Virus's wont go away

Discussion in 'All other topics' started by Pontius, Apr 14, 2004.

  1. Pontius

    Pontius Regular member

    Joined:
    Feb 15, 2004
    Messages:
    242
    Likes Received:
    0
    Trophy Points:
    26
    I am useing anti vir xp and every time i turn on my computer a virus is found.I click on delete but it still comes up when i turn my computer on.I also clicked on send file to quarintine and it still didnt work.The names of the virus's are

    Tr/beloru
    Tr/dyfuca.J
    Tr/mussA.1
     
  2. ken0042

    ken0042 Regular member

    Joined:
    Apr 17, 2003
    Messages:
    687
    Likes Received:
    0
    Trophy Points:
    26
    I've never heard of that particular brand of Anti-Virus program. You might want to try Norton or McAfee. Or for a free one try www.grisoft.com
     
  3. Jerry746

    Jerry746 Senior member

    Joined:
    Oct 23, 2003
    Messages:
    3,879
    Likes Received:
    0
    Trophy Points:
    116
    When you delete some viruses, they go to the recycle bin. If you don't empty the recycle bin right away, the virus re-activates. You may also have to go into the registry and remove the virus from there. This has to be done with most versions of the worm virus like MSBLAST. Do a search for the ones you have and see how they need to be removed.

    Jerry
     
  4. Jeanc1

    Jeanc1 Guest

    ~~ Hey Pontius !!

    TR stands for TROJAN -- you have been blessed by those sticky ones.

    My suggestion : Google search for CWShredder.exe
    and run it. This will removed the sticky entries made by those trojans in your registry.

    Next Google search again for HijackThis.exe and run it.

    Make a NOTEPAD of the result you got with Hijack and post on their web site. -- you will get a prompt answer as what to remove to clean your PC up.

    --
    OR
    --
    If you have XP and you have system restore "ON" ,, do a restore say a few days before you got infected.-- this will clear up everything.

    _X_X_X_X_X_[small]Do It Right , and you will be a Happy Camper !

    Take Care.

    [​IMG][/small]
     
    Last edited by a moderator: May 25, 2004
  5. woof811

    woof811 Regular member

    Joined:
    Oct 7, 2003
    Messages:
    605
    Likes Received:
    0
    Trophy Points:
    26
    give avg antivirus free edition a try its free at www.grisoft.com , its a good free antivrus , worth a try , good at getting shut of trojans , iff you get no joy try norton .
     
  6. woof811

    woof811 Regular member

    Joined:
    Oct 7, 2003
    Messages:
    605
    Likes Received:
    0
    Trophy Points:
    26
    iff all else fails theres allways a reformat of your hard drive , then reload windows iff you know how to , that will definatly get shut of the trojans .
     
  7. Praetor

    Praetor Moderator Staff Member

    Joined:
    Jun 4, 2003
    Messages:
    6,830
    Likes Received:
    1
    Trophy Points:
    118
    If u have an antivirus .. to DELETE the file, you have to use the delete functionality from the ANTIVIRUS app. :D

    Jerry746 : im being nitpicky here but.. what happens if the Recycle Bin is auto-perma-delete? Or you dont have a recycle bin? :p
     
  8. Jerry746

    Jerry746 Senior member

    Joined:
    Oct 23, 2003
    Messages:
    3,879
    Likes Received:
    0
    Trophy Points:
    116
    Hi Praetor, There is a 3 step process to remove the WORM virus from Windows 2000 & XP even without an anti-virus program. Its not hard to do. I just have to find my paperwork on it. I think it can also be found at www.computing.net/windows2000. Its another forum and should be under svchost crash. Should be instructions to fix. If I find my papers, I'll post the 3 steps.

    Jerry
     
  9. Jerry746

    Jerry746 Senior member

    Joined:
    Oct 23, 2003
    Messages:
    3,879
    Likes Received:
    0
    Trophy Points:
    116
    Hi guys, Here is the 3 step WORM removal process.

    1)End the Trojan process:
    Press Ctrl+Alt+Delete once.
    Click Task Manager.
    Click the processes Tab.
    Double-click the Image Name column header to alphabetically sort the processes.
    Scroll through the list and look for msblast.exe.
    If you find the file, click it then click end process.
    Exit Task Manager.

    2)Deleting msblast.exe.
    Click start.
    Click search, for files and folders.
    Search for msblast.exe.
    Once done, if it is found, delete msblast.exe in right side screen.

    3)Removing changes msblast made to registry.
    Click Start, then run.
    Type regedit in the dialog box, click OK(Editor opens).
    Navigate to the key:
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run.
    In the right pane, delete the value:
    "windows auto update"-"msblast.exe":
    Exit the Registry Editor.

