Author Topic: New Facebook virus ?  (Read 11880 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33196
  • malware fighter
Re: New Facebook virus ?
« Reply #15 on: May 15, 2010, 11:04:14 PM »
Hi Pondus,

Thank you for forwarding this where this should go,

pol
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline chabbo

  • Full Member
  • ***
  • Posts: 175
Re: New Facebook virus ?
« Reply #16 on: May 15, 2010, 11:13:33 PM »
arent pondus and polonodus same ppl?

I'm getting wierd now :O


http://www.mediafire.com/?zkrivmmedlq

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33196
  • malware fighter
Re: New Facebook virus ?
« Reply #17 on: May 15, 2010, 11:24:44 PM »
Hi chabbo,

Pondus and Polonus are both interested in analyzing online malicious website malcoded scripts and help protecting against these. Pondus is a Norwegian and Polonus is Dutch, they are two different persons. But when malicious websites are being reported you may see their nicks here. Essexboy is a trained malware eliminator and to my experience he is one of the best around and whit malware removal you are lucky if he comes to the rescue,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37029
Re: New Facebook virus ?
« Reply #18 on: May 15, 2010, 11:29:23 PM »
Quote
arent pondus and polonodus same ppl?
tjena grabben......hur mår ni.... ;)
no i am me, and he is he.......polonus...... ;D
« Last Edit: May 15, 2010, 11:31:55 PM by Pondus »

Offline chabbo

  • Full Member
  • ***
  • Posts: 175
Re: New Facebook virus ?
« Reply #19 on: May 16, 2010, 12:24:33 AM »
problem solve with Formate pc  :'(

but are both polonius working at Avast house there they build and work with avast or are they just sitting home and work for avast?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: New Facebook virus ?
« Reply #20 on: May 16, 2010, 12:33:00 AM »
OK your log was large because you have either just re-installed or updated to SP3

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following

Code: [Select]
:OTL
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
[2010-05-15 20:47:50 | 000,274,432 | RHS- | C] (Ogbh4L2MOks73vCqx) -- C:\Documents and Settings\elmou\Application Data\msng.exe

:Commands
[resethosts]
[purity]
[emptytemp]
[EMPTYFLASH]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37029
Re: New Facebook virus ?
« Reply #21 on: May 16, 2010, 12:39:25 AM »
Quote
but are both polonius working at Avast house there they build and work with avast or are they just sitting home and work for avast?
we do not work for avast,just normal avast user like you

Offline chabbo

  • Full Member
  • ***
  • Posts: 175
Re: New Facebook virus ?
« Reply #22 on: May 16, 2010, 01:39:24 PM »
my mother got the virus how should i help she remove it on a easy and fast way without Reinstall xp

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: New Facebook virus ?
« Reply #23 on: May 16, 2010, 01:53:40 PM »
Run OTL as directed to you previously - I will remove the elements and then all should be OK.  There was no requirement for you to have reformated

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37029
Re: New Facebook virus ?
« Reply #24 on: May 16, 2010, 08:03:23 PM »
Now detected by Malwarebytes as " Worm.Palevo "