944,103 Members | Top Members by Rank

Ad:
Dec 22nd, 2005
0

Trojan-Downloader.VBS.Psyme.v. virus

Expand Post »
Hi. I am new to the forum, but in desperate need of help. I ran a scan on my computer and it says that it is infected with the Trojan-Downloader.VBS.Psyme.v. virus. I forwarded it to the people I bought my anti-virus software from, but they didn't really help. I need to know how I can get this out of my computer. I found the file it was believed to be in, and I deleted it, but when I ran another scan, it is still showing it being there. Please Help!!!!!!!!!!!!!!
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
vterry is offline Offline
6 posts
since Dec 2005
Dec 22nd, 2005
0

Re: Trojan-Downloader.VBS.Psyme.v. virus

Quote originally posted by vterry ...
Hi. I am new to the forum, but in desperate need of help. I ran a scan on my computer and it says that it is infected with the Trojan-Downloader.VBS.Psyme.v. virus. I forwarded it to the people I bought my anti-virus software from, but they didn't really help. I need to know how I can get this out of my computer. I found the file it was believed to be in, and I deleted it, but when I ran another scan, it is still showing it being there. Please Help!!!!!!!!!!!!!!
Plz specify the Operating System and the antivirus ur using, so that it makes us easy to solve the problem.
And whenever u perform a Virus scan, do it in Safe mode and and b4 scanning disable system restore
Reputation Points: 11
Solved Threads: 14
Posting Whiz
jaishankar is offline Offline
317 posts
since Nov 2005
Dec 22nd, 2005
0

Re: Trojan-Downloader.VBS.Psyme.v. virus

I am using Windows ME and my virus software is Defender Pro 5 in 1 2005.
Reputation Points: 10
Solved Threads: 0
Newbie Poster
vterry is offline Offline
6 posts
since Dec 2005
Dec 23rd, 2005
0

Re: Trojan-Downloader.VBS.Psyme.v. virus

1. Did you try cleaning the infection by running Defender in Safe Mode as jaishankar suggested? Before going in to Safe Mode, use Defender's online update feature to make sure you have the absolutely most current virus detection database installed.


2.
Quote ...
I found the file it was believed to be in, and I deleted it, but when I ran another scan, it is still showing it being there.
Please tell us the exact name and location of the infected file.


3. Try at least two of the following sites for an online virus scan:

BitDefender Free Online Virus Scan
http://www.bitdefender.com/scan/licence.php
Make sure you tick AutoClean under Scan Options.

Panda ActiveScan
http://www.pandasoftware.com/active...n_principal.htm
Make sure you tick Disinfect automatically under Scan Options.

Housecall at TrendMicro
http://housecall.trendmicro.com/hou.../start_corp.asp
Make sure you tick Auto Clean.
When it completes, post back the full filename of any files that cannot be cleaned or deleted.

eTrust Antivirus Web Scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx


4. If the above suggestions don't solve the problem:

Download the (free) HijackThis utility.

Once downloaded, follow these instructions to install and run the program:

Create a folder for HJT outside of any Temp/Temporary folders and move/extract HijackThis to that folder now. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.

Run HijackThis, but do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...".
Save the log in the folder you created for HijackThis; the saved file will be named "hijackthis.log". Open the log file with Windows Notepad, and cut-n-paste the entire contents of the Notepad file here.

The log contents will tell us a lot about what "nasties" have crept into your system, and once we analyse the log we can tell you what to do from there.
DMR
Team Colleague
Reputation Points: 221
Solved Threads: 369
Wombat At Large
DMR is offline Offline
6,439 posts
since Dec 2003
Dec 23rd, 2005
0

Re: Trojan-Downloader.VBS.Psyme.v. virus

The file infected is C:\Windows\TemporaryInternetFiles\Content.IE5\8LIJC563\Track2[1].CHM/track2.htm . I tried running Defender in Safe Mode, and it says that my anti-virus data is corrupted, so I have recontacted Defender, no reply yet.
Reputation Points: 10
Solved Threads: 0
Newbie Poster
vterry is offline Offline
6 posts
since Dec 2005
Dec 23rd, 2005
0

Re: Trojan-Downloader.VBS.Psyme.v. virus

The Temporary Internet Files folder is just that- temporary; you can delete everything in those folders:

* Open your Internet Options control panel.
* In the General tab, click on the "Delete files..." button.
* In the resulting window, put a check mark in the "Delete offline content" box and then hit OK.
* The deletion may take a while, so be patient.

If Defender is giving you problems, try uninstalling it entirely and reinstalling it.
DMR
Team Colleague
Reputation Points: 221
Solved Threads: 369
Wombat At Large
DMR is offline Offline
6,439 posts
since Dec 2003
Dec 23rd, 2005
0

Re: Trojan-Downloader.VBS.Psyme.v. virus

Quote originally posted by vterry ...
The file infected is C:\Windows\TemporaryInternetFiles\Content.IE5\8LIJC563\Track2[1].CHM/track2.htm . I tried running Defender in Safe Mode, and it says that my anti-virus data is corrupted, so I have recontacted Defender, no reply yet.
U can also use some programs like Windows Washer to clean the temporary files

here is the link http://www.webroot.com/consumer/products/windowwasher/


If ur antivirus is corrupted, Use McAfee AVERT Stinger. A small utility which is capable of cleaning many Viruses. Download http://vil.nai.com/vil/stinger/ go to safe mode disable system restore and scan with it
Reputation Points: 11
Solved Threads: 14
Posting Whiz
jaishankar is offline Offline
317 posts
since Nov 2005
Dec 24th, 2005
0

Re: Trojan-Downloader.VBS.Psyme.v. virus

I think I was able to delete it when I deleted the temporary files, I had done this before, but didn't check to delete offline content as well. I ran another scan, and it didn't find anything. Thank you to all that contributed to helping me solve this.
Reputation Points: 10
Solved Threads: 0
Newbie Poster
vterry is offline Offline
6 posts
since Dec 2005
Dec 24th, 2005
0

Re: Trojan-Downloader.VBS.Psyme.v. virus

Quote originally posted by vterry ...
I think I was able to delete it when I deleted the temporary files, I had done this before, but didn't check to delete offline content as well. I ran another scan, and it didn't find anything. Thank you to all that contributed to helping me solve this.
Your welcome
Reputation Points: 11
Solved Threads: 14
Posting Whiz
jaishankar is offline Offline
317 posts
since Nov 2005

This thread is solved

Either the thread starter or a moderator has marked this thread as solved. You can most likely trust the responses and answers given. There is most likely no reason for any further responses to be posted here. If you have a related question, please start a new thread in this forum instead.

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Viruses, Spyware and other Nasties Forum Timeline: Corrupted startup files
Next Thread in Viruses, Spyware and other Nasties Forum Timeline: HackTool.Rootkit virus - Help Needed





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC