Computer Help!!!!
 

So my Dell laptop, 1515 Insiperion (sp) has this spyware/virus that keeps making my computer go to a anti-spyware software site. It also blocks some functions on my computer like add and remove programs, EI, etc... Ialso get a punch of pop ups that look like windows.

I can still surf the web with Firefox though.


I totally use this computer for nothing more then surfing the web. Has nothing saved on it. So if wiping it clean is the option I am cool with that but don't know how to do it.

IF anyone can help be much appreciated I don't want to give Dell $129 to fix it if I don't have too.

Re: Computer Help!!!!
 

I had one bug that kept popping up like it was an antivirus program, took me about 2-3hours one morning but finally found a program malwarebytes that downloaded and installed even with that pain in the butt bug. It ran its scan and did a good job of cleaning it up. the malwarebytes download was free, and didn't give me any other side effect issues. here is the link to their site if you want to try it [url=http://www.malwarebytes.org/]Malwarebytes.org[/url].

Re: Computer Help!!!!
 

I use that program too, seems to do a good job ^^

Re: Computer Help!!!!
 

Ok thanks, I will give it a shot.

I think I have Anti-Virus 2009 spyware.

Re: Computer Help!!!!
 

Honestly, Malwarebytes might have trouble installing if you have one of the nastier viruses.

Download a program called Combofix and save it to your desktop. Rename it something totally different, and then run it. Basically 90% of my day consists of cleaning this type of crap up lately. It's an epidemic. I also read that 80% of this crap comes from PDFs, so I would update Adobe Reader immediately.

Re: Computer Help!!!!
 

After running Combofix (preferably in safe mode) then run Malwarebytes to remove the remnants.

Re: Computer Help!!!!
 

Ok lots of good stuff. Again thanks to all!

Re: Computer Help!!!!
 

Combofix looks pretty intensive. I have downloaded it for a just in case scenario, thanks TMC

here is a link to the instructions:[url=http://www.bleepingcomputer.com/combofix/how-to-use-combofix]A guide and tutorial on using ComboFix[/url]

Re: Computer Help!!!!
 

[quote=TheMalcolmConnection;664725]Honestly, Malwarebytes might have trouble installing if you have one of the nastier viruses.

Download a program called Combofix and save it to your desktop. Rename it something totally different, and then run it. Basically 90% of my day consists of cleaning this type of crap up lately. It's an epidemic. I also read that 80% of this crap comes from PDFs, so I would update Adobe Reader immediately.[/quote]

There is an Adobe Reader update available now.

Re: Computer Help!!!!
 

[quote=Longtimefan;664730]There is an Adobe Reader update available now.[/quote]

Yeah, I had to LOL at that yesterday.

Basically, I run a server here that allows remote installs to the whole campus and I JUST finished installing Reader 9.3.0 and then they come out with a security update to go to 9.3.1. :doh:

Re: Computer Help!!!!
 

[quote=CRedskinsRule;664729]Combofix looks pretty intensive. I have downloaded it for a just in case scenario, thanks TMC

here is a link to the instructions:[URL="http://www.bleepingcomputer.com/combofix/how-to-use-combofix"]A guide and tutorial on using ComboFix[/URL][/quote]

It's an intensive cleaning process but it's actually very easy to use.

Re: Computer Help!!!!
 

I used ComboFix a few weeks back but I'm still getting warnings from Avira here and there. I can't tell if it's something being blocked internally or externally.

Re: Computer Help!!!!
 

[quote=Mattyk;664734]I used ComboFix a few weeks back but I'm still getting warnings from Avira here and there. I can't tell if it's something being blocked internally or externally.[/quote]

Did you run Malwarebytes after? I find that while the .exe files that caused the initial problem aren't running, the remnants of junk are still there and either Malwarebytes or SUPERAntispyware will get the rest...

Re: Computer Help!!!!
 

Yes I did run MWB after, I'll post the warning message next time it pops up

Re: Computer Help!!!!
 

[url=http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2004-112111-3912-99&tabid=3]Trojan.Vundo Removal - Removing Help | Symantec[/url] ........... [url=http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam]Disabling or enabling Windows XP System Restore[/url] .... [url=http://www.pchell.com/virus/bloodhound.shtml]PC Hell: What is the Bloodhound.Exploit.6 and How Do You Remove it[/url]. The links might not be exactly what you are dealing with , but might help going into safe mode and finding the virus , and disable or remove it . Looks like TMC has what you need , good luck .

