•
•
•
•
What is DaniWeb IT Discussion Community?
You're currently browsing the Windows NT / 2000 / XP / 2003 section within the Tech Talk category of DaniWeb, a massive community of 423,101 software developers, web developers, Internet marketers, and tech gurus who are all enthusiastic about making contacts, networking, and learning from each other. In fact, there are 4,377 IT professionals currently interacting right now! Registration is free, only takes a minute and lets you enjoy all of the interactive features of the site.
Please support our Windows NT / 2000 / XP / 2003 advertiser: Programming Forums
Views: 870 | Replies: 7
![]() |
•
•
Join Date: Jul 2008
Posts: 2
Reputation:
Rep Power: 0
Solved Threads: 0
Hi anyone else been hit by this massive virus that takes over admin. duties on your cpu? I got most of the bad stuff out with Nortons and spyware doctor. But can seem to get full control of my cpu like I cant go into my program files or my hard drives or even just my screensavers. Need help bad. anyone face this monster? Thanks
Did it change your desktop telling you to 'click here to remove virus'.....that is the one I battled for a while. I ran norton 360, then trend micro house call to finally be rid of it. But is sounds like the same thing....you might also need to run reg cure, or reg fixer afterward.....good luck!
"If we never take time, how can we have time?" --Merovingian~The Matrix
Intel Quad Core2 Ext. QX6700;GeForce 8800 GTX 768MB
3gig Corsair DDR3 1800 w/heatsink;500GB HD x2;BigWater 760i
Intel Quad Core2 Ext. QX6700;GeForce 8800 GTX 768MB
3gig Corsair DDR3 1800 w/heatsink;500GB HD x2;BigWater 760i
•
•
Join Date: May 2005
Posts: 2,688
Reputation:
Rep Power: 9
Solved Threads: 138
This will clean some generally attacked sites in your machine and reset to defaults some files and registry data...
==Download SDFix from here: http://downloads.andymanchesta.com/R...ools/SDFix.exe
and save it to your desktop. Dclick SDFix.exe and choose Run to extract it to %systemdrive%, which commonly will be C:\
** ==Download this temp file cleaner from http://www.atribune.org/ccount/click.php?id=1 --click in the download window to run it, and when ATF Cleaner opens go Select all, and then Empty Selected.
Next click Firefox [if you have that browser..] at the top, Select All again, and Empty Selected again. Follow that procedure also if you have Opera.
Close ATF. Run ATF in any other accounts.
=You must restart your computer in Safe Mode:
- press F8 several times while POST is running and before IDE detection completes.
- On the Windows Advanced Options Menu, select Safe Mode and press Enter.
- When the Boot Menu appears again, select Microsoft Windows XP and press Enter.
- Log in by using the Administrator account and password. NOTE: The password is blank by default unless you set a password.
=Open the extracted SDFix folder, C:\SDFix and double click RunThis.bat to start the script. Type Y to begin the cleanup.
You will be prompted to press any key to Reboot - the pc will then restart.
The tool will run again and complete the removal process then display Finished; press any key to end the script and load your desktop icons.
Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt.
Restart the pc in normal mode. Post the contents of the file Report.txt here, along with the log of a fresh hijackthis scan run in normal mode.
==Download SDFix from here: http://downloads.andymanchesta.com/R...ools/SDFix.exe
and save it to your desktop. Dclick SDFix.exe and choose Run to extract it to %systemdrive%, which commonly will be C:\
** ==Download this temp file cleaner from http://www.atribune.org/ccount/click.php?id=1 --click in the download window to run it, and when ATF Cleaner opens go Select all, and then Empty Selected.
Next click Firefox [if you have that browser..] at the top, Select All again, and Empty Selected again. Follow that procedure also if you have Opera.
Close ATF. Run ATF in any other accounts.
=You must restart your computer in Safe Mode:
- press F8 several times while POST is running and before IDE detection completes.
- On the Windows Advanced Options Menu, select Safe Mode and press Enter.
- When the Boot Menu appears again, select Microsoft Windows XP and press Enter.
- Log in by using the Administrator account and password. NOTE: The password is blank by default unless you set a password.
=Open the extracted SDFix folder, C:\SDFix and double click RunThis.bat to start the script. Type Y to begin the cleanup.
You will be prompted to press any key to Reboot - the pc will then restart.
The tool will run again and complete the removal process then display Finished; press any key to end the script and load your desktop icons.
Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt.
Restart the pc in normal mode. Post the contents of the file Report.txt here, along with the log of a fresh hijackthis scan run in normal mode.
Deep, deep in the woods, but walking about.
