Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Worms!


  • This topic is locked This topic is locked
13 replies to this topic

#1 synchronism

synchronism

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:UK
  • Local time:07:03 PM

Posted 22 November 2007 - 08:25 PM

I have five viruses on my computer, I cannot get rid of them at all.

I have VCOM Fix-it Suite 7, that can't get rid of them.
I have tried deleting the files manually by following the path and hitting the delete button, but 5 seconds later they come back.

I have tried to download Spyware Blaster & Spybot Search & Destroy, but half way through the download it automatically goes off.

When I try to search on Google for other decent Spyware removal software, FF just automatically closes. Same for IE.

I have no idea what to do, it's kinda pissing me off now tbh.
My computer is running slower and sometimes I get locked out of things even though I'm in the main acobleep. A message pops up saying "You need adminstrator privildges to access this file" or w/e.

I give up, argh.

These are the five worms I have:


1. cmd.exe
2. spolis.exe
3. regidet.com
4. win.exe
5. LeChuck.exe


I don't want to re-install Windows again but I think I might have to. The thing is, these worms came on not long after I re-installed windows last time. I didn't even surfthe internet or anything, they just came whilst I was installing updates.

BC AdBot (Login to Remove)

 


#2 synchronism

synchronism
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:UK
  • Local time:07:03 PM

Posted 22 November 2007 - 09:54 PM

I download it, install it and it automatically deletes itself straight away. I have worms and obviously need to do a log for you guys to look at. But I can't even do that, seeing as it's automatically deleting itself. This happens when I try to instal S&D, AA and Spyware Blaster. I can download fine apart from any programs to do with Spyware removal. :/

Mod Edit: New topic merged for continuity~ TMacK

Edited by TMacK, 22 November 2007 - 11:42 PM.


#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,906 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:03 PM

Posted 22 November 2007 - 11:36 PM

Hello synchronism and welcome
You didn't mention which antivirus program you ran and did it tell these names.
Also did you try a scan from Safe Mode

I would suggest you run these Online scans
Panda ActiveScan?
ESET Online Scanner
These will catch and kill most Trojan/virus' but not spyware.
So then run this and delete all it finds SUPERAntiSpyware
Use the Free home user version and run from Safe Mode after installing and updating.
Should get the rest of the malware.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#4 synchronism

synchronism
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:UK
  • Local time:07:03 PM

Posted 23 November 2007 - 04:13 AM

VCOM Fix-it 7.
I have ran a deepscan in safe mode.
I can't download Panda ActiveScan. When I try and run the ESET Online scanner, FF automatically closes. Same with IE.
I also can't download SuperAnitSpyware.

#5 somi

somi

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:india
  • Local time:11:33 PM

Posted 23 November 2007 - 04:25 AM

have you done the virus scan in safe mode??

#6 synchronism

synchronism
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:UK
  • Local time:07:03 PM

Posted 23 November 2007 - 04:26 AM

Yup, I have indeed.

#7 somi

somi

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:india
  • Local time:11:33 PM

Posted 23 November 2007 - 04:28 AM

what does the virus scan tell you?

are you using any anti spyware along with your antivirus>

#8 synchronism

synchronism
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:UK
  • Local time:07:03 PM

Posted 23 November 2007 - 04:35 AM

Yep I am. The scan results say I've got five viruses, with the names I gave in my first post.
I try to delete them manually but they just come back. These worms are stopping me from downloading other spyware remover software, doing online scans and downloading HijackThis.

#9 somi

somi

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:india
  • Local time:11:33 PM

Posted 23 November 2007 - 06:18 AM

i think u should try restoring your system
for system restore-
start>>programs>>accessories>>system tools>>system restore>>restore my computer to an earlier point

#10 synchronism

synchronism
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:UK
  • Local time:07:03 PM

Posted 23 November 2007 - 10:15 AM

There is no point in doing Sytem Restore as these worms came on as soon as I instsalled windows. :/

#11 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:11:03 AM

Posted 23 November 2007 - 01:37 PM

synchronism, use this link to download HijackThis.

Once it's installed but before it's downloaded, there will be a window asking where you want to save it.
At this point, change the name to analyzeme or something similar.

After you run Hijackthis and create a log, please post it in the HijackThis Logs and Malware Removal forum NOT here, for assistance by the HJT Team Experts.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner

#12 synchronism

synchronism
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:UK
  • Local time:07:03 PM

Posted 23 November 2007 - 06:32 PM

Thanks for that TMacK but my problem is now solved.

I decided to just re-install windows all together, I'm now able to have Spyware Blaster and S&D. The viruses have gone, obviously. Everything is back to normal, I'm glad I re-installed now my computer is super fast. xD

I downloaded HijackThis anyway and posted my log to be on the safe side.

#13 synchronism

synchronism
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:UK
  • Local time:07:03 PM

Posted 23 November 2007 - 07:42 PM

Wtf, the viruses have returned. Well it's one virus that's containing itself in different files

Name of worm: WORM_VB.FKO

I did a HijackThis Log earlia, I'm now having the same problems as before. I can't open HijackThis to do another one!

#14 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:11:03 AM

Posted 23 November 2007 - 07:47 PM

Now that you have a HJT log posted in the HijackThis Logs and Malware Removal forum, you shouldn't make any changes to your system.
Doing so, could change the results of the posted log, making it difficult to properly clean your system.

At this point, the HJT Team should be the only members that you take advice from, until they have verified your log as clean.
When your file is opened by a HJT team member, be sure to mention the new infection to them.

This topic will now be closed, since you have an open log posted.
If you have any questions, feel free to send me a PM.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users