need help with heatvirus***Wolves, feeding time!!***

hey ppl, i got a friend thats got this heatvirus on their computer. it just ended up there by its self and they didnt download it, its sumthing about heatvirus.com, in the system files its actually got a uninstaller, it some how installed its self- hmmmmm - strange. i actually got a few mates with this heatvirus on their pc, both of them are kind of doing the same thing but a little different from each other. some help with this would be cool, cheers ppl

 

wot u talkn about mate this thread is for anything. nice one mate cheers for the help man >:-(

why did u even bother to post!!!!!!!!!!!!

 

kill the process tree
http://www.ghacks.net/2008/04/28/batch-kill-processes-with-kill-process/


empty the files that have to do with it from here
C:\Documents and Settings\All Users\Application Data

then do a full system scan
http://forums.afterdawn.com/thread_view.cfm/292257


post a list of the processes here,

btw he's an admin......he bother's to post because hes helping you by putting this thread in an area where people like me will see it

best of luck!
-tripplite

 

What antivirus scanner do you have?

and owned, by the way.

 

Please download http://siri.urz.free.fr/Fix/SmitfraudFix.exe (by S!Ri)

If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (normally C, and launch from there.


Please print out or copy this page to Notepad as you will be in Safe Mode and unable to refer to this page.


Reboot your computer in Safe Mode (before the Windows icon appears, tap the F8 key continually)
Double-click on SmitfraudFix.exe
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, normally C:\rapport.txt

1. Get this version of Hijackthis from http://danborg.org/spy/hjt/alternativ.exe

2 Save it in a permanent folder of your choice, such as C:\HJT\. To create this specific folder on your hard drive: Double click the 'My Computer' icon on your desktop, then under the category hard disk drives: double click Local Disk:, then select file->New -> Folder and name it HJT
3 Run hijackthis. (alternativ exe).

Choose the "Do a system scan and save a log file" option to perform your scan.
HijackThis will analyze your system, and automatically open a notepad textfile containing the HijackThis log when the scan is finished.
Open the text files containing the logs with a text editor and click Edit -> Select All, followed by Edit -> Copy.
From within the browser window and with the message body text box selected, click Edit -> Paste.
Post a hijackthis log with rapport txt, and tell how your computer are behaving.

very simple.. 10 seconds with google yet again!

 

oh well your no fair....i spend a good 3 minutes righting out the directions and you use google? thats totally cheating

http://www.xp-vista.com/spyware-removal/virus-heat-removal-instructions

same method as i mentioned, kill the process remove the registry entries then remove the application data
http://www.zimbio.com/Spyware/articles/245/VirusHeat+antispyware+virus+How+remove+Virus

it may also help to disconnect your computer from the internet during the removal.....buts thats probably not needed

 

ok ppl.....wot ever im watching too, i've sorted it anywayz-killed the virus for good.

i'm not telling ya wot anti-virus programs i got but that virus is gone and its never coming back hahahahahha

i like coming here for help and to try an help others aswel(not much at the moment tho) but when i get comments that are just a waste of time, i think "why did i bother with this place if they gonna be dumb about it" or not realy help

sory to be anti about it ppl

 

Come here for a problem, solve it yourself and tell us off about it and don't even tell us how you solved it. It's organfaces like you who make using forums a chore rather than a passion. I hope never to have to deal with you again.

 

@bakedpsp every single post in this thread was aimed at helping you get ride of heat virus.....we all posted (in clear english i remind you) information on how to remove or requesting further details to help with the removal....i dont see how any of these posted didn't help you (besides this one in violation of rule 8)


-tripplite

 

That about sums it up for this nut job! He probably had someone, who knew something, fix it; and that's why he couldn't explain the fix if he wanted.

 

i dont believe a virus scan would even pull it up.....let alone remove it fully.......its one of those ucky bugs you have to go after part by part....the application data is the worst as it always regenerates

 

ha u ppl........... i did my self an all of this would have been avoided if ya just been nice in the 1st place.

avg and spybot S & D. i have used spybot for some time now, i also just recently found a new program to tackle that virus.

p.s. how is telling me to go somewhere else helping me ay......!!!!!!!!

bye

 

ddp: fry his a$$, at least for a week.

If you go someplace else, we won't have to listen to your drivel. How did you make junior status, junior? We're just continuing your vitriol. Are you doing long division properly,yet?