Author Topic: help with virus?  (Read 30430 times)

0 Members and 1 Guest are viewing this topic.

wshwind

  • Guest
help with virus?
« on: February 07, 2008, 05:05:52 PM »
Hi,
I am having a problem with my pc. I have used AVG and Spybot S@D. Avg seems to be unable to get it all, Spybot has errors when cleaning.I cannot access my control panel. I have attached my logfile.
Any assistance is greatly appreciated.

Spiritsongs

  • Guest
Re: help with virus?
« Reply #1 on: February 07, 2008, 07:20:13 PM »
 :)  Hi :

     Your HijackThis log indicates you are using McAfee for your security ;
     since this Forum is for Avast Users, I recommend you ask for help on the
     McAfee Support Forums at http://forums.mcafeehelp.com/index.php .

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: help with virus?
« Reply #2 on: February 07, 2008, 11:15:56 PM »
Hi, I might be biased, but no prejudiced.  ;) A bug's a bug and I like to squash them, no matter who let them in.

So if you're still with, I'll give you a hand.

Download ComboFix from Here or Here to your Desktop.

Double click combofix.exe and follow the prompts.

When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
Note: Do not mouseclick combofix's window while its running. That may cause it to stall.


wshwind

  • Guest
Re: help with virus?
« Reply #3 on: February 10, 2008, 10:12:46 PM »
Hi and thanks....
I don't use mcafee? I don't know how to remove it??? A friend put AVG and Spybot.... mcafee didn't work for me before... didn't know it was still running... and if it is why am I having this issue... lol, obviously didn't work well this time either....
Anyways will do combofix and post log

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 89015
  • No support PMs thanks
Re: help with virus?
« Reply #4 on: February 10, 2008, 10:36:51 PM »
McAfee has an uninstall tool that you could run to ensure any possible remnants are removed.
http://download.mcafee.com/products/licensed/cust_support_patches/VSCleanupTool.exe
2007 version - http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe
Also see - How do I uninstall SecurityCenter? http://ts.mcafeehelp.com/faq3.asp?docid=71525
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

wshwind

  • Guest
Re: help with virus?
« Reply #5 on: February 10, 2008, 10:44:16 PM »
Thanks, it seems to take up alot of space for nothing. I will do. I also didn't know what avast was, I did a searchfor help with this issue and got this forum. sry. I will remove. also here is the combofix.
Any assistance is greatly appreciated

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: help with virus?
« Reply #6 on: February 10, 2008, 11:48:30 PM »
According to HJT, you have Authentium AntiVirus running, some of mcafee and not AVG antivirus. The AVG you have is AVG antispyware, which is not an antivirus program, but it is compatible with antivirus programs, so keep it.

Follow DavidR's advice on removing the rest of mcafee.

If Authentium AntiVirus is working and updtaed, we'll carry on with that as your av. If not please uninstall it and install avast.


Let's get started on this.

Please download SmitfraudFix (by S!Ri) to your Desktop.
Download this ptool from: http://siri.urz.free.fr/Fix/SmitfraudFix.exe
Double-click Smitfraudfix.exe
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply as an attachment. The report can be found at the root of the system drive, usually at C:\rapport.txt

IMPORTANT: Do NOT run any other options until you are asked to do so!

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool";
it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user

Please attah the smitfraudfix and a new HJT log in your next reply. Thanks

wshwind

  • Guest
Re: help with virus?
« Reply #7 on: February 16, 2008, 06:16:17 AM »
Sorry for the time lapse. I was trying to get this fixed before I had to fly out, didn't make it. just got back tonight... long day with switching flights. will do as told first thing this morning.

again i am sorry and thanks for your assistance.

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: help with virus?
« Reply #8 on: February 16, 2008, 07:08:40 AM »
No problem, we're still here.  :)

wshwind

  • Guest
Re: help with virus?
« Reply #9 on: February 16, 2008, 01:48:41 PM »
okay.. here goes. I have no access to task manager, had 5 explorers open, could not close. got pass that. computer freezes alot, has to catch up with itself. I keep getting bad image error boxes popping up, active x controls will not run, script error pop-ups as well. tried to download mcafee unistaller that you listed above. goes almost 100% then I get (not responding). finally got to control panel, but cannot remove any programs.
So..... Do I really need to remove all of mcAfee first? tried...   :(
Cannot locate Authentium Antivirus..... :(            I would unistall that as well
will try Smitfraud fix now....

wshwind

  • Guest
Re: help with virus?
« Reply #10 on: February 16, 2008, 01:57:19 PM »
started smitfraud....
stuck on....
scanning processes....
scanning hosts......
hasn't gone any further. Is this normal?
 I also have find.exe-bad image and cmd.exe-badimage pop ups every time I  x  one out the other pops up.

wshwind

  • Guest
Re: help with virus?
« Reply #11 on: February 16, 2008, 02:03:10 PM »
Ok. Smit finished... Had to keep closing pop-ups until scanning finished. attached report

wshwind

  • Guest
Re: help with virus?
« Reply #12 on: February 16, 2008, 02:08:49 PM »
heres new hijack

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: help with virus?
« Reply #13 on: February 16, 2008, 04:41:38 PM »
Let's see if we can get some of this cleared up, then tackle the multi antiviruses.

Depending how bad it is this could take some tme. Let it run to completion.

1. Restart your computer

2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8.

3. Instead of Windows loading as normal, a menu should appear

4. Select the first option, to run Windows in Safe Mode.

5. When you are at the logon prompt, log in as the same user as you usually do.
.
4. When your computer has started in safe mode and you see the desktop.

5.Close all open Windows.

6. Now, double-click on the SmitFraudfix icon that should be residing on your desktop

7. You will now see a menu in a blue dos screen. Press the number 2 on your keyboard and the press the enter key to choose the option Clean (safe mode recommended).


8. The program will start cleaning your computer and go through a series of cleanup processes. When it is done, it will automatically start the Disk Cleanup
9. This program will remove all Temp, Temporary Internet Files, and other files that may be leftover files from this infection. This process can take up to a few hours depending on your computer, so please be patient. When it is complete, it will close automatically and you should continue with step 11.

10. When Disk Cleanup is finished, you will be presented with an option asking Do you want to clean the registry ? (y/n). At this screen you should press the Y button on your keyboard and then press the enter key.


11. When this last routine is finished, you will be presented with a red screen stating Computer will reboot now. Close all applications. You should now press the spacebar on your computer. A counter will appear stating that the computer will reboot in 15 seconds. Do not cancel this countdown and allow your computer to reboot.

12. Once the computer has rebooted, you will be presented with a Notepad screen containing a log of all the files removed from your computer. Examine this log, and when you are done, close the Notepad screen. Please Save This Log. We will need to see this. If it is easier for you save it to the desktop.



« Last Edit: February 16, 2008, 04:43:26 PM by oldman »

wshwind

  • Guest
Re: help with virus?
« Reply #14 on: February 17, 2008, 10:18:07 PM »
will do