Help - Search - Members - Calendar
Full Version: Need Help How To Remove....
BleepingComputer.com > Security > Am I infected? What do I do?
   
soulshine
Im sorry if im in the wrong forum section im new to this, I need your help removing this viruses that my spyware doctor had found, I have only the trial version of this it only scans not remove so please help me..
Here are the names that it had found btw it had found 390 infectious virus sad.gif

Block Checker
HotBar
WorldAntiSpy
Known Bad Sites
Tracking Cookie(s)
Advertising
PSGuard
Trojan.Proxy.BK
Common Components for BC Computing spy software

Also i have ad aware Se Personal and Spybot S&D, when i fully scanned them in safemode it had found some viruses but it was able to remove the virus. The when it was spyware doctor turn to scanned and that it had found. Im currently scared of checking stuff from the interent ..im not even sure now if im being hijacked. plz help me with this matter. Also can u tel me if Spybot S&D, Spyware Doctor and Ad aware r good anti virus? thanks for ur help

//Mod edit: Moved from Windows XP Home and Professional forum to the more appropriate.
Rimmer
welcome.gif to BC Soulshine.

Your problem is not simple. I think you are confusing anti-virus and anti-spyware software.
QUOTE
can u tel me if Spybot S&D, Spyware Doctor and Ad aware r good anti virus?

None of them are anti-virus programs!
AdAwareSE and Spybot S&D are excellent anti-spyware programs and you should have them as part of your defence system. I do not have personal knowledge of Spyware Doctor.

Here is a basic method to clean your system, if it does not help you then you should consider submitting an HJT log to our volunteer team of experts in the HJT forum. If you wish to post an HJT log then please read the pinned posts 'How to use this Forum' and 'How to post a HiJack This log' at the top of the forum:
http://www.bleepingcomputer.com/forums/Hij...alysis-f22.html

Is your Anti-virus program current and updated? If not you can download a free anti-virus program here (US Link): AVG Free
When you have downloaded and installed it you need to go online to register it and update it. (It will probably prompt you to do this.)
Once you have installed AVG uninstall your old Anti-Virus software because you should only have one running on your system.

Do you have any anti-spyware installed? If not download and update all of the following:Reboot your computer in Safe Mode and run the anti-virus scan and anti-spyware scans there.
If you are not sure how to boot in Safe Mode there is a tutorial here: Safe Mode

See if that helps smile.gif
soulshine
Hey im a bit confuse by the firewall, i dunt have that. Also there are two options to choose from that is Hardware Firewall and a Personal Firewall, which one shuld i choose.
Rimmer
QUOTE
there are two options to choose from that is Hardware Firewall and a Personal Firewall


Most commercial anti-virus packages include a firewall, AVG does not. That's not a problem because there are several free firewall products available which are compatible with AVG. See the firewall section of the BC compendium of recommended Freeware:
Recommended Freeware
Windows XP includes a firewall of limited capability. You should only run ONE firewall on any PC.

- All of the above firewalls would come under the category Personal Firewall, I think it's widely accepted that a Hardware Firewall gives you greater security but many people recommend still installing a personal firewall on each computer as well.

So, what's happening with your scans in Safe Mode?
soulshine
Only Spyware Doctor can find the virus that i need to remove but the catch is if i want it remove i need to register which is to purchase it. i scanned my computer using Spybot S&D and ad aware too again still it culdnt find anymore, only spyware doctor can actually find those virus. It still hasnt changed it still:

Block Checker
HotBar
WorldAntiSpy
Known Bad Sites
Tracking Cookie(s)
Advertising
PSGuard
Trojan.Proxy.BK
Common Components for BC Computing spy software
Rimmer
QUOTE
Only Spyware Doctor can find the virus that i need to remove


No, no and NO.
Spyware Doctor may be a fantastic product but there are several free anti-virus and anti-spyware products that are just as good. If you want to buy a product go ahead, I'm just saying there's no need to.

This is what you should do -
Download everything I listed earlier, especially AVG Free. Also download Ewido Security Suite which complements anti-virus software by specializing in detecting Trojans, Dialers and Spyware and lots of other stuff. It is free for private use. Ewido download
When installing it untick 'Install Background Guard' and 'Install Scan via Context Menu'.

Install them all and update them all while online then reboot in Safe Mode and run all the scans.
Reboot normally and see what the situation is.

If after that you are not cleaned-up you should post an HJT log for expert analysis. To post an HJT log please read the pinned posts 'How to use this Forum' and 'How to post a HiJack This log' at the top of the forum:
http://www.bleepingcomputer.com/forums/Hij...alysis-f22.html

This is pretty much what I said before.
soulshine
It finally worked, but some werent deleted, I have a question. THe virus it had found do i keep it quarantine or delete them, my computer is slowing down especially when u just turn on the computer and wait it to load, it keeps making noise the loading noise bcoz of the anit virus i have.

QUOTE(Rimmer @ Nov 12 2005, 04:12 AM) *
QUOTE
Only Spyware Doctor can find the virus that i need to remove


No, no and NO.
Spyware Doctor may be a fantastic product but there are several free anti-virus and anti-spyware products that are just as good. If you want to buy a product go ahead, I'm just saying there's no need to.

This is what you should do -
Download everything I listed earlier, especially AVG Free. Also download Ewido Security Suite which complements anti-virus software by specializing in detecting Trojans, Dialers and Spyware and lots of other stuff. It is free for private use. Ewido download
When installing it untick 'Install Background Guard' and 'Install Scan via Context Menu'.

