Need help with Virus/Trojan!

SidSid Corwid of the Free Join Date: 2003-01-28 Member: 12903Members, Constellation
<div class="IPBDescription">Won't go away...</div>I've spent the whole day trying to rid my computer of a virus/trojan. I've used Adaware, Spython and Norton - all fully updated with full/deep system scans. This took around three hours to complete, and then I scanned a second time. Even then, one single file in the registry will not stay deleted.

Yet, it only rid my computer of some minor problems - my firewall keeps telling me that someone is trying to run "winlogon.exe" - someone is trying to log onto my computer through a trojan.

It's very annoying. My browser (Firefox 2.0) keeps getting redirected to "Adfarm" now and then, and when I'm on my desktop, Internet explorer windows will pop up randomly with very crude images.

One time I came back to my computer and discovered that a guest account had been created, "ASP.net Machine A..." it was called.

I really need some help. I'm not sure which scanner to trust anymore, because I keep getting misdirected to fake adware scanners that force you to buy them to "clean" your computer.

I really need your help guys,

Thanks for your time,
-Sid

Comments

  • MantridMantrid Lockpick Join Date: 2003-12-07 Member: 24109Members
    Get Avast (home version is free), and schedule a boot-time scan. Get the nasties before they can load.
  • SloppyKissesSloppyKisses omgawd a furreh&#33; Virginia Join Date: 2003-07-05 Member: 17942Members, Constellation
    I agree use Avast.

    Also most people that get the nosty virii still use IE, I suggest you download firefox and use that if you dont have it. It will help at keeping the nosty off you.
  • RustySpoonRustySpoon Join Date: 2003-07-10 Member: 18069Members
    I gots the same problem. Antivir alerts me for "krepperc.exe" like 3 times a day. Each time I dele it, it pops back up. I've used trendmicro housecall and antivir, in addition to antivir itself, but it keeps popping up.

    Firstly, is antivir any good? Nowadays it gives a pop-up window like once a day, I remember it didn't do that like 6 months ago.

    Secondly, is the virus/trojan/whatever worth bothering with? I mean, it seems relatively harmless. No symptoms and no unusual processes.
  • ComproxComprox *chortle* Canada Join Date: 2002-01-23 Member: 7Members, Super Administrators, Forum Admins, NS1 Playtester, NS2 Developer, Constellation, NS2 Playtester, Reinforced - Shadow, WC 2013 - Silver, Subnautica Developer, Subnautica Playtester, Pistachionauts
    If you want to be fully sure:

    Download spybot and update it, don't run it.
    Download adaware and update it, don't run it.
    Download avast and update it, don't run it.

    Shut down and go into safe mode, run spybot and adaware in any order.
    Still in safe mode, load avast, schedule boot time scan. Reboot and let avast do it's thing.

    That should really clear anything out. If not, you can look at using Hijack This.
  • RobertoRoberto Join Date: 2003-03-16 Member: 14591Members, Constellation
    hijackthis is a good program, but it takes some practice to get it right.

    The above method should work, spybot is a good program.

    I usually get lazy and sort my system32 by date modified and delete based on that, but I wouldn't recommend this
  • CForresterCForrester P0rk(h0p Join Date: 2002-10-05 Member: 1439Members, Constellation
    All antivirus programs are awful compared to NOD32. NOD32 catches more than any other antivirus program I've ever seen. Go grab the 30-day trial or something.

    Also, get HijackThis and post a log here, please.
  • RuByRuBy Join Date: 2002-12-12 Member: 10732Members
    <!--quoteo(post=1571684:date=Oct 29 2006, 01:54 PM:name=CForrester)--><div class='quotetop'>QUOTE(CForrester @ Oct 29 2006, 01:54 PM) [snapback]1571684[/snapback]</div><div class='quotemain'><!--quotec-->
    All antivirus programs are awful compared to NOD32. NOD32 catches more than any other antivirus program I've ever seen. Go grab the 30-day trial or something.

    Also, get HijackThis and post a log here, please.
    <!--QuoteEnd--></div><!--QuoteEEnd-->

    Agreed. I used Norton for about 6 years and I have to admit it caught most of the nastyware I encountered, but it takes huge amounts of resources and when something gets through you're in for pain. I switched to NOD a little less than a year ago and I just love it. Haven't had a single problem since.
  • SidSid Corwid of the Free Join Date: 2003-01-28 Member: 12903Members, Constellation
    Well, after a full night of deep system scanning, lots of research and anti-malware program downloading, shutting down my Internet... I think I have finally gotten rid of most of the Trojan. It came onto my computer with fake anti-spyware program called "SpyQuake". But, it's killed now. (Most of it. The rest is quarantined and will not function anymore).

    This was my computer at one point...

    <img src="http://pgroves.googlepages.com/Yowza.PNG" border="0" alt="IPB Image" />
  • MonkfishMonkfish Sonic-boom-inducing buttcheeks of terrifying speed&#33; Join Date: 2003-06-03 Member: 16972Members
    Let this be a lesson to you. Norton couldn't catch a trojan if it was the world champion trojan catcher with an automatic trojan catcher machine.
  • SidSid Corwid of the Free Join Date: 2003-01-28 Member: 12903Members, Constellation
    Yes! But, it's free and I'm lazy.
  • ShoeboxShoebox Join Date: 2004-11-15 Member: 32817Members
    i've found norton to suck...badly. i use AVG and have found it to work quite nicely. although, not quite sure on this, i think AVG is not going to be free anymore. can anyone correct me on this?
Sign In or Register to comment.