Virus problem.

[Guest]

Last week I was hit by a virus. My virus checker appartently removed only
half of the virus. Every time I open IE The computer locks up for about two
minates then it opens fifty blank windows??? There was an error box.
something about not finding a token????

the virus checker says the system is clean so I am guessing that the problem
is inside of IE.

Does anyone know where to look to manually fix this?

Scott Burke

 

[lobo]

Last week I was hit by a virus. My virus checker appartently removed only
half of the virus. Every time I open IE The computer locks up for about
two
minates then it opens fifty blank windows??? There was an error box.
something about not finding a token????

the virus checker says the system is clean so I am guessing that the
problem
is inside of IE.

Does anyone know where to look to manually fix this?

Scott Burke

You did not mention what operating system you are using. If XP, I would turn
off system restore>>>boot to safe mode>>>then rescan for viruses. Don't
forget to turn system restore back on afterwards.

 

[Poprivet]

Last week I was hit by a virus. My virus checker appartently removed
only half of the virus. Every time I open IE The computer locks up
for about two minates then it opens fifty blank windows??? There
was an error box. something about not finding a token????

the virus checker says the system is clean so I am guessing that the
problem is inside of IE.

Does anyone know where to look to manually fix this?

Scott Burke

It's not likely to be an IE issue; yet, at least. Those are classic
symptoms of a remaining infection. And manually fixing this sort of thing
is going to be nearly impossible even for the experts because of the many
places the problems can reside.

What AV software did you use? Is it updated within the last few days? In
not, update it. If it's a no-name try one of the many free scans offered at
reliable places like symantec, McAfee, AVG and the like. Avoid unknowns in
the business; some scamware will find errors whether there are any or not,
and then require you to buy their software.

If you're reasonably sure your AV can't find anything and it's up to date
with the latest virus file detectors, then you need to look for
adware/spyware/malware.

Do that by downloading, updating and running at least three of your favored
spyware detectors. I usually use Adaware from lavasoft.com and Spybot from
spybot.com. Then add another of your choosing; Windows defender has had
some luck, I hear. I also use Winpatrol.

Once you get cleaned up, then install a firewall: ZoneAlarm makes a decent
one that's still free.

Let us know how you're doing.

Pop`

 

[Poprivet]

You did not mention what operating system you are using. If XP, I
would turn off system restore>>>boot to safe mode>>>then rescan for
viruses. Don't forget to turn system restore back on afterwards.

.... that will have deleted all his restore points, something you forgot to
mention.

 

[Guest]

Thanks for your time everyone.

My system is XP Pro
I was using SBC virus/alware pakage. It did not see this coming!
So I uninstalled that and installed AVG. Updated it's files.

My restore points are gone because I updated XP to XP Pro.
But why stop system restore?
Will it automaticly restore without my permission?????

Scott Burke

 

[Poprivet]

Thanks for your time everyone.

My system is XP Pro
I was using SBC virus/alware pakage. It did not see this coming!
So I uninstalled that and installed AVG. Updated it's files.

My restore points are gone because I updated XP to XP Pro.
But why stop system restore?
Will it automaticly restore without my permission?????

Scott Burke

No, I suspect he was just trying to make sure the problem, if it was in a
restore point, was gotten rid of so you couldn't inadvertantly get it back
by doing a Restore. Or he misunderstood something. Either way his
presentation wasn't very useful the way it was positioned.
When you've had viruses & malware it IS a good thing to kill off your
restore points and start anew: That's what his advice would have done for
you and which you still should do, actually. Just turning them off and back
on deletes all of them. There isn't any half-way point to deleting them;
it's all or nothing, unfortunately. It's best to not turn them back on
until your system is known to be clean, too; for the same reason.
I hope you are backed up and have your archives stored in a safe place?
Depending on the malware left, you might end up needing them.
Oh, and if the internet should suddenly stop working on you, that might
mean you need to get a new copy of lsass; it's available all over the 'net
for free downloads. It's a favorite target of some viruses.
Read closely any messages you get from your AV software. AVG is a pretty
decent one, BTW. Good choice.

Let us know how you make out.

Pop`

 

[Frank Saunders, MS-MVP OE/WM]

Thanks for your time everyone.

My system is XP Pro
I was using SBC virus/alware pakage. It did not see this coming!
So I uninstalled that and installed AVG. Updated it's files.

My restore points are gone because I updated XP to XP Pro.
But why stop system restore?
Will it automaticly restore without my permission?????

Scott Burke

No, it won't automatically restore.

 

[Frank Saunders, MS-MVP OE/WM]

Thanks for your time everyone.

My system is XP Pro
I was using SBC virus/alware pakage. It did not see this coming!
So I uninstalled that and installed AVG. Updated it's files.

My restore points are gone because I updated XP to XP Pro.
But why stop system restore?
Will it automaticly restore without my permission?????

Do a thorough check for malware, following all of the steps at one of these
Web pages.
Help with malware:
All MS-MVP Sites.
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/darnit.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

So How Did I Get Infected Anyway?
For quite a few people it's by installing Messenger Plus, whose ads for
malware don't identify the malware as such and try to convince you that you
owe it to the author. See also:
http://www.wilderssecurity.com/showthread.php?t=27971
Don't ever do a "default" install of anything. Always choose Custom and see
what else is being carried along. Don't install any extras you're not sure
of.

 

[Guest]

Do a thorough check for malware, following all of the steps at one of these
Web pages.
Help with malware:
All MS-MVP Sites.
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/darnit.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

So How Did I Get Infected Anyway?
For quite a few people it's by installing Messenger Plus, whose ads for
malware don't identify the malware as such and try to convince you that you
owe it to the author. See also:
http://www.wilderssecurity.com/showthread.php?t=27971
Don't ever do a "default" install of anything. Always choose Custom and see
what else is being carried along. Don't install any extras you're not sure
of.

SVG and SpyBot and Windows defender could not deal with it.
Format and reintsall did deal with it.


Scott Burke