Great, a virus has me by the ass

[Hammock Parties]

My PC has slowed to a crawl. I booted into safe mode and ran AVG but it doesn't seem to help. In regular bootup it won't even let me scan via AVG, and the damn thing also gave Hijackthis! a swift kick in the ass.

I also can't even get Firefox to start.

HELP!!!

Reinstall AVG, maybe?

[Silock]

lol Windows

That's why you should run an OS that no one cares about.

Format and reinstall, mate. Hope you keep a backup.

[Bearcat]

http://www.chiefsplanet.com/BB/showthread.php?t=212718



Preferably from a different computer, download Malwarebytes (http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button), Spybot (http://www.safer-networking.org/en/download/), and Ad-Aware (http://download.cnet.com/Ad-Aware-Anniversary-Edition/3000-8022_4-10045910.html?part=dl-ad-aware&subj=dl&tag=top5). Run them in safe mode, reboot, then run them again.

If that doesn't fix it, download Hijackthis (http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html) and post the log here.

There's also the event viewer and the recovery tool that Fish mentioned. Also, in safe mode, you can run...
1. Click Start
2. Click Run
3. Type "sfc /scannow" and press enter.


After all of that, you're probably looking at restoring/reinstalling... or, you could get a better OS (http://www.ubuntu.com/getubuntu/download).

[BWillie]

Ever since I started using firefox. I've had absolutely no problems. I used to get viruses and trojans all the time when I used to use internet explorer to view my porn. Not so anymore, I make sure I go to hot dick sucking moms dot com with google chrome or mozilla.

[RJ]

Fucking gay fat black midget porn run by the Armenian mafia. Shit ain't right.

[Bearcat]

You should be able to run hijackthis from safe mode... if not, you can at least see what's starting up while in safemode, and Google any strange looking tasks, maybe find the registry entry (or at least stop it from running).

The computer my sister uses at my parents' house is apparently having major virus issues right now and gets a BSoD when my dad goes into safe mode.... I have something to do during the Kansas game tomorrow.

[Hammock Parties]

Hmmm...is there a pop rocks virus?

[CaliforniaChief]

lol Windows

That's why you should run an OS that no one cares about.

Format and reinstall, mate. Hope you keep a backup.

Right you are. Once you go Mac, you won't go back.

[boogblaster]

****ing gay fat black midget porn run by the Armenian mafia. Shit ain't right.

beat me too it

[bevischief]

Hmmm...is there a pop rocks virus?

Yes and you have it or discovered it.

[BWillie]

just say no to www.fatchicksinpartyhats.com

[bevischief]

Chicken soup...

























ROFL

["Bob" Dobbs]

Also lose AVG & get AVAST! Seems to work MUCH better, and is still free.

[Hammock Parties]

Giving system restore a whirl.

[Hammock Parties]

OK. That seems to have made a difference. Now I can actually SCAN with AVG.

[mikey23545]

So even your computer has AIDS...

[Hammock Parties]

So even your computer has AIDS...

Everyone has AIDS!

[Armyofme]

A virus? On your computer? Strange.... *looks at his MacBook Pro quizzically* ... Very strange indeed.

[QuikSsurfer]

heh

http://www.resimler.tv/data/media/504/apple-ET.jpg

[Hammock Parties]

god damn mac fanboys

[EyePod]

just say no to www.fatchicksinpartyhats.com (http://www.fatchicksinpartyhats.com)


How have I not seen that website until now???

[EyePod]

god damn mac fanboys Really, just keep anti virus on and use Firefox. Also, it's the porn sites that get you, so get a girlfriend who spends a lot of time with you....

[The_Doctor10]

god damn mac fanboys

See, you say that... yet here we are sitting pretty with GORGEOUS, lightning-fast, always working machines, and there you are trying to scrimp together some anti-virus cocktail in a desperate attempt to save your system.

How you like us now, bitch? :D

[EyePod]

See, you say that... yet here we are sitting pretty with GORGEOUS, lightning-fast, always working machines, and there you are trying to scrimp together some anti-virus cocktail in a desperate attempt to save your system.

How you like us now, bitch? :D

I play computer games. You just can't do that well on a mac. Sorry.... And the gorgeous did have a gay lisp pronunciation, right?

[rtmike]

It's been several years since I've had any crap on my PC.

I used to run AVG too but it started acting up so I switched to avast.

I don't have personal experience contracting viruses or adware but the folks I read about that do usually run http://www.malwarebytes.org/ in safe mode & it clears things up.

It doesn't seem like it's viruses much anymore as it is trojan horse, worms, adware & mostly malware.

[Hammock Parties]

See, you say that... yet here we are sitting pretty with GORGEOUS, lightning-fast, always working machines, and there you are trying to scrimp together some anti-virus cocktail in a desperate attempt to save your system.

How you like us now, bitch? :D

I really don't give a shit. By dawn my problem will be fixed and I'll be gearing up to kick Mac's ass all over the place.

[Hammock Parties]

Really, just keep anti virus on and use Firefox. Also, it's the porn sites that get you, so get a girlfriend who spends a lot of time with you....

I'm trying to think where I even got a virus from. I don't visit porn sites, got bittorrent for that. :evil:

[Bugeater]

god damn mac fanboys
Like you didn't know this thread was going to draw them out. They're as bad as the Honda/Toyota fluffers.

[Hammock Parties]

Like you didn't know this thread was going to draw them out. They're as bad as the Honda/Toyota fluffers.

I think that's how I'd like to die. Taking out an Apple store, guns blazing.

[DaneMcCloud]

I think that's how I'd like to die. Taking out an Apple store, guns blazing.

Please start at the "Genius Bar".

Dumbass hipster doofuses.

[JohninGpt]

Please start at the "Genius Bar".

Dumbass hipster doofuses.

Condescending fauxhawked punk pricks.

[Sweet Daddy Hate]

First off, you need to uninstall that AVG trash(and any other anti-virus or monitor)and run the Gauntlet.
Behold, Combofix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Fuck the instructions, SAVE the download(don't run), and make sure ALL anti-virus or malware monitors are DISENGAGED before running.

Once that's done, get the REAL DEAL in Maintenance. These apps kick ass and are FAST.

Behold, IOBIT:
http://download.cnet.com/1770-20_4-0.html?query=IOBIT&tag=srch&searchtype=downloads&filterName=platform%3DWindows&filter=platform%3DWindows

Download the first three. Install and run the maintenance suite first( the blue one ).

Then install the security program( the red one )and run a full scan.
(Get Reminderfox, and set to remind you once a day to do the 'quick scan')

Then install the Defrag program and follow it's instructions.

Then get this:

http://download.cnet.com/Avira-AntiVir-Personal-Free-Antivirus/3000-2239_4-10322935.html?tag=mncol

This program fucks AVG in the ass, and you only have to run it once a week once you do the initial full-system scan. And you can schedule this program.

[DaneMcCloud]

Condescending fauxhawked punk pricks.

That works, too.

:D

[Fairplay]

lol Gochiefs got the porno virus bug.

[Hammock Parties]

Ugh, this is nucking futs. I booted into safe mode and I can't even install Combo Fix.

[Sweet Daddy Hate]

Ugh, this is nucking futs. I booted into safe mode and I can't even install Combo Fix.

I don't think you can run it in safe mode.

