Virus attack - Help!!

[gonwk]

Hi, ... The thing is - I really can't afford to reformat. I have LOTS of programs I got from Giveaway of the Day - almost 100, even, and I really don't want to lose them. ... Any ideas?

Hi DrF,

Somewhere on GAOTD I read that some people were able to RE-Regsiter the Giveaway Software by actually having the KEY ... if you look inot where your Registration Name and REG CODES are ... you can Cut and Paste the CODEs into a Text file and re-use each time you clean your HD or upgrade!

G!

[drfsupercenter]

Not all of them use keys... some just use registry values.

I'm gonna try to fix it without reformatting first, and if that fails then I'll see about those programs.

[gonwk]

Not all of them use keys... some just use registry values.

I'm gonna try to fix it without reformatting first, and if that fails then I'll see about those programs.

Hi DrF,

That is why GAOTD drives me "Crazy" by the way they give Freeware and Activation Keys. Why not give us the darn KEY and get it over with!

G!

[doctorhardware]

As suggested have you tried hijackthis. Then post the output on the trend micro site. The site will tell you what you need to delete.

[drfsupercenter]

doctorhardware, to my knowledge, all HijackThis does is write a log of all your running processes... I can just as easily check my ProcessExplorer and find out the same info.

I'm trying to get that Rescue CD from AntiVir to work...

[doctorhardware]

Yes and no, when you up load the file that the hijackthis generated to Trendmicro, they will show you which processes need to be deleted. Some of the processes that are the ones that causes problem are the ones that have a file missing and the ones that have no name. This is off the top of my head. By uploading what hijackthis file it will find other processes that can cause problems.

[gonwk]

Hi folks,

I find this combination of Freeware to be working fro me so far ...

- Avira Antivir
- Comodo Firewall with Defnece + (HIPS)
- SuperAntiSpyware (on demand scanner)
- MalwarebytesAntiMalware (on demand scanner)
- WinPatrol

G!

[drfsupercenter]

AntiVir didn't find any traces of Vundo... I think it might actually be gone. (All that AntiVir found were false positives - like VirtumundoBeGone.exe and pskill from PgcEdit)

I'll do another scan with AVG later and see if it finds anything. I think that Malwarebytes program really did the trick, though...

[dazuk1972]

You should use Avast Anti-Virus because AVG is no longer as it used to be. It will let some viruses slip through your fingers. Avast does a good deep scan. AVG doesn't. Avast takes a while scanning depending on how much data you have but that is because it's doing a deep scan. AVG doesn't. AVG sucks. Avast is best.

[drfsupercenter]

Well, seems that Vundo is indeed gone... I think MalwareBytes and Anti-Vir did the trick!

AVG does do deep scanning... and on the newest version, it does anti-spyware too. The only problem is it came up with some false positives... such as aMule's GUI... that doesn't have a virus, it's just because it's a p2p program that it flagged it.

[katzdvd]

I have found MalwareBytes to be quite good at removing stubborn infections. I had a Trojan on one pc that wouldn't go away no matter what, even after cleaning with ad-aware which supposedly found something like 140 infected files.

After running MalwareBytes, I had no more issues, & all scans come up clean.

[drfsupercenter]

I scanned again with AVG, and indeed it came up negative for anything.

So MalwareBytes did infact work.

I also installed Avast! just to have as a backup (since AVG sometimes marks stuff with a false positive), but only AVG is actively running.

[Chewy]

Also try Combofix.And see this:http://www.bleepingcomputer.com/forums/forum103.html

Nope

http://www.bleepingcomputer.com/forums/index.php?s=&showtopic=170214&view=findpost&p=949724

[paglamon]

Hmmmm....Pretty scary !!! Actually , I once used it (advised by u, Chewy), and was lucky to return clean and unscathed. But it seems I have to be very cautious before using it again.

[Chewy]

combofix is best used only as a last resort after trying a combination of malwarebytes
with atf cleaner and superantispyware from safe mode, several passes may be required as newer infections are like layers of an onion, hiding something deeper, I then may use smitfraudfix for zlob etc followed by sdfix or even drweb cureit