tizza2k Posted March 5, 2008 Report Share Posted March 5, 2008 cant seem to shift it.....?googled it and did everything ive been told to dostill wont shift it...at the moment am using antivir pro... did a few system scans got rid of lots of other virus`s like NT Kernam error 1256 c:\windows\system32\jkhhg.dllalso i have thousand upon thousands or pos files in my c drive and in documents and i cant delete any of them....anyone got any advice?ps oh and i cant restore back to an earliar date apart from the date i already had the virus dont know why :S even in safe mode Quote Link to comment Share on other sites More sharing options...
Boris Posted March 5, 2008 Report Share Posted March 5, 2008 Try RogueRemover Free ?http://www.malwarebytes.org/rogueremover.php Quote Link to comment Share on other sites More sharing options...
Boris Posted March 5, 2008 Report Share Posted March 5, 2008 Also further removal instructions here :-http://www.malwarebytes.org/forums/index.p...l=winreanimator Quote Link to comment Share on other sites More sharing options...
Boris Posted March 5, 2008 Report Share Posted March 5, 2008 thousand upon thousands or pos files in my c drive Please explain - what are pos files ? Quote Link to comment Share on other sites More sharing options...
tizza2k Posted March 5, 2008 Author Report Share Posted March 5, 2008 tried tha Malwarebytes' Anti-Malware before didnt workrogue remover found a few things my other scan never found but the winreanimator is still lurking there....http://aycu26.webshots.com/image/46705/200...31033372_rs.jpg Quote Link to comment Share on other sites More sharing options...
Boris Posted March 5, 2008 Report Share Posted March 5, 2008 I'm not an expert, but from your screenshot, I think you may have Trojan.Virantix.B - which uses rootkit techniques to hide itself from security programs.Have you tried running any of these free tools ?a-squared Freehttp://www.emsisoft.com/en/software/free/AVG Anti-Spyware Free Editionhttp://free.grisoft.com/doc/20/us/frt/0Sophos anti-rootkithttp://www.sophos.com/products/free-tools/...ti-rootkit.htmlTry running them in SAFE MODE (holdiing down F8 on boot) Quote Link to comment Share on other sites More sharing options...
tizza2k Posted March 5, 2008 Author Report Share Posted March 5, 2008 ill give em a pop now mate thanks... Quote Link to comment Share on other sites More sharing options...
Boris Posted March 5, 2008 Report Share Posted March 5, 2008 Good luck. Infections like this can be a real pain :( - and can take ages to fix.Presumably you've already got installed and run the latest updated versions of SpywareBlaster, SpyBot, and SuperAntiSpyware Free ?If not - try them .......... and it also might be worth giving this updated VundoFix 7.00 a go ?http://www.majorgeeks.com/VundoFix_d4954.html Quote Link to comment Share on other sites More sharing options...
AlanHo Posted March 5, 2008 Report Share Posted March 5, 2008 I guess it would be quicker to back-up your data to external media, reformat your hard drive and do a clean install of Windows.Then ensure you have adequate anti malware installed and practice thereafter safe surfing. Quote Link to comment Share on other sites More sharing options...
andsome Posted March 6, 2008 Report Share Posted March 6, 2008 cant seem to shift it.....?googled it and did everything ive been told to dostill wont shift it...at the moment am using antivir pro... did a few system scans got rid of lots of other virus`s like NT Kernam error 1256 c:\windows\system32\jkhhg.dllalso i have thousand upon thousands or pos files in my c drive and in documents and i cant delete any of them....anyone got any advice?ps oh and i cant restore back to an earliar date apart from the date i already had the virus dont know why :S even in safe modeHow on earth did you get lots of viruses? Most of us think that we are extremely unlucky to get a very occasional one. I can't remember the last virus that I had, and I use the INTERNET every day. Do you ensure that your current AV program is up to date? I use Nod 32 and it updates automatically several times a day. What sort of sites are you visiting to get lots of viruses? :D Quote Link to comment Share on other sites More sharing options...