Re: Computer Help!!!!
 

Seems like Avira is blocking whatever remnants are left so it's not connecting to what it needs to in order to function, the warning messages are just annoying.

Re: Computer Help!!!!
 

[quote=Mattyk;664743]Seems like Avira is blocking whatever remnants are left so it's not connecting to what it needs to in order to function, the warning messages are just annoying.[/quote]

That's really odd to me. It looks like it opened some backdoors for future viruses. I mean obviously it's blocking them but I would be concerned about that for the future. Try SUPERAntispyware and see how that goes...

Re: Computer Help!!!!
 

Thanks I'll give it a try

Re: Computer Help!!!!
 

[quote=Mattyk;664743]Seems like Avira is blocking whatever remnants are left so it's not connecting to what it needs to in order to function, the warning messages are just annoying.[/quote]
I got vundo on my who gives a crap computer not too long back.. 6 months or so when the new strain was fresh.. I'm not sure if it was the only thing, but it was the major thing

interesting thing was that it was injecting iframes into all of my html, php, etc documents so if I opened up any web project that I had on there it'd be invisibly running the script from that iframe (which doesn't show).. so it would try to respawn itself after the virus itself was removed

If I deleted it out of a file I could save the code and by the time I re-opened the file it was already back in there, several times over...

ended up finding a program that'd search through files and change strings of text and did that through about 400 pages of stuff

Re: Computer Help!!!!
 

[quote=TheMalcolmConnection;664725]Honestly, Malwarebytes might have trouble installing if you have one of the nastier viruses.

Download a program called Combofix and save it to your desktop. Rename it something totally different, and then run it. Basically 90% of my day consists of cleaning this type of crap up lately. It's an epidemic. I also read that 80% of this crap comes from PDFs, so I would update Adobe Reader immediately.[/quote]


It won't allow me to run combofix, any other ideas? It is download but every time I try to run it gives me an error message.

Re: Computer Help!!!!
 

Did you try running it in safe mode.

Re: Computer Help!!!!
 

Actually I got it to run.

How do you get in safe mode for future reference?

Re: Computer Help!!!!
 

Symentac Antivirus I believe finally found it and deleted it.

Re: Computer Help!!!!
 

[quote=mredskins;665013]Actually I got it to run.

How do you get in safe mode for future reference?[/quote]
This should help you get into safe mode [url=http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406?OpenDocument&src=sec_doc_nam]Starting your computer in Safe mode[/url] [url=http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2004-112111-3912-99&tabid=3]Trojan.Vundo Removal - Removing Help | Symantec[/url] . I would copy these instructions , or write them down before going into safe mode . Might find some info on Microsofts website ? Good luck .

Re: Computer Help!!!!
 

Sounds to me like you ended up with Security Tool. It's a pesky f**ker. I had it before. Same exact symptoms. IE didn't work, I could surf through firefox, but the virus pretended to be anti-spyware software, all the while drastically bogging down my system. I think it comes in trojan horse style. I ended up deleting some individual registry items that it planted in my computer, and AVG anti-virus ended up cleaning up the rest. Google "security tool" and you'll find some removal tips.

Re: Computer Help!!!!
 

Yeah everything removed was Trojan this Trojan that. So f--king annoying glad it is gone.

Re: Computer Help!!!!
 

[quote=GMScud;665026]Sounds to me like you ended up with Security Tool. It's a pesky f**ker. I had it before. Same exact symptoms. IE didn't work, I could surf through firefox, but the virus pretended to be anti-spyware software, all the while drastically bogging down my system. I think it comes in trojan horse style. I ended up deleting some individual registry items that it planted in my computer, and AVG anti-virus ended up cleaning up the rest. Google "security tool" and you'll find some removal tips.[/quote]

That's the one I had. What a pain in the a**. It was Christmas eve morning, and I spent a couple hours at least working on it.

Glad you got it cleaned up mredskins!

Re: Computer Help!!!!
 

You could just buy a MacBook and be done with it

Re: Computer Help!!!!
 

