TheGameVirus

[Dinesh]

How do i remove it? I installed it purposefully BTW on virtual Windows XP.
Just wanted to know what removes it. So far ,i have tried Avast 5, MSE and Norton Internet Security 2010 and they all were unsuccessful. Any ideas?


Regards,
Dinesh.

 

[gforce23]

Did you get hold of the one that was released on a private tracker recently?

According to VirusTotal, the file is detected by 4 AV solutions right now. Try one of them to see if it works:

 

[Dinesh]

Yep thats the one i tried. Looks like i will have to install a squared. Thanks.

 

[Tews]

:shock: The security freak gets pwn3d???

 

[Dinesh]

:shock: The security freak gets pwn3d???

Its a shame that no major AV is able to fix this issue.
Now trying a squared to remove it.

 

[Jacee]

Let's see if we can take care of most of it ....

Download the HostsXpert 4.3 - Hosts File Manager.

• Unzip HostsXpert 4.3 - Hosts File Manager to a convenient folder such as C:\HostsXpert
• Click HostsXpert.exe to Run HostsXpert 4.3 - Hosts File Manager from its new home
• Click "Make Hosts Writable?" in the upper right corner (If available).
• Click Restore Microsoft's Hosts file and then click OK.
• Click the X to exit the program.
• Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.

Next,

Flush you DNS cache
Most DNS clients cache the results of name resolution requests. This speeds up name resolution if multiple lookups are done to the same address, such as is common when browsing the web.
Sometimes a bad DNS entry will be cached and you will need to either flush the DNS cache to get rid of it, or wait up to 24 hours for it to be dropped from the cache automatically.

Open a command prompt....from the Start menu, select Run > In the box/"open field", enter cmd.exe
enter ipconfig /flushdns press 'enter'

Now run MalwareBytes' Anti-Malware (be sure it's updated)
|MG| Malwarebytes Anti-Malware 1.41 Download
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad. Please save it to a convenient location. Copy and Paste that log into your next reply.

 

[neoasr]

Quote: Originally Posted by Tews
:shock: The security freak gets pwn3d???


Its a shame that no major AV is able to fix this issue.
Now trying a squared to remove it.

looks like dinesh get disappointed with his security

 

[Dinesh]

Quote: Originally Posted by Tews
:shock: The security freak gets pwn3d???


Its a shame that no major AV is able to fix this issue.
Now trying a squared to remove it.

looks like dinesh get disappointed with his security

When i installed that virus, i had enabled NIS 2010 and it did not detect it during installation also. Today, i will try NOD32 and MBAM.

 

[gforce23]

When i installed that virus, i had enabled NIS 2010 and it did not detect it during installation also. Today, i will try NOD32 and MBAM.

What was the result with ASquared?

 

[Dinesh]

Well i tried Spyware Doctor first but unfortunately it didnt detect anything. So i uninstalled Spyware Doctor and downloading A-Squared now. Will post the results in 15mins.

Edit: Avast Anti Root Kit has detected it but no option to remove it.

 

[gforce23]

Well i tried Spyware Doctor first but unfortunately it didnt detect anything. So i uninstalled Spyware Doctor and downloading A-Squared now. Will post the results in 15mins.

Let me see if I can get Ikarus to hunt down that bad boy.

 

[Dinesh]

Ikarus?

 

[gforce23]

Ikarus?

IKARUS Security Software GmbH

Ikarus' one of the four AV solutions that detected that piece of malware.

 

[Jacee]

Unhide 'hidden files and folders' ... search for MSASCui.exe ....Is it listed?
How about Battlefield 2 keygen from SKiDROW? Is it listed?

 

[Dinesh]

Unhide 'hidden files and folders' ... search for MSASCui.exe ....Is it listed?
How about Battlefield 2 keygen from SKiDROW? Is it listed?

MSASCui.exe is listed in Startup folder in msconfig.

 

[Dinesh]

Ikarus?

IKARUS Security Software GmbH

Ikarus' one of the four AV solutions that detected that piece of malware.

I dont understand in which language it is!

 

[TheIgster]

How come you didn't try Vipre on it Dinesh? Just for the heck of it.

 

[Jacee]

Okay, uncheck it ...also look in task manager, All Users, and stop it if it's running.

Next download Combofix from any of the links below, and save it to your desktop.<--Important
Link 1
Link 2
Link 3

These instructions are specifically meant for Dinesh. Do not try to use Combofix without 'proper' guidance

Click on this link Here to see a list of programs that should be disabled.
The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
If your anti-virus or firewall complains, please allow this script to run as it is not malicious.
Next: Disconnect from the internet. If you are on Cable or DSL, unplug your computer from the modem.
Next: Please disable all onboard security programs (all running with back ground protection) as it may hinder the scanner from working.
This includes Antivirus, Firewall, and any Spyware scanners that run in the background.

• Double click combofix.exe and follow the prompts.
• When finished, it will produce a log for you. Post that log and a HiJackthis log in your next reply

Note: Do not mouseclick combofix's window while its running. That may cause it to stall
Please be patient while the scan runs, at times it may appear to stall.
When finished and after reboot (in case it asks to reboot), it should open a log, combofix.txt.
Post this log in your next reply together with a new hijackthislog.
After rebooting ensure your Security applications have been re-enabled.

In your next reply post:
ComboFix.txt
New HJT log taken after the above scan has run
***A guide and tutorial on "How to use Combofix" can be found here:
A guide and tutorial on using ComboFix

 

[Tews]

Ikarus?

IKARUS Security Software GmbH

Ikarus' one of the four AV solutions that detected that piece of malware.

I dont understand in which language it is!

Thats German.. maybe Kari can help you out...

 

[gforce23]

Ikarus?

IKARUS Security Software GmbH

Ikarus' one of the four AV solutions that detected that piece of malware.

I dont understand in which language it is!

German
Google Translate is your friend.