Curse

Illusion · Feb 10, 2006, 02:50 PM // 14:50

OK so i turned on my computer (my other one) and a new *Virus Remover* Showed up and started spamming me with pop ups (most porn) it said it was a test to see if my computer could stop them (i doubted it from the very moment) so i tried uninstalling it then restarting my computer and it re-installed itself.

so now i have about 90 new viruses and i have been forced to wipe the computer and every thing that was on it any one ever heard of this or incase some one else gets it a way to remove it with out wiping the computer? (no I did not go on porn to get this virus)

koneko · Feb 10, 2006, 02:56 PM // 14:56

http://castlecops.com/article6514.html
http://wiki.castlecops.com/Malware_R...SpyAxe_Removal

You haven't run Windows Update lately, have you? Might have saved you a lot of trouble if you had (Win32/Exploit.WMF was patched a while ago)...

Faer · Feb 10, 2006, 02:58 PM // 14:58

Should be easy enough to remove without having to do a reformat. Boot your computer in safe mode, run all of your scanners and delete anything that comes up as malicious. Then dig through your registry for the program(s). It will have most likely made an entry there, which is why it keeps reinstalling itself.

Boom. Problem solved. If you need any tips on how to do any of the above steps, I'd higly reccomend using the all-powerful might of a few good search enigines. Scanners I highly reccomend are "Spybot Search & Destroy" and "Ad-Aware SE". Good stuff right there, and both free. That combined with a retail Virus scanner (or even AVG Anti-Virus, also free) can protect you fairly well.

I'd reccommend that if you do wipe your hard drive again any time soon (or if you haven't reinstalled the OS yet), that you should partition it so that you can have one section for Windows and only Windows (or whatever OS you run) and the other section(s) for the rest of your general junk. I've got my HDD's partitioned into a grand total of 7 drives... Just in case

EDIT

Yeah... Um, the exploit patch works too I suppose...

Thank you, koneko.

Illusion · Feb 10, 2006, 03:03 PM // 15:03

ok i read the remove tutorial and to me it makes it look like it wants me to install it in order to get rid of it you mind telling me what it really means cus that cant be it

phosho · Feb 10, 2006, 03:23 PM // 15:23

i would reformat it, its not that hard.

Illusion · Feb 10, 2006, 03:32 PM // 15:32

Quote:

Originally Posted by Avaith Faer

Should be easy enough to remove without having to do a reformat. Boot your computer in safe mode, run all of your scanners and delete anything that comes up as malicious. Then dig through your registry for the program(s). It will have most likely made an entry there, which is why it keeps reinstalling itself.

Boom. Problem solved. If you need any tips on how to do any of the above steps, I'd higly reccomend using the all-powerful might of a few good search enigines. Scanners I highly reccomend are "Spybot Search & Destroy" and "Ad-Aware SE". Good stuff right there, and both free. That combined with a retail Virus scanner (or even AVG Anti-Virus, also free) can protect you fairly well.

wheres the entry on the computer?

Loviatar · Feb 10, 2006, 03:53 PM // 15:53

Illusion

on one hand i feel sorry for you.

ON THE OTHER PEOPLE LIKE YOU WHO DONT UPDATE AND HAVE GOOD ANTI VIRUS PROTECTION ARE THE MAIN REASON WHY THESE THINGS SPREAD SO FAR AND FAST.

MY CONTRIBUTION IS A TOP RATED ANTIVIRUS THAT IS FREE AND UPDATES VERY FREQUENTLY.

HERE IT IS JUST FOR YOU

http://free.grisoft.com/doc/2/lng/us/tpl/v5

EternalTempest · Feb 10, 2006, 03:58 PM // 15:58

Run Windows Update, and do full anti-virus scan. You can use the link Loviatat give you for free AV and run it (after it's updated).

Do NOT pay for that program to "remove" it. It's false program.

Faer · Feb 10, 2006, 04:00 PM // 16:00

Quote:

Originally Posted by Illusion

wheres the entry on the computer?

Okay, as to that, use Google. I have no clue where this thing would be saving to, as I have never had to deal with it. Those links that koneko posted should tell you where to run to, and if they don't, Google the sucker a few times. That's what I always do. Heck, I'd actually search for it for you but I'm a bit busy on a graphics project that is too far behind schedule for my liking (supposed to be done a day and a half ago) so... My hands are a bit full.

Loviatar posted the link to AVG, it'd be wise for you to use it

Good program, I used it myself for a long time before getting a retail scanner and my PC came out clean.

Illusion · Feb 10, 2006, 06:01 PM // 18:01

Quote:

Originally Posted by Loviatar

Illusion

on one hand i feel sorry for you.

