virus/trojan/registry values screwed up Options
ahhhh_crap
#1 Posted: : Friday, November 21, 2008 8:40:56 PM
Rank: Polio Power!



Groups: Registered User, Server Admin

Joined: 6/14/2008
Posts: 666
Points: 1,416
Location: San Diego

So I somehow got a bogus program called xp antispyware 2009 that has infected pretty far into the system. Right now it prevents any internet browing via redirects, is somehow locked into the taskbar, prevents system restores, etc etc. Sounds like it's essentially in the registry keys and if deleted, is respawning itself prior to a reboot and full removal. Now I currently use PC tools spyware doctor and PC-cillin anti-virus along with AD-aware as a combo pack. All of these programs recognize and claim to delete the trojan/virus/false program, and yet it's alive each time I reboot.

 This is sucking on a major level as the comp is essentialy worthless. I only have the one comp, so I don't have a way to research ways to remove online as I can only currently go directly to websites I know of, and if I click an html link I'm redirected to a spam site.

 

 Any help would be much appreciated!

HolyJaw
#2 Posted: : Friday, November 21, 2008 9:54:20 PM
Rank: Fecal Impaction For the Win!

Groups: Ogamer, Registered User

Joined: 5/9/2006
Posts: 1,666
Points: 2,478
Location: La Habra, Orange, CA
Ugh, you've been thinking it so I"ll say it.

It sounds like a mess like that can really only be fully treated with a reinstall. Any fixes may leave small fuckups here and there... just not worth it.
silverwasp wrote:
Be careful what you wish for... I have 10 younger siblings and I am only 20....

Yes.... Same parents


WarMachine wrote:
meh...maybe if he hadn't been handed a burning house he could have done great things, but right now he has won the Prize for what? Damage Control?
virus
#3 Posted: : Friday, November 21, 2008 9:58:20 PM
Rank: Fuckstick



Groups: {pDs} Member, Registered User

Joined: 1/14/2008
Posts: 984
Points: 1,856
Location: Michigan
Wipe the hard drive and start over.   I had the same virus and nothing else worked.  I hope you backed up your data because it's gone.
"I love the smell of napalm in the morning. Smells like ... victory"
Quote:
Murdy
#4 Posted: : Saturday, November 22, 2008 1:31:44 AM
Rank: Polio Power!


Groups: {pDs} Member, Registered User, WDFNews.com Official Mapper

Joined: 5/10/2006
Posts: 666
Points: 54
Location: Mapping hell

you have to clean your registry on startup befor window fully start. i uesd killbox , spybot, norton and hijackthis. if i didnt have data i needed a full wipe wound have been the eazy way to go.

you also need to konw all the registry keys its uesing to kill the sucker

Yes its time again to Play WTF did Murdy Just type
Robot Hell is real and i cant spell

yes im dyslexic
WDF? wrote:
lol fuck you, Murdy.

BadHorsie wrote:
I love it!
bragr
#5 Posted: : Saturday, November 22, 2008 2:20:33 AM
Rank: Administration



Groups: Server Admin, Administration, {pDs} Member, Registered User

Joined: 11/19/2008
Posts: 1,014
Points: 2,767

ahhhh_crap wrote:

So I somehow got a bogus program called xp antispyware 2009 that has infected pretty far into the system. Right now it prevents any internet browing via redirects, is somehow locked into the taskbar, prevents system restores, etc etc. Sounds like it's essentially in the registry keys and if deleted, is respawning itself prior to a reboot and full removal. Now I currently use PC tools spyware doctor and PC-cillin anti-virus along with AD-aware as a combo pack. All of these programs recognize and claim to delete the trojan/virus/false program, and yet it's alive each time I reboot.

 This is sucking on a major level as the comp is essentialy worthless. I only have the one comp, so I don't have a way to research ways to remove online as I can only currently go directly to websites I know of, and if I click an html link I'm redirected to a spam site.

 

 Any help would be much appreciated!

Ah... XP antispyware 2009.... my old friend... Also know as XP Antivirus 2007, Vista Antivirus 2008, and so on. I have alot of customers that get this bastard, and what an incidious bastard it is. It gets through corporate firewalls, blacklist, group policies, and corperate antivirus. As bad as it seems though, its really not that bad. I've litterally removed it 100 times atleast.

All it does it pester you until you give them your credit card number. From there, I don't know if they steal your info or just take $50 like they say and have the program stop pestering you. Either way, it doesn't really matter. Your regular antiviurs won't take care of it for fear of lawsuits, because on the site you got if from, the was an EULA which basically allowed them to install it. And the stuff it finds when it "scans" are real too (though it put them there).

What you need is a community produced tool. I would recomend Spybot, which is one of the most used, and comprehensive tool, used even in the commercial sector. Make sure to download the deffs from the site too as XPAS09 make block the built in updater. A couple passes and restarts should clean it all out. If you are worried about any lingering registry problems download and run Eusing Free Registry which should clean everything up.

Don't worry, what you have really isn't that bad as far as infections go, its just really visible.

If you have any questions or difficulties, let me know and I'll try to help you out.

Users browsing this topic
Guest
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.