[Sweet Daddy Hate]

Or try running it from the site.

[Hammock Parties]

I don't think you can run it in safe mode.

lol

OK, well....hold the fuck on!

[Sweet Daddy Hate]

If it won't run, you...are...fucked.

[Hog's Gone Fishin]

When I run into this problem I just go jerk off another pig!

[Sweet Daddy Hate]

When I run into this problem I just go jerk off another pig!

ROFL

[JohninGpt]

If it won't run, you...are...****ed.

Something locked up my laptop a couple weeks ago. I got the blue screen of death, and couldn't even boot up in safe mode. I ended up reloading vista and everything else. I'm just lucky I didn't really have anything stored on that computer because it was pretty new.

[Sweet Daddy Hate]

Something locked up my laptop a couple weeks ago. I got the blue screen of death, and couldn't even boot up in safe mode. I ended up reloading vista and everything else. I'm just lucky I didn't really have anything stored on that computer because it was pretty new.

Get the apps I posted above. I use Vista 64, and haven't had ONE problem.

['Hamas' Jenkins]

You should have used Kaspersky.

[Hammock Parties]

combofix doesn't work on Windows 7

['Hamas' Jenkins]

I'm imagining GoChiefs' computer being taken surprise by the porno virus the same way the Autobots were when the Decepticons intercepted their shuttle in Transformers: The Movie.

[Sweet Daddy Hate]

combofix doesn't work on Windows 7

You runnin' beta? On your important shit?

ROFL

[JohninGpt]

I'm imagining GoChiefs' computer being taken surprise by the porno virus the same way the Autobots were when the Decepticons intercepted their shuttle in Transformers: The Movie.

Or the way the gerbils got Richard Gere.

[Hammock Parties]

You runnin' beta? On your important shit?

ROFL

release candidate is not beta

Anyway, here comes Kapersky. I am going to jerk off on a hog when this is done, I think.

[DeezNutz]

The NFL has obviously planted a secret virus on your system in retribution for all of your GIFs.

[Hammock Parties]

The NFL has obviously planted a secret virus on your system in retribution for all of your GIFs.

The stay down, glitch.

[JohninGpt]

release candidate is not beta

Anyway, here comes Kapersky. I am going to jerk off on a hog when this is done, I think.

I believe that was one of the recommended solutions, I'd go for it.

The hog part that is.

[DeezNutz]

The stay down, glitch.

If I were ever to encounter a "Stay Down Bitch" termination message, I would probably piss myself from laughter.

[Sweet Daddy Hate]

If I were ever to encounter a "Stay Down Bitch" termination message, I would probably piss myself from laughter.

ROFL Cosign.

[Hammock Parties]

Well at least Kapersky is INSTALLING.

Now, should I run it in safe mode?

[Hammock Parties]

Aw, motherFUCK. It just told me windows installer couldn't be accessed.

Trying this in safe mode and crossing my fingers.

[Psyko Tek]

how bad have you fucked up your system on reinstall?


try avast
adware

if you're running 7 I got no idea

[Hog's Gone Fishin]

release candidate is not beta

Anyway, here comes Kapersky. I am going to jerk off on a hog when this is done, I think.


NOT ON A HOG !!!!


THAT"S SICK!

[Simply Red]

does anyone know of any good adult streaming websites?

[Simply Red]

two things here, Clay:

1. Stop fucking w/ torrents.

2. Mac 4 designated pr0n medium.

k?thxbye

[Shaid]

does anyone know of any good adult streaming websites?

http://www.chiefsplanet.com/BB/showthread.php?t=198654

[Hammock Parties]

"the windows installer service is not accessible in safe mode."

http://i265.photobucket.com/albums/ii237/cbc82/GIF_saftey_guy_suicide.gif

[Hammock Parties]

Wait a second. Now kapersky is trying to activate itself?

WTF IS GOING ON?

(been awhile since I busted that out and TRULY meant it)

[Sweet Daddy Hate]

"the windows installer service is not accessible in safe mode."

http://i265.photobucket.com/albums/ii237/cbc82/GIF_saftey_guy_suicide.gif

Got back up disks for Vista?
Can you access your media and back it up?

[Hammock Parties]

Got back up disks for Vista?
Can you access your media and back it up?

Oh, yeah.

But FUCK that. I am not doing a full system rebuild.

I WILL TAKE THIS ALL THE WAY TO THE SUPREME COURT!

[Hog's Gone Fishin]

Have you tried running a semen extraction program. If your keyboard is getting sticky i would give it a try.

[Sweet Daddy Hate]

Have you tried running a semen extraction program. If your keyboard is getting sticky i would give it a try.

ROFL

[JohninGpt]

Have you tried running a semen extraction program. If your keyboard is getting sticky i would give it a try.

Or maybe hit it with some windex.

[Hammock Parties]

Now that Kapersky is apparently INSTALLED, I'm going to attempt to run it from safe mode.

"DOOOOOOOOOWN ONCE MORE TO THE DUNGEONS OF MY BLACK DESPAAAAAAAAAIR! DOWN WE PLUUUUUUUUUUNGE TO THE PRISON OF MY MIIIIIIIIIIIIIIND! DOWN THAT PATH INTO DARKNESS DEEP AS....HEEEEEEEEEEEEEEEEEEEEEEEELL!"

http://www.early-sarah-brightman.com/Phantom03.JPG

[DaneMcCloud]

You could have wiped the drive and reinstalled Windows by now.

Or, used a program like Paragon to make an image of your C:drive and reloaded everything in less than 45 minutes.

You're wasting time.

[Sweet Daddy Hate]

You could have wiped the drive and reinstalled Windows by now.

Or, used a program like Paragon to make an image of your C:drive and reloaded everything in less than 45 minutes.

You're wasting time.

What is this strange magic you speak of?

[Simply Red]

You could have wiped the drive and reinstalled Windows by now.

Or, used a program like Paragon to make an image of your C:drive and reloaded everything in less than 45 minutes.

You're wasting time.

Dane, I have an IBM T42 Stinkpad, I need to reinstall windows xp pro on it. How would you recommend I do it w/o buying it, or should I just go buy the disc?

[Hammock Parties]

You could have wiped the drive and reinstalled Windows by now.

Or, used a program like Paragon to make an image of your C:drive and reloaded everything in less than 45 minutes.

You're wasting time.

Dude, rebuilding my system is a HUGE pain in the ass. It takes hours.

WE'RE GONNA BEAT THIS!

<object width="425" height="344"><param name="movie" value="http://www.youtube.com/v/Uvm2Guvuudo&hl=en&fs=1&"></param><param name="allowFullScreen" value="true"></param><param name="allowscriptaccess" value="always"></param><embed src="http://www.youtube.com/v/Uvm2Guvuudo&hl=en&fs=1&" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="425" height="344"></embed></object>

[DaneMcCloud]

Dane, I have an IBM T42 Stinkpad, I need to reinstall windows xp pro on it. What would you recommend?

I'd recommend purchasing Paragon Professional 9.0 for $79.00.

Wipe the drive using Paragon, then install your OS of choice.

Once the OS is installed, along with all of your apps, launch Paragon.

Paragon makes an image of your C:drive.

Save it on an external drive and if you ever have virus or other issues, you can re-wipe the drive and restore it to that desktop in less than 45 minutes.