ON THE OTHER PEOPLE LIKE YOU WHO DONT UPDATE AND HAVE GOOD ANTI VIRUS PROTECTION ARE THE MAIN REASON WHY THESE THINGS SPREAD SO FAR AND FAST.

MY CONTRIBUTION IS A TOP RATED ANTIVIRUS THAT IS FREE AND UPDATES VERY FREQUENTLY.

HERE IT IS JUST FOR YOU

http://free.grisoft.com/doc/2/lng/us/tpl/v5

yea ok thx but i do run updates and i have AVG which did nothin and i was runnin it the whole time i have had this problem

and like i said and should have said in first post is that avg was runnin and doin nothin

EternalTempest · Feb 10, 2006, 06:21 PM // 18:21

Install Microsoft Antispyware - http://www.microsoft.com/athome/secu...e/default.mspx

Then Spybot Search and destory - http://www.safer-networking.org/

Then Ad-aware - http://www.lavasoftusa.com/software/adaware/

I was sure AV would fix this but it's a spyware / adware issue.

Run all three and between them it should clean things up.

Loviatar · Feb 10, 2006, 07:13 PM // 19:13

Quote:

Originally Posted by Illusion

yea ok thx but i do run updates and i have AVG which did nothin and i was runnin it the whole time i have had this problem

and like i said and should have said in first post is that avg was runnin and doin nothin

sorry about that

here is something else and the publisher (link provided) has experts on the hijack this forum to analize a hijack this log for you and give step by step solution

http://www.download.com/HijackThis/3...-10227353.html

Illusion · Feb 11, 2006, 03:11 AM // 03:11

Quote:

Originally Posted by Loviatar

sorry about that

here is something else and the publisher (link provided) has experts on the hijack this forum to analize a hijack this log for you and give step by step solution

http://www.download.com/HijackThis/3...-10227353.html

thx alot guys tho iv already wiped the computer but eh it didnt have anything important on the computer really it was the pop ups pissin me off

on a different note im on my friends computer and iv found that GWG is runnin a bit slower than usual and search button once again doesnt work any one else gettin this or maybe just cus im on my friends computer ?

koneko · Feb 11, 2006, 07:09 AM // 07:09

Quote:

Originally Posted by Illusion

thx alot guys tho iv already wiped the computer but eh it didnt have anything important on the computer really it was the pop ups pissin me off

Next time, save yourself a lot of hassle and keep your copy of Windows updated through Windows Update (in addition to running the scanning software others have mentioned).

Josh · Feb 11, 2006, 12:52 PM // 12:52

Also, keep Automatic Windows Updates enabled.

Cell Undertaker · Feb 11, 2006, 12:56 PM // 12:56

wow.. i have the same problem thx all... with me its so bad... when i run a game for an hour and close it, i got over 15 popups on my desktop....*sigh* ill try sum of your solvers

thx

Also.. what i figured out. Download the google toolbar..
http://toolbar.google.com/
this will stop pop ups

Cell Undertaker · Feb 11, 2006, 01:21 PM // 13:21

Quote:

Originally Posted by EternalTempest

Install Microsoft Antispyware - http://www.microsoft.com/athome/secu...e/default.mspx

Then Spybot Search and destory - http://www.safer-networking.org/

Then Ad-aware - http://www.lavasoftusa.com/software/adaware/

I was sure AV would fix this but it's a spyware / adware issue.

Run all three and between them it should clean things up.

I use adawara for over a year and i used it again.. i downloaded and runned the other two programs as said but i still get popups and in the lower right corner of my screen it keeps saying:

Your cumputer is infected!

Blabla... I got 2 of those... both say that they found a dangerous infection...

I did all the three scans and i still have the problem....

What to do now?

EternalTempest · Feb 11, 2006, 01:22 PM // 13:22

Reboot your pc in safe mode, then run each one (from within windows safe mode). This should prevent a lot from loading at start up making it harder to remove.

There are more extreme methods but let me know if that works.

Alias_X · Feb 12, 2006, 04:16 AM // 04:16

Search the forum.
A while ago I made a Spyware/Adware guide, most of the things that get rid of spyware and adware also get rid of virus's.

Search for it.

Cell Undertaker · Feb 12, 2006, 03:22 PM // 15:22

Quote:

Originally Posted by EternalTempest

Reboot your pc in safe mode, then run each one (from within windows safe mode). This should prevent a lot from loading at start up making it harder to remove.

There are more extreme methods but let me know if that works.

1 (maybe stupid) question.. How do I run my Computer at safe mode again I got Windows XP and with the old computers it was easy u just pressed f4 when it was starting up but with my 2,93 Gigahertz it startsup so fast i don't hav ethe chance to press f4 :P so how do I run it in safe mode then?