bizare virus...I dont know where to start

Reply

Join Date: Dec 2008
Posts: 10
Reputation: techgirl2009 is an unknown quantity at this point 
Solved Threads: 0
techgirl2009 techgirl2009 is offline Offline
Newbie Poster

bizare virus...I dont know where to start

 
0
  #1
Dec 28th, 2008
hi!

My husband downloaded some songs from Limewire on his DELL PC (stupid, I know) about two weeks ago and then all hell broke loose.

I am not able to get online with the DELL computer to DL any malware/spyware or use Trendmicro. He is running Symantec and a REALLY old version of McAfee. Both have seens been unhelpful at identifying the issue.

I tried to restore the computer and it told me that it was not able to restore to that point and to pick another one...which I did, and nothing happened. (told me to pick another one again)
I then tried to reformat the PC using the WIN XP Boot Disk, and the CD drive won't reconize it. (?!?)

I really don't know where to start since I am unable to get online with it (it wont reconize our network) to do a diagnostic.

I have "shown hidden files" and stopped system restore.

The last virus scan that we were able to successfully complete showed something like w32.irc.bot or w32.bot as the name of the virus. (My husband didn't write it down, sorry)

Any help ideas on what could be going on, or how to start on this would be great!!
Reply With Quote Quick reply to this message  
Join Date: Sep 2008
Posts: 331
Reputation: freshfitz is an unknown quantity at this point 
Solved Threads: 27
freshfitz freshfitz is offline Offline
Posting Whiz

Re: bizare virus...I dont know where to start

 
0
  #2
Dec 28th, 2008
You got yourself into a real mess! Symantec and Mcafee won't clean these types of malwares. You need to download malware bytes onto a usb stick and ccleaner load them on the dell via a usb stick. That should clean alot of it out if you still can't get online, you have a problem where the malware is doing something called dns spoofing which the malware bytes may not clean if you still can't get on any websites google dns spoof fix. I had this happen and it was a pain in the a$$ to clean, but I did find a program to fix it
Reply With Quote Quick reply to this message  
Join Date: Jul 2008
Posts: 2,923
Reputation: jholland1964 is a name known to all jholland1964 is a name known to all jholland1964 is a name known to all jholland1964 is a name known to all jholland1964 is a name known to all jholland1964 is a name known to all 
Solved Threads: 167
Moderator
Featured Poster
jholland1964 jholland1964 is offline Offline
Posting Maven

Re: bizare virus...I dont know where to start

 
0
  #3
Dec 28th, 2008
#1 here is that you never have two anti-virus programs on one computer. This would be one reason neither work correctly and your protection was lowered. If both are old then uninstall both. If one is current then keep that one and totally Uninstall the expired one.
Then try the steps HERE, with the exception of Deckard Scanner as it is not available. Substitute instead HiJackThis.
Follow all steps if possible and then post back with the logs.
If you know that these downloads from Limewire were the culprits then uninstall those, and Limewire as well.
Judy
Last edited by jholland1964; Dec 28th, 2008 at 11:59 am.
Reply With Quote Quick reply to this message  
Join Date: Dec 2008
Posts: 10
Reputation: techgirl2009 is an unknown quantity at this point 
Solved Threads: 0
techgirl2009 techgirl2009 is offline Offline
Newbie Poster

Re: bizare virus...I dont know where to start

 
0
  #4
Dec 29th, 2008
thank you both for your suggestions!

The USB driver is a great idea...I will definatly do that.

I un-installed LIMEWIRE and any other strange programs he had and it did help a little, before it would not even let me log onto his name- we had to go under mine and then 'switch user'

I will un-install the McAfee and probably the symantec too...since I think they are both crap personally.

I will try all that then post and let u know if it worked...if I ever get this mess cleaned up what type of programs should I get to keep it from happening before...I already have the TrendMicro virus scan, Spybot and Ad-aware (only my on PCs). Are they're any newer/better ones out there??

