Malware

[Guest]

I have discovered that my PC is full of malicious spyware and trojans. I had
eTrust anti-virus and personal firewall, as recommended by my cable internet
company, and they did not stop these trojans. I have windows defender now,
and although it has stopped several malicious softwares from installing, it
cannot locate the ones that already exist on my PC. I tried to install my old
antivirus...Norton Systemworks...but the malware prevented the entire
software from installing. It was recommended that I install Adware SE, but
when I am directed to download.com to do this, a page saying that page cannot
be found and that I should install Disk Doctor 2006 instead. I know Disk
Doctor is malicious software, so I have not done this. I need to know what to
do. Do I have my entire PC wiped out and start over, or what? Need answers
immediately! Thanks in advance for any input offered.

 

[Leythos]

8?B?UHJvYmxlbXMgcmVtb3ZpbmcgbWFsaWNpb3VzIG1hbHdhcmU=?= <Problems
removing malicious (e-mail address removed)> says...

I have discovered that my PC is full of malicious spyware and trojans. I had
eTrust anti-virus and personal firewall, as recommended by my cable internet
company, and they did not stop these trojans. I have windows defender now,
and although it has stopped several malicious softwares from installing, it
cannot locate the ones that already exist on my PC. I tried to install my old
antivirus...Norton Systemworks...but the malware prevented the entire
software from installing. It was recommended that I install Adware SE, but
when I am directed to download.com to do this, a page saying that page cannot
be found and that I should install Disk Doctor 2006 instead. I know Disk
Doctor is malicious software, so I have not done this. I need to know what to
do. Do I have my entire PC wiped out and start over, or what? Need answers
immediately! Thanks in advance for any input offered.

Always remember - only download files from Trusted Sites.

The following links will take you to vendors sites for Spy Ware / Ad
ware removal tools and also for Antivirus tools. After you install any
of these applications and update them, run them in SAFE MODE to allow
them to properly clean your system.

First, make sure that your Java is updated to the latest version:
http://www.java.com/en/download/index.jsp

These sites are for downloading Anti-Malware and Anti-Spyware tools, in
order that I would use them myself:

Dave Lipman's tools:
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Secured2K's AntiPauper (download link/info at)
http://forums.mcafeehelp.com/viewtopic.php?t=65072

Rogue Fix - This removal tool is the property of Internet Inspiration
http://www.internetinspiration.co.uk/roguefix.htm

AdAwareSE can be found here:
http://www.lavasoft.com/download_and_buy/detection_database/

SpyBot Search and Destroy can be found here:
http://www.safer-networking.org/en/download/index.html

HiJack can be found here:
http://www.spywareinfo.com/~merijn/downloads.html

Ewido Security Suite Trial can be found here:
http://www.ewido.net/en/download/

These are the actual vendors sites, not some unknown or authorized no-
name site.

 

[David H. Lipman]

From: "Problems removing malicious malware" <Problems removing malicious
(e-mail address removed)>

| I have discovered that my PC is full of malicious spyware and trojans. I had
| eTrust anti-virus and personal firewall, as recommended by my cable internet
| company, and they did not stop these trojans. I have windows defender now,
| and although it has stopped several malicious softwares from installing, it
| cannot locate the ones that already exist on my PC. I tried to install my old
| antivirus...Norton Systemworks...but the malware prevented the entire
| software from installing. It was recommended that I install Adware SE, but
| when I am directed to download.com to do this, a page saying that page cannot
| be found and that I should install Disk Doctor 2006 instead. I know Disk
| Doctor is malicious software, so I have not done this. I need to know what to
| do. Do I have my entire PC wiped out and start over, or what? Need answers
| immediately! Thanks in advance for any input offered.



If you are using any version of Sun Java that is prior to JRE Version 5.0 update 9,
then you are strongly urged to remove any/all versions.
There are vulnerabilities in them and they are actively being exploited.

It is highly suggested that you update to the latest version which is Sun Java JRE/JSE
Version 5.0 Update 9

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version.

Such as...
C:\Program Files\Java\jre1.5.0_09

http://java.sun.com/javase/downloads/index.jsp
http://www.java.com/en/download/manual.jsp

FYI:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1


For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/
http://www.lavasoft.de/ms/index.htm

* SpyBot Search and Destroy v1.4
http://security.kolla.de/
http://www.safer-networking.org/microsoft.en.html

* SuperAntiSpyware
http://www.superantispyware.com/superantispywarefreevspro.html

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

* BHODemon

http://www.majorgeeks.com/downloadget.php?id=3550&file=11&evp=245a87539eea8ed6904332b4b8b8442d

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *

 

[Guest]

also a cool thing is called "hitman Pro2" it will basicly go to a lot of
these tools and install them automaticly

 

[Guest]

Thank you. I downloaded and used each of the tools you recommended and can no
longer find any signs of malware. Your help is greatly appreciated.