Avast WEBforum

Other => Viruses and worms => Topic started by: lil_virus_fighter on September 10, 2008, 11:33:41 AM

Title: I think I beat the dl.exe.....
Post by: lil_virus_fighter on September 10, 2008, 11:33:41 AM
its been three days of non stop scanning and removing files, but I think I finaly finished my problem with dl.exe

first I got dl.exe from a friend that had the dl.exe he didnt know it and he sent me a file, and it was infected. for like 6 months I never knew I was infected, but the constent dos window poping up after every exe file that was opened got more and more suspicious. still not knowing I had this virus/worm, I sent myself a RAR file to my secondary computer thus, another computer has been infected. thats how I got the virus.

how I got it off.

1st. got Avast
2st. right click mycomputer, go to system restore and check the turn system restore off
3rd Start/run, then type msconfig, then go to the startup tab, then I clicked disable all
------------------------------------------------------------------------------------
3rd. I did this to prevent regeneration or activation of the virus.
------------------------------------------------------------------------------------
4th. I ran a thorough scan.
5th. after the scan i usually delete it all, and if it gives you an error like file is likely a decompressing bomb
i delete it manualy.

6th. after removing it all, do one more scan for the remainder just in case.

after i did all these things i have no more infections anymore
even after i re enabled all my start up files i dont get infected anymore, im assumming im no longer infected now.

i believe there are more then one dl.exe virus's because the dl.exe one i saw in a how to remove guide
had totaly diffrent symptoms then mine.

Avast called it a Tenga B virus/worm
it infects all EXE files that you open.

symptoms about knowing you have this virus.
when you cannot access the internet, when ur internet is active.
when your computer crashes and will only let u run in safemode
when you get a dos named dl.exe pop up every time you open a exe file.

WARNING
doing it my way can possibly delete alot of ur exe files that u dont want deleted good news is if you have,
an extra computer you can send the exe's from that computer over to the bad computer
(what i did)

if you have this problem i hope it helps you, because no one else had how to remove post anywhere on the web,as far as i looked.
Title: Re: I think I beat the dl.exe.....
Post by: Lisandro on September 10, 2008, 02:14:16 PM
Thanks for posting the solution in your case.
Tenga is a very difficult virus to fully remove.

To be sure you're clean, I suggest:

1. Disable System Restore and then reenable it again.
2. Clean your temporary files.
3. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! (http://www.freedrweb.com/cureit/) instead.
4. Use SUPERantispyware (http://www.superantispyware.com), MBAM (http://malwarebytes.org/mbam.php) or Spyware Terminator (http://www.spywareterminator.com/) to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
5. Test your machine with anti-rootkit applications (http://www.antirootkit.com/software/index.htm). I suggest avast! antirootkit (http://files.avast.com/files/beta/aswar.exe) or Trend Micro RootkitBuster (http://www.trendmicro.com/download/rbuster.asp).
6. Make a HijackThis (http://www.bleepingcomputer.com/files/hijackthis.php) log to post here or, better, submit the RunScanner (http://www.runscanner.net/) log to to on-line analysis.
7. Immunize your system with SpywareBlaster (http://www.javacoolsoftware.com/spywareblaster.html) or Windows Advanced Care (http://www.iobit.com/AdvancedWindowsCarePersonal/index.html).
8. Check if you have insecure applications with Secunia Software Inspector (http://secunia.com/software_inspector/).
Title: Re: I think I beat the dl.exe.....
Post by: CharleyO on September 10, 2008, 08:16:21 PM
***

Welcome to the forums,  lil_virus_fighter.   :)

We are happy you were able to rid your computer of Tenga.

Please come back often, learn more, and maybe help others.


***
Title: Re: I think I beat the dl.exe.....
Post by: lil_virus_fighter on September 10, 2008, 08:40:45 PM
Thanks for the welcome i've been watching this forum for a while now, i never found one for the exact thing I had so i had to make it myself. it was hard i bet my dad could have done it in 1 day but he didnt care too much about it, even tho this virus could mess up almost any computer it touches.

my teachers are online, i basicly do assignments over the internet for school, and i wanted to get rid of this thing before i make a mistake of getting my teachers infected.

having this virus wasnt a scary thing, it gave me something to do. I learned alot from this experience.
Like

Avast Rules
You  cant trust your friends but can you trust they're computer? xD


btw this is my first virus i've ever had.
Title: Re: I think I beat the dl.exe.....
Post by: Jtaylor83 on September 10, 2008, 09:34:13 PM
Tenga should be covered by avast! Cleaner (http://www.avast.com/eng/avast-virus-cleaner.html).
Title: Re: I think I beat the dl.exe.....
Post by: lil_virus_fighter on September 11, 2008, 05:57:24 AM
mine was Tenga/B i dont know if it covers that but i had to do it the hard way i guess. anyways it said Remove virus completely, and when i did it, it didnt really do anything, the virus would regen after i did that. but i suppose if i would prevent it from regenerating i could have tryed that.
its confusing.

topic change
----------------------------------------------------------------------------------------------------------------------------------
but you know what i dont understand, if someone really wants to be distructive, why dont they make a virus to destroy the system 32?
or get what it wants and then destroy the computer.i've never heard of such a virus but if it ever happends it would really suck.