No authorizations. No new bookmarks. Everything's saved as you saved it. You don't even have to re-authorize Windows.

[Simply Red]

I'd recommend purchasing Paragon Professional 9.0 for $79.00.

Wipe the drive using Paragon, then install your OS of choice.

Once the OS is installed, along with all of your apps, launch Paragon.

Paragon makes an image of your C:drive.

Save it on an external drive and if you ever have virus or other issues, you can re-wipe the drive and restore it to that desktop in less than 45 minutes.

Thanks, I'll pay a tech for that. Ughh, too much to do.

[MadMax]

My PC has slowed to a crawl. I booted into safe mode and ran AVG but it doesn't seem to help. In regular bootup it won't even let me scan via AVG, and the damn thing also gave Hijackthis! a swift kick in the ass.

I also can't even get Firefox to start.

HELP!!!

Reinstall AVG, maybe?




www.finally fast.com finally my computer is fast ROFLROFLROFLROFLROFLROFL Sry I hate that commercial

[DaneMcCloud]

Thanks, I'll pay a tech for that. Ughh, too much to do.

Sorry, Bro.

It's really very easy. The most time consuming part of re-loading a Windows OS is downloading 400 megabytes of updates. But once you've got your system complete and you create an image, you're done.

You never have to go that process again.

[PastorMikH]

Is this the one that runs a free virus scan for you and tells you that if you buy their virus software it will take care of the virus?

That thing kicked the church computer hard in the groin last week. Had Avast running that I'd just installed a few weeks prior and recently updated. It got by Avast like defenders past the Chiefs O Line if McIntosh and Black were playing side by side. Tried running virus scans. Loading AVG and running it. Running in safemode, system restore, everything I could think of. Finally did the ol' FORMAT C:\ [enter] to get rid of it.

The secretary learned a valuable lesson in backing up. Tried telling her she'd better back things up, does she listen? (key words: She, & Listen). No. She loses 2 months worth of bookkeeping. After a week of re-entering everything from the hardcopy ledgers, I'll bet she backs up now.

[kcxiv]

Mac's are great, Until you want to game. Then they are about as good as the Chiefs last year.

[JohninGpt]

Is this the one that runs a free virus scan for you and tells you that if you buy their virus software it will take care of the virus?

That thing kicked the church computer hard in the groin last week. Had Avast running that I'd just installed a few weeks prior and recently updated. It got by Avast like defenders past the Chiefs O Line if McIntosh and Black were playing side by side. Tried running virus scans. Loading AVG and running it. Running in safemode, system restore, everything I could think of. Finally did the ol' FORMAT C:\ [enter] to get rid of it.

If that's the same one my daughter got on my home computer last month, it's not a virus, it's an executable. You can uninstall it. The toughest part is figuring out what it's called.

[PastorMikH]

Dude, rebuilding my system is a HUGE pain in the . It takes hours.

</EMBED>



Yeah, that's what I said too. (well not quite word for word). In the end though, it was the only rational thing for me to do. Last thing we needed was to have a trojan on the same computer we keep the financial stuff on. Even if I had gotten it going, I'd backed up data and wiped everying out.

Friend of mine had a bad one a month or so back. Guy at the computer store gave him a disk to boot up and run to take care of their problem. Don't know what software was on the disk though.

Good luck with yours.

[Psyko Tek]

Is this the one that runs a free virus scan for you and tells you that if you buy their virus software it will take care of the virus?

That thing kicked the church computer hard in the groin last week. Had Avast running that I'd just installed a few weeks prior and recently updated. It got by Avast like defenders past the Chiefs O Line if McIntosh and Black were playing side by side. Tried running virus scans. Loading AVG and running it. Running in safemode, system restore, everything I could think of. Finally did the ol' FORMAT C:\ [enter] to get rid of it.

The secretary learned a valuable lesson in backing up. Tried telling her she'd better back things up, does she listen? (key words: She, & Listen). No. She loses 2 months worth of bookkeeping. After a week of re-entering everything from the hardcopy ledgers, I'll bet she backs up now.

really, I been runnig avast but have some things I don't like happening on puter , toolbars disapppear windos move
that usually menas trouble so any ideas

[Sweet Daddy Hate]

If that's the same one my daughter got on my home computer last month, it's not a virus, it's an executable. You can uninstall it. The toughest part is figuring out what it's called.

"Antivirus XP", that's the "front" for whatever that monstrosity is. I had it too running XP, but Combofix kicked it's unholy ass.

[Hammock Parties]

Pastor, are you afraid to say ass?

[JohninGpt]

"Antivirus XP", that's the "front" for whatever that monstrosity is. I had it too running XP, but Combofix kicked it's unholy ass.

That's the one. I just uninstalled the fugger, and life was good.

[PastorMikH]

If that's the same one my daughter got on my home computer last month, it's not a virus, it's an executable. You can uninstall it. The toughest part is figuring out what it's called.


I never found it. I unistalled numerous things that were associated with it, never got rid of it though. At one point I did get AVG going, and got about 6 trojans off, but still didn't get the root. This computer is almost never on the net and I'd just did a fresh format on it two months ago. (thank goodness i did that or we might have been a couple of years off on some of the stuff).

[PastorMikH]

Pastor, are you afraid to say gochiefs?


No, I jchoose not to.:)

[JohninGpt]

I never found it. I unistalled numerous things that were associated with it, never got rid of it though. At one point I did get AVG going, and got about 6 trojans off, but still didn't get the root. This computer is almost never on the net and I'd just did a fresh format on it two months ago. (thank goodness i did that or we might have been a couple of years off on some of the stuff).

I know it sounds overly simple, but that blue screen with red letters is just wallpaper.

[PastorMikH]

That's the one. I just uninstalled it, and life was good.


I uninstalled that one about 5 times and it kept coming back. Even went into c drive and deleted the folder towards the end of the struggle. Back it came.

It hasn't come back since I reformated though!

[PastorMikH]

I know it sounds overly simple, but that blue screen with red letters is just wallpaper.


Caught on to that rather quickly.

The thing had to get wrapped around something on ours, just not sure what and with the info we had on the computer, after about 30 minutes I just axed everything.

[PastorMikH]

Told several people locally about it and also told them when a hacker who creates a virus is caught, everyone who had problems with the virus should get to line up and take turns hitting them where ever they want as long as they leave enough hacker for the next person in line to get some satisfaction on.

[Hammock Parties]

Still no sign of land. How long is it? That's a rather personal question!

[Sweet Daddy Hate]

Told several people locally about it and also told them when a hacker who creates a virus is caught, everyone who had problems with the virus should get to line up and take turns hitting them where ever they want as long as they leave enough hacker for the next person in line to get some satisfaction on.

Most of that junk is created overseas, so the US can't pursue or prosecute.:cuss:

[Armyofme]

Mac's are great, Until you want to game. Then they are about as good as the Chiefs last year.

How is the Mac not good for gaming? The only issue with Mac gaming is that several titles aren't written (or ported) for the Mac. It has nothing to do with the OS or the machine itself. And if there is a game you need to play on a Mac, dual boot into Windows. Keep all of your important shit virus/trouble free.

If you're hell bent on not paying Apple premiums for a machine, build a Hackintosh.

I just don't understand peoples hatred for something they haven't REALLY tried. If you have, and you still hate it, I would love to know the reasons.