Also- my VAIO came with Window One Livecare or something like that...is it any good? Thanks again
Reply With Quote Quick reply to this message  
Join Date: Aug 2003
Posts: 9,541
Reputation: caperjack is a splendid one to behold caperjack is a splendid one to behold caperjack is a splendid one to behold caperjack is a splendid one to behold caperjack is a splendid one to behold caperjack is a splendid one to behold caperjack is a splendid one to behold 
Solved Threads: 492
Team Colleague
caperjack's Avatar
caperjack caperjack is offline Offline
Posting Prodigy

Re: bizare virus...I dont know where to start

 
0
  #5
Dec 29th, 2008
Originally Posted by techgirl2009 View Post
Are they're any newer/better ones out there??
Yes , Superantispyware and malwarebytes.. link to both in my signature and also spywareblaster ,it doesn't do a scan but adds bad sites to IE and Firefox security sections ,so install it and keep it upto date .
Reply With Quote Quick reply to this message  
Join Date: Dec 2008
Posts: 10
Reputation: techgirl2009 is an unknown quantity at this point 
Solved Threads: 0
techgirl2009 techgirl2009 is offline Offline
Newbie Poster

Re: bizare virus...I dont know where to start

 
0
  #6
Jan 1st, 2009
I successfully loaded Malwarebytes and CCleaner on the DELL and it found 24 (!) Malwares, mostly Trojan.Zlob and one Backdoor

the DELL froze during the Quarantin and I had to Ctrl+Alt+Delete to get out of Malwarebytes after the scan was finished and now the PC is really acting screwy...the control pannel won't populate and still no luck with iexplorer.

I'm still trying some other options to least get it online and DL some more programs...buts thats where I am now
Reply With Quote Quick reply to this message  
Join Date: Sep 2008
Posts: 331
Reputation: freshfitz is an unknown quantity at this point 
Solved Threads: 27
freshfitz freshfitz is offline Offline
Posting Whiz

Re: bizare virus...I dont know where to start

 
0
  #7
Jan 1st, 2009
Some of the bad malwares replace vaild windows files and you have to end up reloading windows. You can try start menu run type in cmd press enter type in sfc /scannow which will run a scan and make sure all the operating system files are valid Microsoft one's
Reply With Quote Quick reply to this message  
Join Date: Sep 2008
Posts: 331
Reputation: freshfitz is an unknown quantity at this point 
Solved Threads: 27
freshfitz freshfitz is offline Offline
Posting Whiz

Re: bizare virus...I dont know where to start

 
0
  #8
Jan 1st, 2009
The control panel icon are links to .cpl files look in /windows/system32 and see if the files are still there if they are then the malware hid the icons in the registry or in the group policy
http://support.microsoft.com/kb/313808

So you still can't get online can you ping a website?
Last edited by freshfitz; Jan 1st, 2009 at 10:20 am.
Reply With Quote Quick reply to this message  
Join Date: Dec 2008
Posts: 10
Reputation: techgirl2009 is an unknown quantity at this point 
Solved Threads: 0
techgirl2009 techgirl2009 is offline Offline
Newbie Poster

Re: bizare virus...I dont know where to start

 
0
  #9
Jan 1st, 2009
I ran CCleaner again and did the registry fix and it fixed a 'whole bunch' of things and now I can at least get into control pannel to add/remove programs. at this point I really have no idea what I am doing and just following ya'll suggestions.

seems like I am getting control back one baby step at a time though!
Reply With Quote Quick reply to this message  
Join Date: Dec 2008
Posts: 10
Reputation: techgirl2009 is an unknown quantity at this point 
Solved Threads: 0
techgirl2009 techgirl2009 is offline Offline
Newbie Poster

Re: bizare virus...I dont know where to start

 
0
  #10
Jan 1st, 2009
Originally Posted by freshfitz View Post
Some of the bad malwares replace vaild windows files and you have to end up reloading windows. You can try start menu run type in cmd press enter type in sfc /scannow which will run a scan and make sure all the operating system files are valid Microsoft one's
I am doing that right now and its telling me that the DLL Cache is missing...I have my Win XP reinstallation CD and its not doing anything when I put it in.

Can I just reformat this thing and be done with it?!?!
Reply With Quote Quick reply to this message  
Reply

This thread is more than three months old.
Perhaps start a new thread instead?
Message:



Other Threads in the Viruses, Spyware and other Nasties Forum
Thread Tools Search this Thread



About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC