Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Spyware/viruses That Cannot Be Deleted By Any Application I've Tried.


  • Please log in to reply
8 replies to this topic

#1 sozo

sozo

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:09:40 PM

Posted 06 July 2007 - 09:59 AM

My computer is 2 years old and has been connected to the internet for that entire time. I didn't have any antivirus/antispyware/antiadware software installed on my computer and security warning never went off until my brother downloaded some codecs from download.com, the website claims that their software is spyware free, but it's obviously not, becasue those codecs were what infected my computer...something by the name of Zlob? So I install Kasperski antivirus, after an hour of deep search it only found one file and so I deleted it. Then I uninstall it and install AVG antivirus, this program doesn't find anything, I uninstall it and install AdWare, it finds about 18 files and deletes them (the exclamation triangle blinker - :thumbsup: that was going off and saying I have adware on my computer goes off after running Adware). After all this the shield icon is still blinking from an X to a ? saying I still have viruses. I install and run avast!, it finds 18 infected files but for some reason cannot remove them or repair them. Most of them are trojans, a few of them are in my Java folder, a few came in with codecs, then I find this DriveCleaner Free that I have never seen before. I uninstall DriveCleaner, restart, run antivirus scan again, it finds a few infected files that are the leftovers of DriveCleaner. After all this my security warning is still blinking, so I decide to do a Sys. Restore in Safe mode. I pick a date and try restoring, but for some reason it will not restore to that check point. And I haven't created any myself. I don't know what to do at this point.

BC AdBot (Login to Remove)

 


#2 Nikas

Nikas

  • Members
  • 650 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Singapore
  • Local time:10:40 AM

Posted 06 July 2007 - 10:09 AM

I suggest you to follow the instruction here.

#3 buddy215

buddy215

  • Moderator
  • 13,313 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:09:40 PM

Posted 06 July 2007 - 10:52 AM

Drive Cleaner removal instructions:
http://www.bleepingcomputer.com/forums/t/71782/how-to-remove-drivecleaner-2006-removal-instructions/

You also have Smitfraud infection. Removal instructions below.
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php

Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/

Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.
http://www.bitdefender.com/scan8/ie.html

--------------------------------------------------------------------------------

Post a Hijack This log in the Hijack This Forum by following the directions in the link below. DO NOT post the log in this forum.
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
--------------------------------------------------------------------------------

How To start Windows in Safe Mode
http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#4 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:07:40 PM

Posted 06 July 2007 - 11:01 AM

Hi sozo and welcome to bleepingcomputer.

Now days it's suicidal to go on line without protection and you can't rely on just one utility to cover everything.

I run the software listed below, it's all free and works great.

AVG Free Anti Virus http://free.grisoft.com/doc/20/lng/us/tpl/v5

AVG Anti-Spyware Free http://www.majorgeeks.com/AVG_Anti-Spyware_d5287.html

Ad-Aware SE Personal 1.06 http://www.download.com/3000-2144-10045910.html

SpyBot-Search & Destroy Tools 1.4 http://www.majorgeeks.com/download2471.html

a-squared Free http://www.emsisoft.com/en/software/free/

Download ZoneAlarm Firewall Free 7.0.337.0 http://filehippo.com/download_zonealarm_free/

The AVG Anti Virus and Zone Alarm are active programs, the rest you will have to run manually and updated manually.

From what you have described I would suggest running a scan with Asquared, this works well for finding trojans and worms. The most effective way to run you scans is in the safe mode.

I noticed that you mentioned adding a couple of different anti viruses, don't run or have active more than one at a time, these guys don't play well with others.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#5 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:10:40 PM

Posted 06 July 2007 - 11:44 AM

If you've never had anti-virus programs installed, it's kind of senseless to use a restore point because it will probably remain on your computer. Use nikas's link . If you don't have a lot of stuff you need to save, you'd probably be better off reformatting and reinstalling the OS. Then before you do anything, install a anti-virus, firewall programs, service pack(s), and updates. It's a lot of work, bur you'll know the system is clean
Mark
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#6 sozo

sozo
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:09:40 PM

Posted 06 July 2007 - 06:25 PM

Thank you. The instructions provided worked. So it turns out it was that VirusProtectPro. SmitFraudFix worked perfectly. Only it didn't show a red reboot screen as per instructions, it didn't reboot and went straight to the notepad page. I ran adware, spybot and housecall and so far everything seems to be in order. Uninstalled DriveCleaner from add/remove, but it left over a bunch of crap, anti virus removed some of it, but I'm sure there is still something left. Thank you for the links dc3, helped a lot.

#7 buddy215

buddy215

  • Moderator
  • 13,313 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:09:40 PM

Posted 06 July 2007 - 06:51 PM

Make sure you followed ALL of the instructions for removing Drive Cleaner.
Notice at the bottom of the page is a link for removing Vundo, as well.
Super Antispyware cleans up a lot of malware that accompanies the infections you have.
It also removes Smitfraud and Vundo variants.

You should post a Hijack This log, too. Strongly advise that. Follow the instructions in the link in my first post.
If you followed the instructions for removing Drive Cleaner, you should already have Hijack This on your computer.
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#8 potsandpaints

potsandpaints

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:10:40 PM

Posted 07 July 2007 - 12:01 AM

Hi,

What do I do if I cannot even get the desktop loaded before it shuts itself down? I definately have trojans and probably more stuff I don't know about yet. This computer was used before an anti-virus was installed. The only thing I have been able to put on it is spyware doctor and when I start it up it shows me it removed 4 viruses and then I get pop-up after pop-up stating all the trojans that were found....but then it will just shut down to a blue screen saying it shut down to protect the computer from any damage, etc. Please help!!!! How do I get it to at least start up and stay up so I can try to fix all this mess? Thanks.
:thumbsup:

#9 buddy215

buddy215

  • Moderator
  • 13,313 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:09:40 PM

Posted 07 July 2007 - 07:14 AM

Potsandpaints---Please start your own topic. You have posted in someone else's.

Try whatever security programs you have in safe mode.
How To start Windows in Safe Mode
http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users