[PastorMikH]

Most of that junk is created overseas, so the US can't pursue or prosecute.:cuss:


When I was fighting ours, I kept seeing visions of this kid in Russia of about 12 years old drooling over the info he was getting from us and laughing at the agony he caused while all his buddies patted him on the back for the grief he caused "the enemy".

[Hammock Parties]

WHOA! Suddenly firefox works.

http://sharecare.files.wordpress.com/2006/12/ray-of-hope.jpg

[Sweet Daddy Hate]

When I was fighting ours, I kept seeing visions of this kid in Russia of about 12 years old drooling over the info he was getting from us and laughing at the agony he caused while all his buddies patted him on the back for the grief he caused "the enemy".

Eh, more like London or Asia. Especially Asia; those frickin' Chinese are sharp and can't be trusted.:D

[BigRichard]

Just a quick word of advice. Set up two partitions on your drive. A small one to house your OS and use the second one for storage. That way when you have difficult problems just blow down a new OS and all your data will still be there. I do mine every year just to wipe any extra shit I might have gotten in there over time.

[Bane]

How is the Mac not good for gaming? The only issue with Mac gaming is that several titles aren't written (or ported) for the Mac. It has nothing to do with the OS or the machine itself. And if there is a game you need to play on a Mac, dual boot into Windows. Keep all of your important shit virus/trouble free.

If you're hell bent on not paying Apple premiums for a machine, build a Hackintosh.

I just don't understand peoples hatred for something they haven't REALLY tried. If you have, and you still hate it, I would love to know the reasons.

Yep you buy $250 junk,you get $250 junk!!!!ROFL
The graphics on my mac look just as good if not better than they do on my dell xps 1550.Plus it starts up in about 12 seconds,instead of the 2 min it takes the dell.

[mikeyis4dcats.]

google "elite killer virus" and follow his instructions.

[ArrowheadHawk]

Have you tried Malwarebytes yet? That program is the best at removing malware. A lot of Malware programs actually block the program by name. Go to www.malwarebytes.org. Also it will run in safe mode. Just start safe mode w/ networking so that you can get updates.

[gblowfish]

When "Go Chiefs" says "A virus has me by the ass" I'm assuming some sort of anti-biotic is in order.

[Hammock Parties]

Have you tried Malwarebytes yet? That program is the best at removing malware. A lot of Malware programs actually block the program by name. Go to www.malwarebytes.org (http://www.malwarebytes.org). Also it will run in safe mode. Just start safe mode w/ networking so that you can get updates.

So far most malware programs, even in safe mode, won't work.

[Sweet Daddy Hate]

The moral of this story?

WIN 7 SP1.LMAO

[Fish]

Is this the one that runs a free virus scan for you and tells you that if you buy their virus software it will take care of the virus?

That thing kicked the church computer hard in the groin last week. Had Avast running that I'd just installed a few weeks prior and recently updated. It got by Avast like defenders past the Chiefs O Line if McIntosh and Black were playing side by side. Tried running virus scans. Loading AVG and running it. Running in safemode, system restore, everything I could think of. Finally did the ol' FORMAT C:\ [enter] to get rid of it.

The secretary learned a valuable lesson in backing up. Tried telling her she'd better back things up, does she listen? (key words: She, & Listen). No. She loses 2 months worth of bookkeeping. After a week of re-entering everything from the hardcopy ledgers, I'll bet she backs up now.

FYI... that's not really a virus. And I don't believe Avast even scans for that. But it can be removed by Malwarebytes. Which is a wonderful program.

For complete security, you'll need more than just a virus scanner. You also need a spyware and malware scanner. Lots of spyware and malware aren't detected by most virus scanners because they aren't really "virii".

[Dante84]

Oh! Oh! I know!

You could go outside and enjoy the fucking weather.

[ArrowheadHawk]

So far most malware programs, even in safe mode, won't work.
http://www.malwarebytes.org/forums/index.php?showtopic=12709

Follow these instructions and get it to run. If you get it to run it will clean up your problem.

[Bane]

The moral of this story?

WIN 7 SP1.LMAO

Moral of the real story.......Stop downloading gay midget beastality porn!!!ROFL

[HotRoute]

OK. That seems to have made a difference. Now I can actually SCAN with AVG.

system restore's are only temporary (virus is still there) but you have a small window to fix it. so erase anything and everything recently put on your CPU and try to remember what website you were on last, then never go to that shit again.

[HotRoute]

Told several people locally about it and also told them when a hacker who creates a virus is caught, everyone who had problems with the virus should get to line up and take turns hitting them where ever they want as long as they leave enough hacker for the next person in line to get some satisfaction on.

to bad this isnt how it really works, great post
:clap:

[jidar]

How is the Mac not good for gaming? The only issue with Mac gaming is that several titles aren't written (or ported) for the Mac.].

you answered your own question.

[JD10367]

I use Avast! for antivirus and ZoneAlarm for firewall, both free, both seem to work well.

I also use only Opera to porn-surf, because it allows you to selectively ignore cookies. You load up a porn site (my two usual choices are pornhub or youporn), when the cookie window comes up you click "f**k no" and check "remember this for this site", and that's it, no cookies from that site again.

And yet... my computer still has an issue. It's a cheapo from Best Buy, a bit over a year old probably. Whenever I run Firefox or Opera or IE, after about five minutes they just stop loading and freeze up. Then I have to reboot to get them working again, and it takes about five minutes to go through the shutdown procedure. The only browser that works? AOL. A O f**king L. I have to actually run the AOL program and browse through that, because for some reason that ancient piece of shit manages to do something the three new big boy browsers can't. Go figure. Of course, most of my problem is that it's running craphole Vista but, since it was a cheap computer, I can't even wipe it and reload Vista 'cause it didn't come with disks (just that crappy repair disk). What I really need to do is buy an external drive, move all of my personal pics and docs onto it, then go buy Linux or something and reformat the whole thing....

[2112]

Um, I have Verizon dsl..and I got a call the other day telling me to change the port number on my outgoing email settings because people were getting viruses through them without even knowing it? lol

Good luck, Clayton.

[ArrowheadHawk]

I use Avast! for antivirus and ZoneAlarm for firewall, both free, both seem to work well.

I also use only Opera to porn-surf, because it allows you to selectively ignore cookies. You load up a porn site (my two usual choices are pornhub or youporn), when the cookie window comes up you click "f**k no" and check "remember this for this site", and that's it, no cookies from that site again.

And yet... my computer still has an issue. It's a cheapo from Best Buy, a bit over a year old probably. Whenever I run Firefox or Opera or IE, after about five minutes they just stop loading and freeze up. Then I have to reboot to get them working again, and it takes about five minutes to go through the shutdown procedure. The only browser that works? AOL. A O f**king L. I have to actually run the AOL program and browse through that, because for some reason that ancient piece of shit manages to do something the three new big boy browsers can't. Go figure. Of course, most of my problem is that it's running craphole Vista but, since it was a cheap computer, I can't even wipe it and reload Vista 'cause it didn't come with disks (just that crappy repair disk). What I really need to do is buy an external drive, move all of my personal pics and docs onto it, then go buy Linux or something and reformat the whole thing....

If it didn't come with disks it should still have a recovery partition.

