bribiec
Addicted Member
Offline
Posts: 352
|
 |
« on: August 25, 2008, 07:43:33 PM » |
|
Plese help..I opened an email that related to an account and ended up witha virus/trojan.Have Windows XP Pro. Avast couldnt help with delete, vault etc..they came up with C:\Documents & Settings\Charlie.HOME-A5D54FOE39\Local Settings\Temporary Internet Files\Content.IE5\LU3QSHJD\Kashir[1].exe"file but were unable to fix.Went to trend and ran system through twice, they said all clear but it is still there...Ran CCleaner and Super Antispyware..which found a root kit and a couple of other things, neverthless virus still there...The email with the virus wanted me to download some programme "Antivirus XP2006 licence agreement..I didnt bother am in enough trouble now...For your info my F8 will not work on the computer to get me into "safe mode"Think its due to my keyboard which is wireless and F8 has never worked with this puter.
|
|
|
|
|
Logged
|
|
|
|
neonwizard
Management
Guru
Offline
Posts: 5227
imfndunn
|
 |
« Reply #1 on: August 25, 2008, 07:55:28 PM » |
|
This is in your internet cache just delete them, make sure IE isn't running and the rerun CCleaner
|
|
|
|
|
Logged
|
|
|
|
bribiec
Addicted Member
Offline
Posts: 352
|
 |
« Reply #2 on: August 25, 2008, 08:10:29 PM » |
|
Sorry Neon but how do I clean up cache....
|
|
|
|
|
Logged
|
|
|
|
bribiec
Addicted Member
Offline
Posts: 352
|
 |
« Reply #3 on: August 25, 2008, 08:17:13 PM » |
|
Neon have deleted temp files etc via IO general ....will try ccleaner now
|
|
|
|
|
Logged
|
|
|
|
bribiec
Addicted Member
Offline
Posts: 352
|
 |
« Reply #4 on: August 26, 2008, 03:16:03 PM » |
|
Hi Neon, I cleaned out cache, run c cleaner...then did a thorough run on Avast.. Seems to have stopped the virus,so far so good. I've been trying to get rid of the Microsoft spyware warning since yesterday, some 8 hrs of sheer frustration, as I couldnt open up computer all I got was the spyware notice (takes up half the screen) and a blue background...this is the first time I have been able to get on, I tried to reinstal XP pro but couldnt get into computer. Not sure if it will start up again, so I thought I might jump in now whilst I can.The microsoft warning says Win32/Adware.Virumonte and Win32/Privacy remover.M64 dsetected on your computer......I think the viruse/trojan might be fixed but the notice wont go and willnot respond to anything..Any advice.?
|
|
|
|
|
Logged
|
|
|
|
neonwizard
Management
Guru
Offline
Posts: 5227
imfndunn
|
 |
« Reply #5 on: August 26, 2008, 05:15:18 PM » |
|
Sounds like you have be infected with Vundo download and run http://vundofix.atribune.org/
|
|
|
|
|
Logged
|
|
|
|
bribiec
Addicted Member
Offline
Posts: 352
|
 |
« Reply #6 on: August 26, 2008, 06:51:32 PM » |
|
Thanks neon but came up al lclear with Vundo...Avast found the same trojan/virus and hopefully cleaned it out this time...Appears A5D54FOE39\Local Settings\temp infected by Win32"Trogan-gen{other} Anay more ideas??
|
|
|
|
|
Logged
|
|
|
|
neonwizard
Management
Guru
Offline
Posts: 5227
imfndunn
|
 |
« Reply #7 on: August 26, 2008, 06:57:54 PM » |
|
|
|
|
|
|
Logged
|
|
|
|
Jimbob
Management
Guru
Offline
Posts: 1924
Life's not a rehearsal.
|
 |
« Reply #8 on: August 26, 2008, 07:52:19 PM » |
|
That XP warning IS THE VIRUS ... follow Neons link to install Malwarebytes to clean it out ... a variant of this is Vista Antivirus and both are nasty buggers ... I have just had a few jobs to do myself cleaning up a few machines with them on ...
JIM
|
|
|
|
|
Logged
|
“Programmer (noun): An organism that can turn caffeine and alcohol into code.”
|
|
|
bribiec
Addicted Member
Offline
Posts: 352
|
 |
« Reply #9 on: August 27, 2008, 07:43:38 AM » |
|
Thank you both, hopefully all is well again...I ran Malwarebytes and it found 10 nasties...and the "Warning sign" has gone....so seems as if all is ok again..Thanks again..... Just a note...I am aware of NOT OPENING EMAILS" but this one was possibly for me...Just a warning to all not to open any unknown emails...Feel embarrassed as this would be the info I would give to someone else. Regards, Charlie.
|
|
|
|
|
Logged
|
|
|
|
Jimbob
Management
Guru
Offline
Posts: 1924
Life's not a rehearsal.
|
 |
« Reply #10 on: August 27, 2008, 09:37:23 AM » |
|
Glad you got it sorted .... but no need to be embarrassed as this one is a sneaky bugger and flys under the radar when it comes to scanning the file ...only when it's activated it go into action ...
JIM
|
|
|
|
|
Logged
|
“Programmer (noun): An organism that can turn caffeine and alcohol into code.”
|
|
|
|