BleepingComputer.com: Annoying Virus

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Annoying Virus It just will not go away

#1 User is offline   librat 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 29-January 10

  Posted 30 January 2010 - 12:19 AM

I have a virus I cannot get rid of. It started one day when my husband was playing PurePlay poker. He had nothing else open and a pop up appeared then the desktop picture went away. It was all down hill from there. We use Lime Wire, so I am assuming it came frome there, but we have been using it for a long time and although we get an occassional virus, I can usually get rid of it within a few hours. This one, however, seems to be way different. It will redirect up to about ten times before we can get to the page we want. Pop ups come from nowhere. I have the pop up blocker (IE) on, too. My web pages have been just shutting down out of the blue. The other night, (I have been at this one for 5 days now) every time I would go to an antivirus site it would say a network cable has been unplugged and I will lose my connection (we have DSL) Last night, my husband was on the computer and it just said it was going to shut itself down. And lo and behold it did. I know this sounds a little OCD, but I now am the proud owner of 8 softwares of different types. Each scan I run finds something and removes it, but nothing changes. I do SmitFraud Fix and it won't fix it. I have AVG. It won't either. Neither does PC Tools SpyWare Doctor, MalWare Bytes, or SpyBot S&D. I find this one a lot on SpyBot (wmdtc.exe) There are several others that keep coming back. I even run them back to back (BORING) and it is still there. I am about to just format, but I am on a mission as this virus or whatever is ticking me off!!! LOL I want to know what is going on? Does anyone have any ideas? Please help... :thumbsup:

#2 User is offline   Con10119 

  • New Member
  • Find Topics
  • Group: Banned Spammer
  • Posts: 12
  • Joined: 22-January 10
  • Gender:Male

Posted 30 January 2010 - 09:34 AM

what i would try doing is going onto your task manager ctrl alt delete... then on processes at the top look on there for 'wmdtc.exe' and any other .exe files that your antivirus or spybots pick up. When you locate the .exe file you need to right click it and then click end process.

(now this bit may/may not work) but once done you will then need to run 'msconfig' go to startup and processes and look for the programs you have just just ended in the task manager.

when you have done all these you should be able to double check on spybot and malware bites and then try and erase from there root file..

Give this a go.. if this doesn't work i will be glad to try and help some more on my forum utraz.com but this should work anyway

#3 User is offline   librat 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 29-January 10

Posted 30 January 2010 - 01:18 PM

Thank you Con it did not work :thumbsup: I am going to your forum now.

#4 User is offline   librat 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 29-January 10

Posted 30 January 2010 - 08:06 PM

How come everyone got an answer but me?

#5 User is offline   Darthy 

  • The red side of the Force
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 1,216
  • Joined: 30-April 06
  • Gender:Male
  • Location:Solar System of Ors

Posted 30 January 2010 - 08:13 PM

What are the symptoms? Was the speed afected? How does work your browsers?
Εν οίδα οτι ουδέν οίδα - Socrates
Thanks John

#6 User is offline   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 48,761
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 31 January 2010 - 01:06 AM

Hello lets' see if these show something.

I'd like us to scan your machine with ESET OnlineScan
  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on Posted Image to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image icon on your desktop.

  • Check Posted Image
  • Click the Posted Image button.
  • Accept any security warnings from your browser.
  • Check Posted Image
  • Push the Start button.
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push Posted Image
  • Push Posted Image, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the Posted Image button.
  • Push Posted Image
We Need to check for Rootkits with RootRepeal
  • Download RootRepeal from the following location and save it to your desktop.
  • Extract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).
  • Open Posted Image on your desktop.
  • Click the Posted Image tab.
  • Click the Posted Image button.
  • Check all seven boxes: Posted Image
  • Push Ok
  • Check the box for your main system drive (Usually C:), and press Ok.
  • Allow RootRepeal to run a scan of your system. This may take some time.
  • Once the scan completes, push the Posted Image button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.

How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users