run: [Config33.exe] Config33.exe
O4 - HKLM\..\RunServices: [Config33.exe] Config33.exe

And another trojan indicated by:
O4 - HKLM\..\Run: [RegSvr32] C:\WINNT\system32\msmsgs.exe

Finish ALL the steps in the READ ME FIRST including the online scanners and then post a new HJT log.

Log in or Sign up

Virus Need Help Please!!!!!!!!!

Wolf the Wild Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Wolf the Wild Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Wolf the Wild Private E-2

Wolf the Wild Private E-2

Attached Files:

hijackthis.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member