trojan or virus in system32. help me please!

[Guest]

hi, this is my problem,

my p.c. froze a couple of times in 40 mins
i scanned it with ez antivirus, it didn't find anything
there were some files it couldn't scan, so i scanned them manually and still
nothing came up.

i'm pretty sure they're the problem. i don't know what to do.
i can't copy & paste the log so here's a couple of the files it couldn't scan:
chandir.dat
chandir.idx
prs_die.dat
in system32/config: SAM, SAM.LOG, SECURITY,SECURITY.LOG, system,system.LOG

i hope that's enough info,if you wanna know anything else just say, i hope
someone can help. thanks.

 

[phoenix]

hi, this is my problem,

my p.c. froze a couple of times in 40 mins
i scanned it with ez antivirus, it didn't find anything
there were some files it couldn't scan, so i scanned them manually and still
nothing came up.

i'm pretty sure they're the problem. i don't know what to do.
i can't copy & paste the log so here's a couple of the files it couldn't scan:
chandir.dat
chandir.idx
prs_die.dat
in system32/config: SAM, SAM.LOG, SECURITY,SECURITY.LOG, system,system.LOG

i hope that's enough info,if you wanna know anything else just say, i hope
someone can help. thanks.

It seems like you have some pervasive spyware installed, have a look at the
links here: http://www.google.com/search?q=chandir.dat

regards

Bill

 

[Guest]

thanks for your reply Bill, i downloaded SpyHunter v2.0 and it finished
scanning a minute ago, it found a whole load of spyware so i clicked on it to
remove and it says you have to buy the full version to remove!!!!! what a
total waste of time...
i'm gonna try and find another spyware scanner to download, hopefully it'll
work this time. if you or anyone else have any other ideas please let me know.

thanks again

 

[Malke]

thanks for your reply Bill, i downloaded SpyHunter v2.0 and it
finished scanning a minute ago, it found a whole load of spyware so i
clicked on it to remove and it says you have to buy the full version
to remove!!!!! what a total waste of time...
i'm gonna try and find another spyware scanner to download, hopefully
it'll work this time. if you or anyone else have any other ideas
please let me know.

You have downloaded a rogue antispyware program. No good removal tool
requires you to purchase it before it will remove spyware. Here is a
link to MVP Eric Howes' site which lists rogue antispyware programs:

http://www.spywarewarrior.com/rogue_anti-spyware.htm

To clean up your computer, go through the following removal steps
systematically:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

All of the antimalware tools used above are free.

Malke

 

[Guest]

thanks for your response Malke, i've done 3 scans and none have them have
removed backweb lite, if you can tell me how i'd be very grateful.
thanks

 

[Malke]

thanks for your response Malke, i've done 3 scans and none have them
have removed backweb lite, if you can tell me how i'd be very
grateful. thanks

This is the first you've mentioned Backweb Lite which is not normally
considered spyware. Backweb Lite usually comes with HP printer software
or HP update software on their machines. Do a Google for "Backweb Lite"
and you'll get many sites explaining what this is. If you have anything
from HP, you don't need to remove Backweb Lite. If you don't want
background updating going on, use the System Configuration Utility
(msconfig) or options in the program itself to stop that behavior.

Malke

 

[Guest]

i didn't know i had it before, i've done some reading on forums and backweb
which comes with hp is apparently different from backweb lite
http://www.xpforum.co.uk/forum/viewtopic.php?p=66693
spybot didn't detect it and i don't want to attempt it manually so i'm kinda
stuck for now.
the link you gave me was helpful though so thanks.