    Here are some of the other variants:
    Msblast.exe--Variant A
    Penis32.exe--Variant B
    Teekids.exe--Variant C
    Mspatch.exe--variant E
    Mslaugh.exe--Variant F
    Enbiei.exe---Variant G

    You need to check for each one using above guide.
    hope this helps someone.

    Jerry
     
    Last edited: Apr 18, 2004
  10. Jeanc1

    Jeanc1 Guest

    Man -- with the Mblast worm -- do it right go to Symantec web site and download the FixBlast.exe tool -- is takes less then 20 secs -- and once you use it that worm is gone for good.

    NOW .. reading this thread -- where did this mblast worm thing start ??? -- Pontius is speaking about TROJANS.. that he could not take out . IT HAS NOTHING to do with worms.

    Those trojans he listed are hijackers ~~ they take control of your home page usually ~~ and the only way to get rid of them is as stated in the post following his.

    AVG , Nortons and the likes are antivirus and have little efficiency on trojans, and none on the hijackers. -- The Cleaner , CWShredder , Hijack This to name a few are TROJANS detectors and removers: they are the tools to remove hijacking trojans.

    _X_X_X_X_X_[small]Do It Right , and you will be a Happy Camper !

    Take Care.

    [​IMG][/small]
     
    Last edited by a moderator: May 25, 2004
  11. Jay05

    Jay05 Regular member

    Joined:
    Apr 23, 2004
    Messages:
    732
    Likes Received:
    0
    Trophy Points:
    26
    After you delete the trojan by the hijackthis
    I advise you get an antivirus program
    If you want it cheap, I suggest AVG Free Ed. from
    Grisoft.com
    or
    get Mcafee or Nortan like me. Got the latest one this week. But I've been using AVG before n I had no problems.

    Hoped this helped...
     
  12. Pontius

    Pontius Regular member

    Joined:
    Feb 15, 2004
    Messages:
    242
    Likes Received:
    0
    Trophy Points:
    26
    i downloaded hijackthis but it says to be carefull of what i do.How do i know what to delete
     
  13. Jeanc1

    Jeanc1 Guest

    Ok -- Pontius... !! Read my post !

    ""Make a NOTEPAD of the result you got with Hijack and post on their web site. -- you will get a prompt answer as what to remove to clean your PC up.""

    Now , man i cant do it for you !!

    _X_X_X_X_X_[small]Do It Right , and you will be a Happy Camper !

    Take Care.

    [​IMG][/small]
     
    Last edited by a moderator: May 25, 2004
  14. JSRife

    JSRife Guest

    If you got a virus that you cannot get off your machine, Reformat....Solved
     
  15. Praetor

    Praetor Moderator Staff Member

    Joined:
    Jun 4, 2003
    Messages:
    6,830
    Likes Received:
    1
    Trophy Points:
    118
    Not all viruses go away with a format :)
     
  16. vurbal

    vurbal Administrator Staff Member

    Joined:
    Nov 30, 2002
    Messages:
    2,573
    Likes Received:
    1
    Trophy Points:
    66
    Nope, some of them get into the boot sector and if you fix by reformatting you need to reinitialize the boot sector as well, and that still may not do it. In any case, given the number of people with multiple drives reformatting isn't good general purpose option since you'd have to reformat every one of them to make sure you don't have infected files remaining.
    _X_X_X_X_X_[small]Build a man a fire and he'll be warm for a night. Set him on fire and he'll be warm for the rest of his life
    Backup A DVD With DVD Rebuilder & CCE Basic: http://www.afterdawn.com/guides/archive/dvd_rebuilder_tutorial.cfm[/small]
     
    Last edited: Jun 23, 2004
  17. Nephilim

    Nephilim Moderator Staff Member

    Joined:
    Feb 13, 2003
    Messages:
    13,161
    Likes Received:
    1
    Trophy Points:
    116
    Out of curiosity, would Darik's Boot-n-Nuke do the trick?
     
  18. Praetor

    Praetor Moderator Staff Member

    Joined:
    Jun 4, 2003
    Messages:
    6,830
    Likes Received:
    1
    Trophy Points:
    118
    I have no idea
     
  19. vurbal

    vurbal Administrator Staff Member

    Joined:
    Nov 30, 2002
    Messages:
    2,573
    Likes Received:
    1
    Trophy Points:
    66
    Nephilim, I hadn't heard of that program before (I've got it to play with now!) but I didn't see anything about the boot sector on the Sourceforge page. So if I were reformatting for virus related reasons I'd still probably reinitialize the boot sector with either fdisk, or more likely gdisk from the Ghost package, but as far as the partitions go it should do the job.
     
  20. Nephilim

    Nephilim Moderator Staff Member

    Joined:
    Feb 13, 2003
    Messages:
    13,161
    Likes Received:
    1
    Trophy Points:
    116
    Thank you sir! My curiosity is now sated :)
     

Share This Page