Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Spybot, Em I Infected With Something?


  • Please log in to reply
2 replies to this topic

#1 ColoradoHermit

ColoradoHermit

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canon City, Colorado
  • Local time:10:25 AM

Posted 29 October 2007 - 04:00 PM

HELP! I'm all lost and confused here. I'm running Widows XP on a old Dell Optiplex GX240. When trying to track down why things are so slow and if I'm infected with something I was trying to find what's in my Startup. I found this in my Spybot.
In advanced mode, tools, system startup it shows that I have an assortment of worms and trojans. There's one program listed that doesn't have a value or comand line and in the info for it there's a list of 7 different worms and trojans. But when I run a scan it doens't find anything. So is there something infecting my computer or not? The file listed is;
HK_LM;RunOnceEx and in the info it shows this list of file names that are trojans or worms; system32.exe AGOBOT-KU WORM, pathex.exe MKMOOSE-A WORM, svchost.exe DELF-UX TROJAN, MSPF.EXE SDBOT WORM, dllvirtual.exe DADOBRA-IW TROJAN, dllvirtual.dll DADOBRA-IW TROJAN, dllvirtual.js DADOBRA-IW TROJAN.
So em I infected? If so, since the Spybot program didn't find anything in the scan how do I get rid of them or fix things?
My computer has been acting funky and slow for about a week. Ever since I test drove the new Window Live OneCare Antivirus and Firewall program. I thought I would try thier free 3 month test drive. And that screwed things up big time. It took me 3 days to get rid of it and get things running again but something still isn't right. And that new Windows program said that it found a big list of worms too that my McAfee and AVG and Spybot missed. Here's the list of what the Windows OneCare said it found, Win32/Netsky.C@mm worm, Win32/Bagle.O@mm worm, Win32/Netsky.P@mm worm, Win32/Netsky.K@mm worm, Win32/Netsky.D@mm worm, Win32/Netsky.Z@mm worm, Bagle.J@mm worm, Sober.G@mm worm.
Now the windows onecare said it fix all those, but I don't know. So any one got any idea what this thing is doing?

Edited by ColoradoHermit, 29 October 2007 - 04:02 PM.


BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,196 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:11:25 AM

Posted 29 October 2007 - 04:37 PM

Could you provide a link to where you downloaded the Windows Antivirus and Firewall?

Use the two programs below.
Install Super Antispyware free. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/

Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.
http://www.bitdefender.com/scan8/ie.html

How to Start Windows in Safe Mode:
http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/

Let us know the results
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,483 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:25 PM

Posted 29 October 2007 - 06:03 PM

If your still having problems after the BitDefender scan, download Sysclean Package and the latest Virus Pattern Files - (Pattern files are usually named lptxxx.zip, where xxx is the pattern file number).
  • Be sure to print out out and follow the instructions provided in the How to Use System Cleaner for performing a scan.
  • This tool generates a log file (sysclean.log) in the same folder where the scan is completed - C:\Sysclean.
  • When using Sysclean its best to use the Administrator's account or an account with Administrative rights otherwise you will not have access rights to scan some locations. You can also Use the "Run As" Command to Start a Program as an Administrator. Even when doing that, the scanning process may result in "Access Denied" messages for some files. This is normal because these files are protected by the system.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users