[bowener]

I had a shitty virus last week, a real bitch. Finally just downloaded combofix (renamed it alg.exe) and ran that program. Its like using a nuke to go deer hunting apparently, but it did the trick, and allowed me to run the rest of my virus tools like Malwarebytes (prior to combo it would open and immediately shut). I still get a random message about every 2 days from AVG telling me their is a trojan that has just been deleted... nothing else seems to be wrong though.

[keg in kc]

I run avast and spybot, occasionally malwarebytes. Stopped running zone alarm a while ago, I just use windows' onboard firewall. I haven't had a serious virus problem in a long time (knock on wood). I don't actually run live protection for either viruses or spyware.

Best advice - which I know you all know - is to only go to sites you know and trust, don't download anything questionable, and never ever open an .exe.

I don't think I've ever gotten a virus where I didn't immediately think "i shouldn't have done that, that was stupid." Every single time it's been my own damn fault.

[The_Doctor10]

I play computer games. You just can't do that well on a mac. Sorry.... And the gorgeous did have a gay lisp pronunciation, right?

Of course you can; use BootCamp and run Windows for games. It's not that hard.

And perhaps the gorgeous had a lisp, but for chrissakes, these new ones are perhaps the most excellent looking laptops ever designed.

[ArrowheadHawk]

Of course you can; use BootCamp and run Windows for games. It's not that hard.

And perhaps the gorgeous had a lisp, but for chrissakes, these new ones are perhaps the most excellent looking laptops ever designed.

So your saying to buy an overpriced MAC and then turn it into a PC? Now thats some dumbass shit right there.

[Sweet Daddy Hate]

Oh! Oh! I know!

You could go outside and enjoy the fucking weather.

ROFL

[Armyofme]

So your saying to buy an overpriced MAC and then turn it into a PC? Now thats some dumbass shit right there.

Tunnelvision? He is saying that you would run windows on it for games. To get the real work done, virus/trouble free, run OS X. Best of both worlds.

[Hammock Parties]

Oh! Oh! I know!

You could go outside and enjoy the fucking weather.

Fun fact: I have one date tonight, possibly two.

[JD10367]

Fun fact: I have one date tonight, possibly two.

If you use your right hand, and then use your left hand for "the stranger", that really doesn't count as two. JMO.

[Hammock Parties]

If you use your right hand, and then use your left hand for "the stranger", that really doesn't count as two. JMO.

Fuck man, I could have THREE! This bitch wants to go two-steppin'

Not that I know shit about dancing, but she's hot.

I may have to cancel a date. I'm hot shit!

[Hammock Parties]

http://www.malwarebytes.org/forums/index.php?showtopic=12709

Follow these instructions and get it to run. If you get it to run it will clean up your problem.a

Wow, yeah. I just get an error when I try to scan.

[OnTheWarpath15]

a

Wow, yeah. I just get an error when I try to scan.

Clear some PM's, dude.

[Hammock Parties]

I have the W32.Ahlem.A@mm worm.

Anyone?

[Sweet Daddy Hate]

I have the W32.Ahlem.A@mm worm.

Anyone?

Never heard of it.

[Sofa King]

Step 1: Grab a big hammer.

Step 2: Smash computer.

[Chief Pote]

Disconnect from the internet and then scan the computer. It happened to me about a month ago, disconnected the broadband cable from the router and was able to scan and removed the trash.

[mikeyis4dcats.]

just listen to me. Google elitekiller and follow the site's instructions. It will point you to the relevant sites and help you get around this crap. I've used it to clear similar issues with 3 pcs in the last year.

[JD10367]

I have the W32.Ahlem.A@mm worm.

Anyone?

http://www.blurtit.com/var/question/q/q3/q34/q349/q3498/q3498692_penicillin.jpg

[UsualSuspects]

**** man, I could have THREE! This bitch wants to go two-steppin'

Not that I know shit about dancing, but she's hot.

I may have to cancel a date. I'm hot shit!

ROFL

[UsualSuspects]

just listen to me. Google elitekiller and follow the site's instructions. It will point you to the relevant sites and help you get around this crap. I've used it to clear similar issues with 3 pcs in the last year.

It deserves what "it" gets

[old_geezer]

http://www.spywarenerds.com/spyware/?k=W32-Worm&gclid=CKyo3suI_5wCFdRB5godgzxvbg

How to get rid of this worm.

PS: Don't send me an e-mail please.

More information: http://www.tenebril.com/src/info.php?id=4827650

[Psyko Tek]

How is the Mac not good for gaming? The only issue with Mac gaming is that several titles aren't written (or ported) for the Mac. It has nothing to do with the OS or the machine itself. And if there is a game you need to play on a Mac, dual boot into Windows. Keep all of your important shit virus/trouble free.

If you're hell bent on not paying Apple premiums for a machine, build a Hackintosh.

I just don't understand peoples hatred for something they haven't REALLY tried. If you have, and you still hate it, I would love to know the reasons.

wtf is a hackintosh?
no idea

[pr_capone]

wtf is a hackintosh?
no idea

you can build a computer using components usually reserved for a pc and you can get the MacOS to actually load.

Its pretty cool actually. WAY cheaper than buying apple products.

[UsualSuspects]

wtf is a hackintosh?
no idea

OMG Might have 3 is I suck dick..........

U are more stupid than Nick.........

Insider LJ sucks the book and left it there. No way KC. He is a god and sucks. Nice Nick!

Oh yhey made U lie but a pay on the insiders?


Dick Head as usual................

[Sweet Daddy Hate]

OMG Might have 3 is I suck dick..........

U are more stupid than Nick.........

Insider LJ sucks the book and left it there. No way KC. He is a god and sucks. Nice Nick!

Oh yhey made U lie but a pay on the insiders?


Dick Head as usual................

Smed? Is that you?

[Psyko Tek]

Wait a second. Now kapersky is trying to activate itself?

WTF IS GOING ON?

(been awhile since I busted that out and TRULY meant it)

you just keep fucking that chicken

no idea what it means but i like it

[Psyko Tek]

I use Avast! for antivirus and ZoneAlarm for firewall, both free, both seem to work well.

.

vista and zone alarm don't (or didn't) play together
that could be your problem
it was mine

[Psyko Tek]

OMG Might have 3 is I suck dick..........

U are more stupid than Nick.........

Insider LJ sucks the book and left it there. No way KC. He is a god and sucks. Nice Nick!

Oh yhey made U lie but a pay on the insiders?


Dick Head as usual................

well excuse the fuck out of me

do I know you sir?
I believe I do not know you or care what your opion is


so kindly piss upa rope

aaaargh

[Psyko Tek]

you can build a computer using components usually reserved for a pc and you can get the MacOS to actually load.

Its pretty cool actually. WAY cheaper than buying apple products.

link?

[PastorMikH]

[quote=GoChiefs;6087396I may have to cancel a date...[/quote]


If I were a single guy and were looking at a date with someone I wasn't looking for an excuse to get out of, the computer with a virus would wait.


Shoot, IF I were Kyle and had a hot date, and the Planet servier were crashing due to a virus, you guys would have to wait until the date was over to post again.

[Hammock Parties]

If I were a single guy and were looking at a date with someone I wasn't looking for an excuse to get out of, the computer with a virus would wait.


Try reading the post again.