[quote=WaldSkins;665043]You could just buy a MacBook and be done with it[/quote]

EXACTLY!! problems solved

Re: Computer Help!!!!
 

I'm going to seriously consider a mac for my next pc purchase

Re: Computer Help!!!!
 

Windows 7 has been extremely stable in our tests. Our benchmarks have it going faster than a MacBook and even faster than Windows XP. We've had the discussion of PC versus Mac before, but no matter what, you'll eventually wind up with a program that you wish would run, but can't because it's a Mac.

I use them both daily and they're both fine machines, but PCs are not only cheaper, they're still the market leader and most software is written for them. Sure, I do IT stuff as a career, but I've never had a virus before. It's really just about being cautious where you browse.

Stay off those porn sites. ;)

Re: Computer Help!!!!
 

[quote=mredskins;665005]It won't allow me to run combofix, any other ideas? It is download but every time I try to run it gives me an error message.[/quote]
Yeah, same thing on the one I had, it's getting corrupted by the virus

try using a boot disk like avira's to help clean it up initially

Re: Computer Help!!!!
 

If you're looking for any other ideas maybe it's time to toss Windows and its anti-viruse software out of a proverbial window and go with [URL="http://www.ubuntu.com/products/whatisubuntu/910features"]Ubuntu[/URL]?

Proud to be Windows free for 7 years.

Re: Computer Help!!!!
 

[quote=TheMalcolmConnection;664759]That's really odd to me. It looks like it opened some backdoors for future viruses. I mean obviously it's blocking them but I would be concerned about that for the future. Try [B]SUPERAntispyware[/B] and see how that goes...[/quote]

Ran it and it only found 1 tracking cookie. I haven't gotten any warnings in a few days since my last full MWB scan so perhaps I'm in the clear. We'll see.

Re: Computer Help!!!!
 

[quote=saden1;665075]If you're looking for any other ideas maybe it's time to toss Windows and its anti-viruse software out of a proverbial window and go with [URL="http://www.ubuntu.com/products/whatisubuntu/910features"]Ubuntu[/URL]?

Proud to be Windows free for 7 years.[/quote]

I feel the same way about Linux as I do about Mac, except I like it a little more. It's free and you can do "most" of the things that you can do on both PC or Apple. The reason I still stick with PC is the reason I said above: market leader.

As long as the majority of activities that I do are written with PCs in mind, that's the OS I want to stick with.


And Matty, I would say that's probably true. If you start seeing messages again, I would be a little concerned about a rootkit, but it sounds like it's all clear.

Re: Computer Help!!!!
 

[quote=tryfuhl;665073]Yeah, same thing on the one I had, it's getting corrupted by the virus

try using a boot disk like avira's to help clean it up initially[/quote]

If you have that issue, you just have to rename the .exe file. Most of the Vundo variants block programs from running until you rename them.

Re: Computer Help!!!!
 

Wow I am in!

Re: Computer Help!!!!
 

[quote=TheMalcolmConnection;665087]If you have that issue, you just have to rename the .exe file. Most of the Vundo variants block programs from running until you rename them.[/quote]


I did rename it and still had trouble getting it to run.

Re: Computer Help!!!!
 

I'm a big advocate of SUPERAntispyware now after using it on a client's PC not long ago. Runs right from a Thumb Drive, so no installation on the host machine and does a great job cleaning stuff up. I have SUPERAntispyware, MalwareBytes, HiJackThis and Spybot on a small (64MB!) thumb drive that I use to help clean up messes.

Although, the only safe way to make sure the virus is 100% gone is to wipe and reinstall...

Re: Computer Help!!!!
 

[quote=BDBohnzie;665194]I'm a big advocate of SUPERAntispyware now after using it on a client's PC not long ago. Runs right from a Thumb Drive, so no installation on the host machine and does a great job cleaning stuff up. I have SUPERAntispyware, MalwareBytes, HiJackThis and Spybot on a small (64MB!) thumb drive that I use to help clean up messes.

Although, the only safe way to make sure the virus is 100% gone is to wipe and reinstall...[/quote]

Here's a new tool that works in conjuction with that and MWB. It's called rkill.exe and it's on the BleepingComputer website and it basically kills all known annoying fake antivirus products and prevents them from running while you run programs to fix them.