Virus/Spyware

[Daolas]

Starting a little while ago, I noted that as my computer was booting up, a screen popped up to install an unknown program. I of course closed it down and immediately ran Lavasoft, Spybot and did a virus scan. I removed various bits of Spyware, found no viruses and then re booted. The same screen popped up again. I tried CTRL-ALT-Delete to open the task manager to close the screen that way, but it's not working. It also seems that REGEDIT isn't working either. Upon trying to open regedit, I get a dos screen that pops up for about 1 second, then goes away.


I'm gonna update everything. Boot to safe mode and re-run the scans...... Anyone have any further ideas?

Thanks

Daolas

 

[flawed_ethics]

I imagine you already have done this, but in case you haven't, make note of the name of the program that is popping up. I would go by the name given from the Task Manager (Ctrl-Alt-Del). Jump online and do a search for it. Someone somewhere must have a notice of what the program is, what it does, how it does it and how to get rid of it. You shouldn't have to buy anything to get rid of it, although a lot of sites will (of course) push their products on you to get you to do so.

Sounds like a virus to me. Good luck man.

 

[Weird Harold]

It also seems that REGEDIT isn't working either. Upon trying to open regedit, I get a dos screen that pops up for about 1 second, then goes away.

Try a third-party registry editor like Norton's Registry Editor or Regcleaner -- the latter is a free download available from several download sites.

the disabling of the Ctrl-Alt-Del menu makes this sound like a virus rather than spyware so you should update your virus definitions and run a complete virus scan -- or go to trendmicro's housecall and scan your system from there.

 

[Daolas]

Thanks

Thanks all,

I found a reference to a virus that caused my symptoms. I downloaded a "shot in the arm" from Symantec for that particular virus. Virus 0, Daolas 1.

It's particularly odd though. I haven't downloaded anything recently that have contained a virus and i always keep my Antivirus software updated. Anyways. Thanks again.

Daolas

 

[silverwhisper]

daolas, does anybody else have access to your machine? also, norton is good but it does miss stuff periodically, and a number of viruses specifically target NAV, given its prevalence.

how often do you run your updates? also, if you're using broadband, what about firewalls/routers, etc.?

ed

 

[CuriousRed]

My first post on the wonderful board and it has nothing to do with sex!

anyhow, I run ZoneAlarm, Windows Firewall, Microsoft AntiSpyare, I have Spyware Guard and I scan with Hijack This and Spybot Search and destroy; all the while running NOD 32 anti virus. Ya know what? My browser got hijacked. I could not get it off for nothing. I did the regedit and all sorts of stuff, but I found out why. It was "drvwarnhide.exe" and it got saved in a folder that was wierd. It would change my search settings and I would catch ALL the changes in the registry and in other places but they would always come back. Then my uncle (computer guy for living) saw it on a big search and I nuked it and it was fixed. Well, no nuking, just a delete but it worked.

All that defense and it still got in!!

Glad you got it worked out!!!!

 

[corkscrewer]

I would do a hjackthis scan and then remove only the items that a professional sayas to. Dont deleate other things, they could be important or harmless.