[Armyofme]

link?

http://www.insanelymac.com/

It's actually quite easy, you just need to buy the right parts.

[PastorMikH]

Try reading the post again.


If you use your right hand, and then use your left hand for "the stranger", that really doesn't count as two. JMO.



I see. You needed your computer going so you could have your hot dates.

[Hammock Parties]

Fixed it. Without a reformat.

I am the champion.

[Sweet Daddy Hate]

Fixed it. Without a reformat.

I am the champion.

In only what, four days?:)

[Hammock Parties]

In only what, four days?:)

I grappled with the beast and defeated it. That's all that matters.

<object width="425" height="344"><param name="movie" value="http://www.youtube.com/v/24nvfAAE1bs&hl=en&fs=1&"></param><param name="allowFullScreen" value="true"></param><param name="allowscriptaccess" value="always"></param><embed src="http://www.youtube.com/v/24nvfAAE1bs&hl=en&fs=1&" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="425" height="344"></embed></object>

[Sweet Daddy Hate]

I grappled with the beast and defeated it. That's all that matters.

<object height="344" width="425">


<embed src="http://www.youtube.com/v/24nvfAAE1bs&hl=en&fs=1&" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" height="344" width="425"></object>

LMAO

Do you have a high-gig backup drive, independent of your computer?

If not, I'd get one and I'd get that program Dane was talking about.

Even without that, I can reformat and have my system fully restored in about 4 hours, including Windows Updates.

[Bearcat]

Is this the one that runs a free virus scan for you and tells you that if you buy their virus software it will take care of the virus?

That thing kicked the church computer hard in the groin last week. Had Avast running that I'd just installed a few weeks prior and recently updated. It got by Avast like defenders past the Chiefs O Line if McIntosh and Black were playing side by side. Tried running virus scans. Loading AVG and running it. Running in safemode, system restore, everything I could think of. Finally did the ol' FORMAT C:\ [enter] to get rid of it.

The secretary learned a valuable lesson in backing up. Tried telling her she'd better back things up, does she listen? (key words: She, & Listen). No. She loses 2 months worth of bookkeeping. After a week of re-entering everything from the hardcopy ledgers, I'll bet she backs up now.

Next time, pay me to do it, and you'll keep everything. :D

Spent the last 3 days bringing someone's laptop back from the dead... the executables were randomly named & placed, but I was able to get the DLL name from HijackThis.... denied all access to the DLL, rebooted, then could finally delete the DLL that was causing all of the copy/paste/search/executing problems.

Hell, if I'm faced with reformat/reinstalling, what I do is start deleting random stuff (well, somewhat educated guesses... and guesses)... it's actually helped before.

[PastorMikH]

Next time, pay me to do it, and you'll keep everything. :D






Why should I pay you when the secretary is already on salary?:D

[ArrowheadHawk]

Congrats on fixing your problem. But yeah It should have just been formated and fixed on the first day. Also windows runs a lot better when it is freshly loaded.

[Hammock Parties]

Congrats on fixing your problem. But yeah It should have just been formated and fixed on the first day. Also windows runs a lot better when it is freshly loaded.

Yeah, no thank you. Burning down the forest to catch the villain is not my style.

[Sweet Daddy Hate]

Yeah, no thank you. Burning down the forest to catch the villain is not my style.

You don't have what it takes to be a Sith.:shake:

[Over-Head]

Yeah, no thank you. Burning down the forest to catch the villain is not my style. Since when? :spock:

[Over-Head]

I see. You needed your computer going so you could have your hot dates. Thus "cyber porn" :clap:

[Hammock Parties]

Shit, I have something else now. I think I got it, actually, but it left something. I can't seem to open any files on my desktop, even just jpegs. Can't edit user accounts, either, and when I try to access certain things Windows tells me the "system administrator" has disabled access.

[Bearcat]

Shit, I have something else now. I think I got it, actually, but it left something. I can't seem to open any files on my desktop, even just jpegs. Can't edit user accounts, either, and when I try to access certain things Windows tells me the "system administrator" has disabled access.

Sounds like Vundo. Have you tried going into Services? I later found there was an issue with the RPC service, but didn't try going into it at first... I assume you can't though.

What I did was go into Windows/system32 and sort by created date... I found a few DLLs that were created a few days before, Googled them, and found out it was part of Vundo. Deny all permissions in the properties of these DLLs, reboot, then delete them. That will at least get you to the point where you can run Malwarebytes and what not.

That is, if you can't get into Safe Mode, which I couldn't...

[Hammock Parties]

Meh, system restore took care of it.

[Hammock Parties]

I can get into services (through msconfig I assume you mean). What am I looking for?

[Bearcat]

I can get into services (through msconfig I assume you mean). What am I looking for?

Well, if you did a restore and it's all back to normal, it doesn't matter... I couldn't even copy/paste at one time, and figured out the RPC service couldn't start because of conflicts with another service.

Sounds like you have a trojan... as much as I hate Microsoft, their OneCare online scan found a couple of trojans on my parents' PCs that even malwarebytes didn't find.

[Hammock Parties]

Yeah it was, but just for a minute apparently. Weird. I'm not sure what the deal is....I can run Firefox and Word fine...

[Bearcat]

I'm so used to people that don't have any restore points, or don't have XP CDs, or have never backed up anything on their computer....... when you do that sort of stuff it takes all the fun out of it. ;)

[Bearcat]

Yeah it was, but just for a minute apparently. Weird. I'm not sure what the deal is....I can run Firefox and Word fine...

Wait, so are you still having issues after the restore with opening other files, etc?

[Hammock Parties]

Yeah.

PS - The RPC Locator service is stopped.

[Fish]

Meh, system restore took care of it.

Keep in mind that it could be hibernating in System Restore and will return again. When you get to a point where you think the machine is clean, I would recommend turning off system restore and doing another full scan while System Restore is turned off. If the bug has gotten into your System Restore data, it can't be cleaned while System Restore is still on. And if it's a sneaky one it will hibernate in System Restore and keep showing up again at a later date. By turning off System Restore, you allow that memory to be scanned. But turning of System Restore will remove your previous restore points, so keep that in mind before you do it. Sometimes it's necessary though...

[Bearcat]

Yeah.

PS - The RPC Locator service is stopped.

The RPC Locator being stopped is fine... the other RPC is the important one.

I'd scroll through the startup programs in msconfig to see if there are any that include "AppInit" then a name of a DLL... and then (if you don't see any) search the registry for AppInit.

Or run HiJackThis and post the log.

[Hammock Parties]

Nothing named AppInit.

[Bearcat]

Nothing named AppInit.

Are you able to install and/or run HijackThis? If so, post a log.

You can run this scan (http://onecare.live.com/site/en-au/default.htm?mkt=en-au)... it's worked well for me.



Uh, you could bring it to St. Joe... heh.

[Hammock Parties]

I don't think it's a virus/malware. Just scanned in safe mode and it found nothing. It's some setting that's been switched. Something to do with user accounts.

"Windows cannot access the specificed device, path or file. You may not have the appropriate permissions to access the item."

[htismaqe]

Chances are that the malware that you got rid of messed with your permissions or something. Unless you can be more specific, it might be irreparably broken.

[Bearcat]

I don't think it's a virus/malware. Just scanned in safe mode and it found nothing. It's some setting that's been switched. Something to do with user accounts.

