Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Adware.generic.scb Problem


  • Please log in to reply
8 replies to this topic

#1 technikal

technikal

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Location:Utrecht \o/
  • Local time:09:32 AM

Posted 06 December 2006 - 05:40 AM

Hi there,

Back once again :thumbsup:

Yesterday my girlfriend told me she opened something at msn and now the comp was bleeped.
I thought she was over reacting but she seems to be right.

The problem is I get about 5 pop-ups a minute now. I tried scanning with ad-aware wich shows nothing.
Downloading spy-bot from any site wont work as it keeps saying the install file is corrupted.

So I scanned with avg wich came up with 14 infected files.
This are two kind of files. Adware.generic.scb (the latest.scb extention is different everytime I scan....)
And some Trojan-horse.downloaders and trojan-horse.generic

AVG also says it removes these files everytime but after reboot nothing changes.
I runned it in normal and in save mode but no difference whatsoever.

These files keep downloading bleep onto my computer so it is diffferent anytime.
According to my girlfriend this infection keeps sending through to other people on msn when you start it up.
So I am afraid to even go online.

Anyone in here know what to do now?
With my last problem I needed to re-install my entire comp so I would like to try and avoid that :flowers:

Cheers,
Bart

Ps. some of the basic info would be: Dell dimension 5150 , windows xp home with sp2 and all the official dell software.

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,143 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:32 AM

Posted 06 December 2006 - 11:45 AM

Have you tried doing your scans in "SAFE MODE"?

Since your having a problem with Spybot download and scan with SUPERAntiSypware Free for Home Users
If you encounter any problems while downloading the updates, manually download and unzip them from here.

Also download and scan with AVG Anti-Spyware 7.5 in "SAFE MODE".
(This is Ewdio 4.0 renamed. If you already have Ewido installed, please update to this version which has a special "clean driver" for removing persistent malware.) Be sure to print out the AVG Anti-Spyware Install-Scan Instructions

Then perform this online Virus scan: Trend Micro Housecall <- Use "Autoclean" and manually delete what it can't clean.
[i][Watch the Address bar in IE. You may receive alerts that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component.]


Post back if your still having problems afterwards.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 technikal

technikal
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Location:Utrecht \o/
  • Local time:09:32 AM

Posted 07 December 2006 - 05:22 AM

I runned it in normal and in save mode but no difference whatsoever.


Hi there :thumbsup:

I scanned it in save mode indeed.
Downloading those progs you suggested now.
I'll let you know asap.

Thanx for the help so far,
Bart

#4 technikal

technikal
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Location:Utrecht \o/
  • Local time:09:32 AM

Posted 07 December 2006 - 06:27 AM

Morning,

Great program that super anti spyware :thumbsup:
It helped a lot.
First scan found 9 memory items, 17 registery items and 31 file items.
Deleted those, rebooted and scanned again.
Found 2 more file items, it said it deleted them. Scanned again and yet the same 2 came up.
From my n00b point of view i thought it was obvious because the folder it says it deletes them from is
C:/windows{RESTORE} <-- something like that.

Anyway, the annoying pop-ups are stopped so I think the problem I came here for is solved.
I do however like to try and remove the last 2 as well so if I can use some of your valuable time could you help me with these two as well?

The file types superantispyware say it found are:

*Adware.Delfin Project
*Trojan.Unknown Origin

Avg and ad/aware says the computer is completely clean.
Cheers,
Bart

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,143 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:32 AM

Posted 07 December 2006 - 06:37 PM

Well you certainly don't want to leave any malware if its detected. Does SuperAntispyware provide any information as to where these files are located?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 technikal

technikal
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Location:Utrecht \o/
  • Local time:09:32 AM

Posted 08 December 2006 - 12:19 AM

Hi there,

Well its a bit strange, According to super anti spyware it was in my windows restore folder and therefor would be restored everytime after reboot.
I scanned the computer with that trend micro housecall and it found a total of 6 infections.
Deleted those and now even super anti spyware says im completely clean.

Micro housecall said after scanning there was one "thing" left but it couldn't detect what it was nor give any more information about the threat.

None of the other suggested programs showed a threat tho.

Thanx for your help so far
Cheers,
Bart

#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,143 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:32 AM

Posted 08 December 2006 - 08:10 AM

The System Volume Information folder is a part of System Restore - the tool that allows you to set points in time to roll back your computer. The System Volume Information folder is where XP stores these System Restore points and other information. By default, it is a hidden folder unless you reconfigured Windows to show it. If you use an old restore point where malware was detected its possible to reinfect your system.

Thus, its best to SET A NEW RESTORE POINT AFTER cleaning your system to prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to set a new RESTORE POINT:
1. Go to Start > Programs > Accessories > System Tools and click "System Restore".
2. Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
3. Then go to Start > Run and type: Cleanmgr
4. Click "OK".
5. Click the "More Options" Tab.
6. Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#8 technikal

technikal
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Location:Utrecht \o/
  • Local time:09:32 AM

Posted 08 December 2006 - 03:56 PM

Hi there,

I did that and I hope its ok now.
I want to thank you for your help. I never could have done it alone.
You guys are great.

Cheers,
Bart

#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,143 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:32 AM

Posted 08 December 2006 - 04:19 PM

Your welcome. :thumbsup:

To protect yourself against malware and reduce the potential for re-infection, read:
"Malware Prevention - Preventing Re-infection".
"Simple and easy ways to keep your computer safe".
"The Ten Most Dangerous Things Users Do Online".
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users