Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Pipas A.


  • Please log in to reply
3 replies to this topic

#1 lovable dog

lovable dog

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:12:34 AM

Posted 12 March 2006 - 03:00 PM

Hello,
I not sure how my machine has come to be infected with this virus,but any help to get rid of it would be great.
When ever I re boot my machine( running x-p home edition, mcAfee anti virus) I then run Spy-bot and this item keeps coming back Pipas A.
It seems to be redirecting my browser.
Thanks,
Lovable dog

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,281 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:04 AM

Posted 12 March 2006 - 03:47 PM

Try this online Virus scan:
Panda ActiveScan
ActiveScan Panda does not remove adware/spyware but will autoclean for viruses & worms.
[Watch the Address bar in IE. You may receive alerts that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component]

ActiveScan should find and remove it as follows:
Virus:Trj/Pipas.A Disinfected C:\System Volume Information\_restore{C66AB244-4979-48D7-B3AE-F081EFA13323}\RP61\A0015116.exe
Virus:Trj/Pipas.A Disinfected C:\System Volume Information\_restore{C66AB244-4979-48D7-B3AE-F081EFA13323}\RP61\A0015117.exe
Virus:Trj/Pipas.A Disinfected C:\System Volume Information\_restore{C66AB244-4979-48D7-B3AE-F081EFA13323}\RP61\A0015139.exe

I would also recommend that you download and scan with Ewido Anti-Malware v3.5
Ewido Install and Scan Instructions
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 lovable dog

lovable dog
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:12:34 AM

Posted 13 March 2006 - 10:12 AM

Thanks for the info Quiteman,
I tried the panda fix, but no luck. When I rebooted the machine and ran Spy-bot again, it once again appeared. It seems to be in the registry, according to the Spy-bot tool. Any other suggestions would be great.
Thanks,
LD

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,281 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:04 AM

Posted 13 March 2006 - 10:44 AM

Pipas.A was included in Spybot detection updates 2005-12-02
http://forums.spybot.info/showthread.php?p=3036
Are you using version 1.4 and updated the detection rules?

If so, you may require special tools. I have seen Fixwareout and Blacklight both used in conjunction with fixing this infection. I suggest you read and follow all instructions in the pinned topic titled Preparation Guide For Use Before Posting A Hijackthis Log so you can get expert assistance from the HJT Team.

When you have done that, post a log in the HijackThis Logs and Analysis Forum, not here.

It may take a while to get a response because the HJT Team members are very busy. Please be patient as they are volunteers who will help you out as soon as possible. Once you have made your post please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have not been replied as this makes it easier for them to identify those who have not been helped.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users