Virus Removal

[Jacee]

How to disable Teatimer:
How to enable/disable Spybot Tea timer | Malware Help. Org

 

[mjwilson94]

Right guys the Full Scan with Spybot Search & Destroy has just finished and no immediate threats were found.

 

[D3ftOn3Z]

So you only did a scan using spybot? How about the others? Did your AV or malwarebytes find anything after updating them?

 

[mjwilson94]

Nope none of them at all. I am half way through installing AVG Trial of Internet Security I shall do a full scan of this and see what happens.

 

[D3ftOn3Z]

You might want to install Trojan remover too and run a full scan. Just a suggestion though. See if it finds any trojan.

Link here - Simply Super Software - Trojan Remover

 

[mjwilson94]

Ok right the AVG scan hasn't finished yet but already picked up two things. Please look at the picture for more info.

 

[TaraSWinTeam]

Here are some virus removal resources: How do I remove a computer virus?. Make sure you protect your computer in the future!

Tara
Windows Outreach Team

 

[D3ftOn3Z]

I've done a few research on the above mentioned virus aka vundo on the net. AVG might remove it and will ask you to restart your PC. But when you do a rescan, the trojan will still be there.

I've done some reading on an article regarding this issue from another forum, it needs HiJackThis, vundofix to fix this. Vundo is a very tricky virus to remove.

Admins/Mods, can i post the link from another forum to here so TS can read it? So that it will help him remove the trojan.

EDIT - Nevermind i'll send him the links through PM.

 

[mjwilson94]

Oh right thanks for researching it. And please do send me the link it will help me so much!

 

[D3ftOn3Z]

Oh right thanks for researching it. And please do send me the link it will help me so much!

PM sent.

 

[tristan753]

hey I'm having the exact same problem, would you please be able to send me the links too?

 

[D3ftOn3Z]

hey I'm having the exact same problem, would you please be able to send me the links too?

I'm unable to send it through your PM. Do enable the PM feature through your User CP. Thanks.

EDIT - Send me a PM once it's enabled. Then i'll pass you the links. Thanks.

 

[D3ftOn3Z]

I am very curious about the above poster "tristan753". Just joined today and only had 1 post. Suddenly come by this thread asking for help? And states that he/she has the same issue with TS? Funny eh? Why not google her/his way for help?

Till now the user has not has not enable the PM feature. How to help?

 

[mjwilson94]

Ok right I stopped the scan with AVG and removed the viruses (Well AVG said it did). Without restarting I did a scan with VundoFix and nothing was found. Is it worth restarting my system then rescanning with VundoFix?

 

[mjwilson94]

Right ok here is an update of my situation. I belive the VUNDO has been wiped of my Computer, but in MSE a pop-up is now occuring with something called
TrojanClicker:JS/Iframe.F
I am also still getting the advertisment tabs in firefox??

 

[jav]

http://www.microsoft.com/security/p...rojanClicker:JS/Iframe.F&ThreatID=-2147335922

Try this: http://www.surfright.nl/en/hitmanpro
Download and scan with it.

EDIT: Actually, now when I read your posts again.
I seriously think you should run it.
It seems for me TDL rootkit symptoms...

Post screenshot after scan

see my other post: http://www.sevenforums.com/system-s...uac-disables-itself-read-more.html#post554765
I do think you have the same or similar problem.
In any case I think the same rootkit family...

 

[steve-pressman]

You might want to try clearing your Java cache and then running a scan afterwards. Go to control panel/Java/settings/delete files.


Steve

 

[mjwilson94]

The scan hasn't quite finished yet but has picked up a rootkit. More info look at picture below.

 

[jav]

The scan hasn't quite finished yet but has picked up a rootkit. More info look at picture below.

ahh...
As I said TDL 3 rootkit from TDSS family. :shock:
Hopefully Hitman Pro will be able to remove it as they claim.

 

[Jacee]

Please run the following tool:

• Download http://support.kaspersky.com/downloads/utils/tdsskiller.zip and save it to your Desktop.

Extract the file and run it.
Once completed it will create a log in your C:\ drive called TDSSKiller_* (* denotes version & date)
please post the content of that log TDSSKiller