"Windows cannot access the specificed device, path or file. You may not have the appropriate permissions to access the item."

That's what I was thinking, which is why I wanted the HijackThis log... if there's not an AppInit entry to load code through a DLL, then there's an executable at startup... or else my guess would be that it's a Windows problem.

Can you open files in Safe Mode?

There's a Security Accounts Manager service... make sure it's set to start in msconfig - services, and that it's running. There should also be an lsass.exe process running in the Task Manager processes. If it's not running, it's in Windows\system32.

You could try this...
http://support.microsoft.com/default.aspx/kb/313222

[Hammock Parties]

Can you open files in Safe Mode?

yes


There's a Security Accounts Manager service... make sure it's set to start in msconfig - services, and that it's running. There should also be an lsass.exe process running in the Task Manager processes. If it's not running, it's in Windows\system32.

You could try this...
http://support.microsoft.com/default.aspx/kb/313222

K...hold on.

[ArrowheadHawk]

Just reload the damn thing already.

[Bearcat]

Just reload the damn thing already.

When I saw your name, I knew... LMAO

[ArrowheadHawk]

When I saw your name, I knew... LMAO

:thumb: Well its true make a good install and then image it if you don't like to install all your software. Saves headaches like this.

[Hammock Parties]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:26:23 PM, on 10/2/2009
Platform: Unknown Windows (WinNT 6.01.3004)
MSIE: Internet Explorer v8.00 (8.00.7100.0000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AIM\aim.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Users\bfett81\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 200.65.127.161:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\RunOnce: [ÑN@] ÑN@
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?')
O4 - HKUS\S-1-5-21-2812650370-1542209185-3665841032-1001\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl (User '?')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15108/CTPID.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GRA32A~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @comres.dll,-947 (COMSysApp) - Unknown owner - C:\Windows\system32\dllhost.exe
O23 - Service: Creative Audio Engine Licensing Service - Unknown owner - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Unknown owner - C:\Program Files\Creative\Shared Files\CTAudSvc.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe
O23 - Service: FLEXnet Licensing Service - Unknown owner - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (file missing)
O23 - Service: lxdf_device - - C:\Windows\system32\lxdfcoms.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - Unknown owner - C:\Windows\System32\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe

--
End of file - 6680 bytes

[Hammock Parties]

O4 - HKLM\..\RunOnce: [ÑN@] ÑN@

This one keeps coming back. I removed it last time.

[ArrowheadHawk]

This one keeps coming back. I removed it last time.

Thats the one that needs removed.

[Hammock Parties]

Hmmm...lsass is not running.

[ArrowheadHawk]

Also remove this one.

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe

[Bearcat]

Also remove this one.

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe

I saw the O4 - HKLM\..\RunOnce: [ÑN@] ÑN@, and the executable above is probably recreating it, using a DLL.... if you can delete the exe, then you might just be able to then delete the RunOnce entry and be done with it. If not, you might have to disable the DLL through security.

Start lsass.exe, too.

[Bearcat]

Actually, if you find that executable, look at the create/modified dates on it... then you could go to windows/system32 and see if there are any DLLs with the same date...

[Fish]

AVG isn't a very good virus scanner.

You need to clean up your registry. There's a bunch of stuff running that doesn't need to. Messenger, Sidebar, AIM, Groove, Office helpers, Bonjour, Creative licensing, etc.

And you could have malware spoofing one of these:

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?')
O23 - Service: @comres.dll,-947 (COMSysApp) - Unknown owner - C:\Windows\system32\dllhost.exe
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe

[htismaqe]

AVG isn't a very good virus scanner.

This.

You need to clean up your registry. There's a bunch of stuff running that doesn't need to. Messenger, Sidebar, AIM, Groove, Office helpers, Bonjour, Creative licensing, etc.

This.

And you could have malware spoofing one of these:

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?')
O23 - Service: @comres.dll,-947 (COMSysApp) - Unknown owner - C:\Windows\system32\dllhost.exe
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe

And this.

All 4 of those services are legit, but are commonly spoofed. You need to look them up on the internet and find out what their valid file size and versions are, and then compare those to the files on your machine.

[htismaqe]

By the way, sppsvc.exe is actually a Microsoft app, but it's the key management service for Windows Server 2003.

So unless you're running Server 03, it probably shouldn't be there.

[htismaqe]

By the way, sppsvc.exe is actually a Microsoft app, but it's the key management service for Windows Server 2003.

So unless you're running Server 03, it probably shouldn't be there.

Looks like it's also included in Windows 7.

[ArrowheadHawk]

Looks like it's also included in Windows 7.

My bad I just searched it and a bunch of spyware crap popped up so I assumed it was bad.

[vikingquestfan42]

ew...ass-virus

[Hammock Parties]

You need to clean up your registry. There's a bunch of stuff running that doesn't need to. Messenger, Sidebar, AIM, Groove, Office helpers, Bonjour, Creative licensing, etc.


Um...I need Messenger and AIM. LMAO

[Hammock Parties]

Looks like it's also included in Windows 7.

Yeah I'm running Windows 7.

[Hammock Parties]

OK, now I'm getting messages that my copy of Windows isn't valid...and what's REALLY weird is that Malwarebytes isn't even FINDING anything malicious.

[ArrowheadHawk]

OK, now I'm getting messages that my copy of Windows isn't valid...and what's REALLY weird is that Malwarebytes isn't even FINDING anything malicious.

Reload time yet?:p

[Bearcat]

What's the rundown of issues at this point? What have you done since the regedit post/recommendations?

Reload time yet?:p

I'd almost say so just because the details of what's been done have been so sketchy... even though I think tracking down the DLL files would fix the problem.

[Hammock Parties]

What's the rundown of issues at this point? What have you done since the regedit post/recommendations?


Same bullshit. I can't open files on the desktop or run a half-dozen apps.

They all work in safe mode, however.

[Hammock Parties]

Think I got it. Thanks. Hawk, kiss my ass.

[Bearcat]

What did you do?

[Hammock Parties]

What did you do?

Deleted a .exe (something was masquerading as a key system executable, it was in the wrong directory) and did a very thorough scan with malwarebytes and hijackthis in safe mode after a system restore.

I probably should have reformatted, though. Would have been much easier.

[Bearcat]

Deleted a .exe (something was masquerading as a key system executable, it was in the wrong directory) and did a very thorough scan with malwarebytes and hijackthis in safe mode after a system restore.

I probably should have reformatted, though. Would have been much easier.

Did malwarebytes find a trojan? If it's happened twice, that's the big problem.

Yeah, but what's the fun in that? :D

[RNR]

Did malwarebytes find a trojan? If it's happened twice, that's the big problem.

Yeah, but what's the fun in that? :D

What the heck ever happened to your little brother?

[Bearcat]

What the heck ever happened to your little brother?

He went to college, found a girl, spends his time attached to her hip.

I think he lurks here every once in a while.

[Gracie Dean]

He went to college, found a girl, spends his time attached to her hip.

I think he lurks here every once in a while.

good for him. his major?

[Bearcat]

good for him. his major?

Political Science and Psychology... took the LSAT last weekend.

[Hammock Parties]

Did malwarebytes find a trojan? If it's happened twice, that's the big problem.

