my computer has virus.. it disabled security center, system restore, and is screwing with my mcafee.
I got a blue screen and it said bad head spooler or something and then my comp. restarted. i'm in safe mode right now & i have NO idea what to do, PLEAse help me..
Hi,
If you can get to the internet in Safe Mode, then please use this on-line scanner:
Free ESET Online Antivirus Scanner
Post the details, so we can help you further.
Regards,
Golden
okay, it found 2 infected files, quarinteied them and i removed them. mcafee also found one infection. i'm running both of them again right now, along with avast
OK.
Do you know the names of the infections it found?
Also, download and install the FREE version of this anti-malware product:
Malwarebytes
Update the database, and do both a flash scan and a full system scan, and post the results here too.
Regards,
Golden
um, i know that one file was a song that i have had on two different computers for the past 2 years..
the other files i have no idea.
i have this, from my mcafee scan - "C:\Users\KC\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30\4d8303de-3e7a69b7" "Exploit-ByteVerify" "5"
but i'm not even sure if that was the file. i'm sorry :/ thanks for helping me
the flash one is premium only..
Malwarebytes' Anti-Malware 1.50.1.1100
Malwarebytes
Database version: 5507
Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385
1/12/2011 4:37:59 PM
mbam-log-2011-01-12 (16-37-59).txt
Scan type: Full scan (C:\|)
Objects scanned: 282111
Time elapsed: 1 hour(s), 8 minute(s), 30 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
Make sure to scan within your system restore points as well, so if you would have it in there it will not attack again.
i don't have any system restore points.. the virus got rid of them :/
OK.
So far so good.
Here is a description of the Trojan from Symantec's website, you can see its a nasty piece of work:
Trojan.ByteVerify Technical Details | Symantec
Do you know how long this Trojan has been on your computer? I recommend you assume the worst case scenario and assume that this Trojan has done its worst and that your passwords have been stolen.
I would like to get a security expert to review the work we have already done here just to see if there is anything else we need to do, but in the meantime, you need to change the password of every account on your computer.
I'll ask Jacee or Corinne (our resident experts) to review this thread, so please follow their instructions if they post here.
Regards,
Golden
Quote