Install them all and update them all while online then reboot in Safe Mode and run all the scans.
Reboot normally and see what the situation is.

If after that you are not cleaned-up you should post an HJT log for expert analysis. To post an HJT log please read the pinned posts 'How to use this Forum' and 'How to post a HiJack This log' at the top of the forum:
http://www.bleepingcomputer.com/forums/Hij...alysis-f22.html

This is pretty much what I said before.
tg1911
QUOTE
it keeps making noise the loading noise bcoz of the anit virus i have.
What antivirus are you using, that makes noise?

Have you run your Ewido in Safe Mode?
If you have, and your still having problems, do as Rimmer suggested, and post a HijackThis log for examination.
Read How to post a HijackThis Log.
Please read, and follow, all directions carefully.

Then, run a log, and post it in the HijackThis forum, at this link. Do not, fix anything, yet.
A member, of the HJT Team, will help you out.
It may take a while to get a response, because the HJT Team are very busy. Please, be patient, these people are volunteers. They will help you out, as soon as possible.

NOTE:
Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies, might assume someone is already helping you out, and will not respond. So, just make your post, and let it sit there, until a team member responds. This way you will be taken care of, in the most timely manner.
soulshine
Yup i have run in it safe mode and scanned for viruses and also removed them. I asked a question you see um on ewido the viruses r quarantine shuld i delete tha virus from quarantine doin this, is that mean the virus is terminated or its still there. also its makin noise cause it loading but takes too long especially opening internet explorer its like waiting for 3 minutes, is there anything 2 do bout that? thanks
soulshine
Is the problem the anti virus coz its loading...so i removed Spyware doctor, but now i feel more unsafe, this is wat i currently have...Norton antivirus, SPybot S&D, ad aware are they all good protection?
tg1911
QUOTE
this is wat i currently have...Norton antivirus, SPybot S&D, ad aware are they all good protection?
Yes those are good.
Don't you also have Ewido?
You should also use the 2 others Rimmer suggested:
aČ free
Spywareblaster
In addition to every thing mentioned, I also use SpywareGuard.
Spywareblaster, and SpywareGuard, will help prevent spyware/malware from being installed on your computer, in the first place.

Anything that has been quarantined, has been neutralized.
It can no longer do any harm.
You can delete it, if you want to.

Spyware Doctor is a program you don't need to have.
These programs, Rimmer and I have suggested, will do the same thing, for free.
Don't pay for anything you don't have to.
All of the programs we've mentioned, updated and used regularly, will do a lot to keep your computer clean of spyware, trojans, keyloggers, browser hijackers, etc...

You should post a HijackThis log, to the proper forum (HijackThis Logs and Analysis), to be examined.
Instructions on how to do that, can be found in Rimmer's, and my, previous post.
soulshine
oops I deleted ewido when it has finished scanning and also when i deleted da virus, coz it was making the computer load in the first place, like clickin on internet explorer taking foreva to pop up yea. Is that good or bad? now its actually quicker now when clikcing internet explorer coz i deleted ewido and also spyware doctor. thank u guys for helping me
tg1911
When installing ewido security suite, under Additional Options did you uncheck:
Install background guard
Install scan via context menu

Ewido is a resource hog when it runs on startup, which makes startup slow.
That's why you don't want to Install background guard.
Then you can just run it, when you need it.
It's a good program, that you should keep.
soulshine
I went to some other helpful forum this is the website www.cybertechhelp.com. Well i have read some tweaks:

Speed Up Web Browsing!

--------------------------------------------------------------------------------

If you are in a networked environment and browse via network neighborhood, this tweak is for you. It speeds up your network browsing experiance.

Click Start | Run | Then type Regedit

Navigate to HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/Current Version/Explorer/RemoteComputer/NameSpace

Locate and delete this key {D6277990-4C6A-11CF-8D87-00AA0060F5BF}

Reboot.
................................................................................
......................................

Shuld I try this tweak, coz seriously i really need my internet fast, its really slow, im currenly using DSL, shuld i or shuldnt?
soulshine
I need to remove "Malware.Psguard"

I already scanned my spybot S&D and also ad adware, found it and also removed, shuld i keep it quarantine? also i tried scaning it again and its back again.
Starbuck
I really think you should take the advice that was given to you earlier....
Run a HJT log on your computer and let our experts sort your system out, once and for all.
After your computer is sorted and clean, it will probably run a lot faster.
Also, if you need a faster browser then maybe a change over to 'Firefox' would be more benificial.
Nicky
In addition to the above, ie, Spybot, adaware, Ewido
Have you tried the block check removal tool, it seems to be the only one that actually removes that particular nasty.
I also found that Dr Web cure it was useful.
DOWNLOAD BOTH TO THE DESKTOP & Run in safe mode.
With DR Web
Run DR web then after the scan,
Click on the GREEN screwdriver
ACTIONS tab -> Adware-Dialers-Riskware-Hacktools, select ->DELETE.
Click on the drive(s) you want to scan . A red dot will mark the selected drive(s)
Then hit the green arrow in the orange button in lower right corner It will now scan your drive(s), say "yes to all"
soulshine
ok i tried hijacked this log, and i posted it. I neva wanted to try it coz im scared the name is scary hijackthis fingers cross
soulshine
still waiting for the respond to my hijack log, i hope they find something coz even my internet is goin slower than eva eg like pic loading.
Joshuacat
Good-luck, soulshine.

Remember that the logs are typically looked at in the order that they are in the waiting list, with the oldest one handled first. Our volunteer HJT members are extremely busy right now, but I am sure they will get to your log soon.

Take care,
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.