Yeah, but what's the fun in that? :D

Yes. I kept booting into safe mode and scanning until it was gone.

[Gracie Dean]

Political Science and Psychology... took the LSAT last weekend.

Very cool

[RNR]

He went to college, found a girl, spends his time attached to her hip.

I think he lurks here every once in a while.

Good for him. I remember there was sort of a rivalry between him and gochiefs. It is safe to say he won.

[Hammock Parties]

Good for him. I remember there was sort of a rivalry between him and gochiefs. It is safe to say he won.

Go fuck yourself, dirtbag.

[RNR]

Go **** yourself, dirtbag.

LMAO

[Hammock Parties]

http://social.technet.microsoft.com/Forums/en-US/w7itprosecurity/thread/71a804c7-52bc-4f8b-9012-925ae192f30b

I think this is my issue...I'm not sure it's a virus after all.

[StcChief]

stay off Pr0n sites.

[dougiedav]

I been having the same problems you've been having GoChief - I got a couple of viruses in the last month, even though I had Norton anti-virus on my system and AVG – both were installed on my system by someone else.

So, I am looking at anti-virus programs and I'm pretty sure I want to pay cuz my experience with free software has not been all that good. I looked at a few different ones and I liked Cyberdefender and PC Tools.

I liked that Cyberdefender seems to be a more complete package, covering anti-virus, trojans, spyware, id theft protection. PC Tools, also had a nice user interface.

I do know Cyberdefender is a NASDAQ public company, but is it a good anti-virus program? Thanks for your helpl!

[Simply Red]

I been having the same problems you've been having GoChief - I got a couple of viruses in the last month, even though I had Norton anti-virus on my system and AVG – both were installed on my system by someone else.

So, I am looking at anti-virus programs and I'm pretty sure I want to pay cuz my experience with free software has not been all that good. I looked at a few different ones and I liked Cyberdefender and PC Tools.

I liked that Cyberdefender seems to be a more complete package, covering anti-virus, trojans, spyware, id theft protection. PC Tools, also had a nice user interface.

I do know Cyberdefender is a NASDAQ public company, but is it a good anti-virus program? Thanks for your helpl!


www.hijackthis.com

[Fish]

I been having the same problems you've been having GoChief - I got a couple of viruses in the last month, even though I had Norton anti-virus on my system and AVG – both were installed on my system by someone else.

So, I am looking at anti-virus programs and I'm pretty sure I want to pay cuz my experience with free software has not been all that good. I looked at a few different ones and I liked Cyberdefender and PC Tools.

I liked that Cyberdefender seems to be a more complete package, covering anti-virus, trojans, spyware, id theft protection. PC Tools, also had a nice user interface.

I do know Cyberdefender is a NASDAQ public company, but is it a good anti-virus program? Thanks for your helpl!

I would strongly recommend not using Cyberdefender. They are one of those software companies that spends all their money on marketing and no money put into the actual product. I've worked on several machines where this POS software was the root of the problem.

Here's a few reviews from PC World:



Reviewed by: JokrOnCrak

04-27-2009
Duration of ownership: 6 Months
Strengths: The tech actually seemed nice.
Weaknesses: $75 in licenses for multiple computers, $130 upgrade for a tech support call, and my computer still had the original virus on it. Tech said that "AV programs can't clean all viruses". ... Then why did I just spend over $200!?!?!?
Overall Evaluation: Horrible. The software sucks, the customer support is horrible, and they will not refund the money even after an ineffective upgrade.
http://images.pcworld.com/images/common/v3/shopping/icons/1star.gif Reviewed by: barondog66

04-11-2009
Duration of ownership: 1 Months
Strengths: None
Weaknesses: Crashed my system, won't uninstall, and has deleted windows system safeguards. Please do not waste your money-after numerous calls and emails and none answered, I feel I have been scammed $45.
Overall Evaluation: Waste of money and a lot of aggrevation!!! I will contact BBB about this company.
http://images.pcworld.com/images/common/v3/shopping/icons/1star.gif Reviewed by: flutelaura

04-07-2009
Duration of ownership: 10 Months
Strengths: Absolutely NONE.
Weaknesses: Software hangs up frequently. Customer Service requires minimum of 20+ minutes to speak to anyone. Was offered $40.00 rebate to sign up and never received rebate. After 1/2 dozen emails to both Cyberdefender AND the rebate firm, I have given up. No one has EVER replied to my queries and I'm out the $40.00.
Overall Evaluation: This is a terribly firm with the worst customer service ever. They are rude on the phone, do not have knowledge of their product and NEVER call back or return emails. They scammed me out of my money. Their program continually hangs up and shuts down the computer.
http://images.pcworld.com/images/common/v3/shopping/icons/1star.gif Reviewed by: Gratefulted

01-07-2009
Duration of ownership: 0 Days
Strengths: None
Weaknesses: Weakness? This product installs spyware and then detects it.
Overall Evaluation: I was working on a computer that had CyberDefender installed on it, the evaluation version, and it would not uninstall. After calling their support they told me that PC World recommends their product and for $99 they would uninstall it for me. These people should be in jail and PC World should NOT recommend this scam to anybody.
http://images.pcworld.com/images/common/v3/shopping/icons/1star.gif Reviewed by: wwireless

10-19-2008
Duration of ownership: 0 Months
Strengths: It's strong as far as misrepresentation goes!
Weaknesses: It's pretty much the most awful thing I've ever downloaded.
Overall Evaluation: DON'T DOWNLOAD IT!!! It gives some great credentials and says it's FREE. IT'S NOT FREE, it does a scan and then says PAY UP (it does NOT show the price, but it says you'll get a discount when you check the boxes for two or more years). Then when you say "no thanks" it wants one of their reps to chat with you. There is NO uninstall function. So when you try to remove it, a question box comes up and requests an answer as to why ou're trying to remove Cyber-Defender. After removing it I've gotten two prompts that tell me it's not completely gone. This is THE SOFTWARE FROM HELL! I felt sorry for trying to make my computer eat this garbage, it's almost like being raped!
http://images.pcworld.com/images/common/v3/shopping/icons/1star.gif Reviewed by: barbkm

10-17-2008
Duration of ownership: 0 Days
Strengths: NONE
Weaknesses: Corrupted my computer.It took several hours figuring how to remove(safe mode with Revo uninstaller)
Overall Evaluation: do not download this program!
http://images.pcworld.com/images/common/v3/shopping/icons/1star.gif Reviewed by: Farmboy

09-17-2008
Duration of ownership: 1 Days
Strengths: Identifies malware, adware, trojans
Weaknesses: The 'come on' to purchase another product that will eliminate what is initially identified.
Overall Evaluation: The product is a marketing scheme. They take over a month to refund your money.

[bevischief]

My PC has slowed to a crawl. I booted into safe mode and ran AVG but it doesn't seem to help. In regular bootup it won't even let me scan via AVG, and the damn thing also gave Hijackthis! a swift kick in the ass.

I also can't even get Firefox to start.

HELP!!!

Reinstall AVG, maybe?

AVG has crash 1 of my pc's before I give up on it is crap.

[mikeyis4dcats.]

if you've got a browser redirection issue, it's malware. it's not a vrisu in the true definition. The link I posted to EliteKiller is the route to go. I've now cleaned my 3rd PC (a buddy's this time) using it in under 4 hours. It's a process.