•
•
•
•
Did it change your desktop telling you to 'click here to remove virus'.....that is the one I battled for a while. I ran norton 360, then trend micro house call to finally be rid of it. But is sounds like the same thing....you might also need to run reg cure, or reg fixer afterward.....good luck!
Where are these?
Daylight-saving time uses more gasoline
If you go to the Trend Micro website, you can access their free online tool named "house call". It is a good one to run......Norton 360 is a bought software set, and do a search online for a registry cleaner or fixer, and you can choose which one is best for you. Let me know if you have any questions.....Have a great day!
"If we never take time, how can we have time?" --Merovingian~The Matrix
Intel Quad Core2 Ext. QX6700;GeForce 8800 GTX 768MB
3gig Corsair DDR3 1800 w/heatsink;500GB HD x2;BigWater 760i
Intel Quad Core2 Ext. QX6700;GeForce 8800 GTX 768MB
3gig Corsair DDR3 1800 w/heatsink;500GB HD x2;BigWater 760i
I have found a "Cocktail" solution that has proven to be very affective for me. At the university helpdesk I cover, we have students bring in machines with more crap on them than you can imagine.
I can't take credit for this, but I do champion this approach.
There are four programs you will need. It's late and I'm rushed, so I apologize for not posting the urls to them. Get these four programs and have them in a folder on your flash drive so you can just drop it on the desktop of the hosed computer.
1. ComboFix This is one of the best programs I have ever found. Though some of the latest crapware can bypass it, I still start with it. ComboFix must have been written by one of the best hackers in the world. The program will expire after a week and you have to re-download it again. IF expired it will delete itself or it will spoof a virus for the AV to get it. Genius.
2. SuperantiSpyware (this is also on the Ultimate Boot CD).
3. CCleaner
4. Malwarebytes Antimalware program.
Now, with the folder on the hosed computer, Run ComboFix first. It will kill Explorer, reset the clock and couple of other things. It may require a reboot also. Just stand back and don't touch the computer until you see the Text Log.
Install CCleaner, but don't run it.
Next install & update SuperantiSpyWare. Run it and it will need to reboot.
If you get a blue screen, boot safe mode and run CCleaner.
After running Super, now install, update and Run Antimalware program.
This will cure what ales you, at least it does for 99%+ for me.
Good Luck!
~td99
I can't take credit for this, but I do champion this approach.
There are four programs you will need. It's late and I'm rushed, so I apologize for not posting the urls to them. Get these four programs and have them in a folder on your flash drive so you can just drop it on the desktop of the hosed computer.
1. ComboFix This is one of the best programs I have ever found. Though some of the latest crapware can bypass it, I still start with it. ComboFix must have been written by one of the best hackers in the world. The program will expire after a week and you have to re-download it again. IF expired it will delete itself or it will spoof a virus for the AV to get it. Genius.
2. SuperantiSpyware (this is also on the Ultimate Boot CD).
3. CCleaner
4. Malwarebytes Antimalware program.
Now, with the folder on the hosed computer, Run ComboFix first. It will kill Explorer, reset the clock and couple of other things. It may require a reboot also. Just stand back and don't touch the computer until you see the Text Log.
Install CCleaner, but don't run it.
Next install & update SuperantiSpyWare. Run it and it will need to reboot.
If you get a blue screen, boot safe mode and run CCleaner.
After running Super, now install, update and Run Antimalware program.
This will cure what ales you, at least it does for 99%+ for me.
Good Luck!
~td99
Last edited by tripperdan99 : Jul 26th, 2008 at 4:45 am. Reason: typo
Most people are on a journey to nowhere in particular and are shocked when they eventually realize they've arrived there.
---- Chris Green
---- Chris Green
![]() |
•
•
•
•
•
•
•
•
DaniWeb Windows NT / 2000 / XP / 2003 Marketplace
•
•
•
•
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
- Virus Alert! icon in the Notification Bar <<HELP>> (Viruses, Spyware and other Nasties)
- Virus alert! icon in sytem try maybe spyfalcon (Viruses, Spyware and other Nasties)
- Virus Alert Icon in System Tray HELP! (Viruses, Spyware and other Nasties)
- virus alert notification icon (help) (Viruses, Spyware and other Nasties)
- I get a "virus Alert" in toolbox (Viruses, Spyware and other Nasties)
- Virus alert notification (Viruses, Spyware and other Nasties)
- Virus ALert! (Viruses, Spyware and other Nasties)
Other Threads in the Windows NT / 2000 / XP / 2003 Forum
- Previous Thread: Keyboard not recognized; Mouse disabled
- Next Thread: Sound Recorder not picking voice



Linear Mode