Virus Help

Recommended Videos

ShadeOfRed

New member
Jan 20, 2008
537
0
0
As I know the Escapists have a good knowledge on computers, I figure why not go to them for help.
After recieving an alert that my firewall was down on my computer, I thought to myself, "Really? I thought it was up this whole time." So I turned it on. I was then shown a "virus scan" of my computer from Windows Anti-Virus XP 2008, something I KNOW I didn't have until right now. It said my computer had 680 viruses in it. Thinking this is BS, I start scanning my computer with Ad-Aware and AVG, (Spyware and Adware scanners,) and I got a number no where NEAR that. That number was zero.
During this time though, I thought that I would try to delete the program altogether, only to find that it's not in the programs list in the control panel, and is in a folder named "rhcpqkj0egdn" in my program files.
So, can anyone tell me what's going on and how I can get rid of that annoying Windows Anti-Virus 2008 program?
 

Crack_Duck

New member
Aug 14, 2008
8
0
0
I have something on my computer similar to that (my step-father clicked on it because it wouldn't go away, i assume he was busy trying to watch porn), its called winspy or something along the lines, and on his profile it spamms and spamms and spamms things. Sorry to kind of high-jack your Topic, I just hoped maybe i could get help too.
 

Vilhelm

New member
Aug 14, 2008
19
0
0
I work at a computer repair place. We see this all the time. Generally MalwareBytes Anti-malware (http://www.malwarebytes.org/mbam.php) will kill it pretty easily. If that doesn't work, you're going to have to find out where the infected files are (Generally in system32) and manually delete 'em. However, everytime I've just used MalwareBytes it got rid of it.

Another thing we noticed accompanied with this stuff is a background that pops up saying something along the lines of, "YOU HAVE A VIRUS.." and you can't change it. Well, if you're infected enough to get that it'll be a little harder to fix..

Do the same thing, (run MalwareBytes and kill the files), and then pull up the Run command (Press Windows key and then R, or go to Start and then click Run), type "Regedit", and then go to.. "HKEY_Current_User" > "Software" > "Microsoft" > "Windows" > "CurrentVersion" > "Policies" and there should be three files, dealing with the desktop and background. Delete 'em.

Oughta clean it up.
 

Anarchemitis

New member
Dec 23, 2007
9,100
0
0
Get e-Eye Blink Personal Anti-Virus. Link [http://free-antivirus.eeye.com/].
It's free for one year then expires, but it's much better than AVG because AVG is a memory Hog. AVG also won't be free for much longer.
 

Lord Krunk

New member
Mar 3, 2008
4,809
0
0
Also, get Spybot: Search and Destroy. (Freeware)

Seriously, it saved my computer from imminent doom on several occasions.

Also, I have a problem with my sister.

At school, her friends give her files that are OBVIOUSLY viruses, and she then plugs it in to my (non-internet connected) "working" computer and tries to run them.

Now I have constant weird stuff happening to my computer.

I wish my parents would not force me to let her use my stuff...
 

werepossum

New member
Sep 12, 2007
1,103
0
0
Vilhelm post=18.68537.631963 said:
I work at a computer repair place. We see this all the time. Generally MalwareBytes Anti-malware (http://www.malwarebytes.org/mbam.php) will kill it pretty easily. If that doesn't work, you're going to have to find out where the infected files are (Generally in system32) and manually delete 'em. However, everytime I've just used MalwareBytes it got rid of it.

Another thing we noticed accompanied with this stuff is a background that pops up saying something along the lines of, "YOU HAVE A VIRUS.." and you can't change it. Well, if you're infected enough to get that it'll be a little harder to fix..

Do the same thing, (run MalwareBytes and kill the files), and then pull up the Run command (Press Windows key and then R, or go to Start and then click Run), type "Regedit", and then go to.. "HKEY_Current_User" > "Software" > "Microsoft" > "Windows" > "CurrentVersion" > "Policies" and there should be three files, dealing with the desktop and background. Delete 'em.

Oughta clean it up.
Be sure to back up your registry before you change anything - deleting the wrong thing accidentally will make your computer - not be a computer. I had that a couple of weeks back on one of our machines (I'm by default the computer guy at an engineering office.) One of our engineers clicked on something and it went right through McAfee VirusScan Enterprise. (That's usually pretty good; evidently they hadn't loaded a definition yet. The infected email also made it through our email filters.) To make matters worse, he tried to ignore it for some time. I spent most of a day removing it - there were infected files everywhere! Three separate groups inside the registry, background and screen saver turned off inside the registry, windows popping up faster than he could delete them... Nasty.
 

Von Faceless

New member
Jul 20, 2008
31
0
0
My old man got lumbered with this virus a while ago, after trying to find a way to remove it that didnt involve paying I ended up just formating his pc :|
 

Bulletinmybrain

New member
Jun 22, 2008
3,277
0
0
Eh I use norton antivirus and its worked pretty good. Only things that trouble me is some cookies I get from...Well i'm not going there.
 

Johnn Johnston

New member
May 4, 2008
2,519
0
0
Lord Krunk said:
Also, get Spybot: Search and Destroy. (Freeware)
My advice exactly, it works well for me. Try to get software/freeware that blocks viruses and another that deletes them if they get in.
 

werepossum

New member
Sep 12, 2007
1,103
0
0
Johnn Johnston post=18.68537.634883 said:
Lord Krunk said:
Also, get Spybot: Search and Destroy. (Freeware)
My advice exactly, it works well for me. Try to get software/freeware that blocks viruses and another that deletes them if they get in.
Spybot and McAfee VirusScan Enterprise neither stopped nor successfully removed the infection we had. I'd not heard of MalwareBytes, but I'm certainly going to try a copy next time we have a malware infection like that.