MANEMAN Posted March 6, 2008 Report Share Posted March 6, 2008 Hi there,Have got to agree with ALANHO on this, may well be quicker to wipe the disk and do a clean install. (Longest route sometimes the shortest course) When you are up and running again it could be well worth keeping things like anti-virus etc; up to date. Think about Disk Imaging software such as Acronis True Image if you are intent to delve into the darkest places on the internet. Within 15 - 20 minutes you can have a perfectly clean operating system back with you once again.Like "andsome" I cant quite see how you have managed to get so many viruses. The last thing that I got personally was a worm. I took a "Bob Martins" tablet intended for the dog and within a day it had passed. Two outstanding questions for you it would seem. "Please explain - what are pos files ? " (Boris), - and, - - "What sort of sites are you visiting to get lots of viruses?" (andsome) Quote Link to comment Share on other sites More sharing options...
Boris Posted March 6, 2008 Report Share Posted March 6, 2008 Two outstanding questions for you it would seem. "Please explain - what are pos files ? " (Boris?There is a screenshot in tizza2k's second post showing these :)They are all .tmp files all starting with pos+other characters. Quote Link to comment Share on other sites More sharing options...
tizza2k Posted March 6, 2008 Author Report Share Posted March 6, 2008 Good luck. Infections like this can be a real pain :( - and can take ages to fix.Presumably you've already rgot installed and run the latest updated versions of SpywareBlaster, SpyBot, and SuperAntiSpyware Free ?If not - try them .......... and it also might be worth giving this updated VundoFix 7.00 a go ?http://www.majorgeeks.com/VundoFix_d4954.htmld/l that vundofix but again for some reason unknown when i double click the icon nothing happens.....?its not my computer its my sisters ive ben working away for 12months only come on here a few times till now cos ive been laid off so thought id do a full system scan and stuff see what i could find.... i di install alot of cracked software off various torrents.... Quote Link to comment Share on other sites More sharing options...
MANEMAN Posted March 6, 2008 Report Share Posted March 6, 2008 QUOTE: "i di install alot of cracked software off various torrents.... "SceneII Act 1Maneman is bundled, screaming into a van which is to take him on his final journey from his home to " The Twilight Home for The Bewildered"Stage left: / Lights down.Curtain: / Muted applause.Wow, that wos a good play init bro, thx 2 u 4 getin de tixets me man. Quote Link to comment Share on other sites More sharing options...
ɹəuəllıʍ ʇɐb Posted March 7, 2008 Report Share Posted March 7, 2008 tried tha Malwarebytes' Anti-Malware before didnt workrogue remover found a few things my other scan never found but the winreanimator is still lurking there....http://aycu26.webshots.com/image/46705/200...31033372_rs.jpgRegarding the visible balloon "Your computer is infected!" - this is not a Windows warning, this is another malware that wants you to download more malware.Before going ahead with a Windows reinstall, try a full online scan with http://housecall.trendmicro.com/. However, there is always a chance that already installed malware will prevent a successful run of Trendmicro Housecall. But give it a try anyway! Quote Link to comment Share on other sites More sharing options...
tizza2k Posted March 7, 2008 Author Report Share Posted March 7, 2008 tried tha Malwarebytes' Anti-Malware before didnt workrogue remover found a few things my other scan never found but the winreanimator is still lurking there....http://aycu26.webshots.com/image/46705/200...31033372_rs.jpgRegarding the visible balloon "Your computer is infected!" - this is not a Windows warning, this is another malware that wants you to download more malware.Before going ahead with a Windows reinstall, try a full online scan with http://housecall.trendmicro.com/. However, there is always a chance that already installed malware will prevent a successful run of Trendmicro Housecall. But give it a try anyway!run tha housecallfound...troj_bho.introf_anomaly.adatroj_vundo.yekpossible_nucrp-7troj_agent.jjycryp_tap-2roj_wantvi.efreeloader_drivecleanerfreeloader_winfixerit didnt find winreanimator...............my computer is running ridiculously slow now especially when its been left on for a whilei put another 512 dd ram in it now so long ago will this of kicked all this virus stuff off dya think? can see it like but yer never know..anyway i reckon i should format it now and start afresh.... only thing is i dont have a windows disk? Quote Link to comment Share on other sites More sharing options...
Boris Posted March 7, 2008 Report Share Posted March 7, 2008 I did install a lot of cracked software off various torrents....1. You can now see what the end result of doing this is ? :( 2. Adding more memory will not get rid of any viruses/trojans you still have.3. Is your "lack of a windows disk" to re-install because Windows was pre-installed on this PC ? If so do you have a recovery disk ? Quote Link to comment Share on other sites More sharing options...
tizza2k Posted March 10, 2008 Author Report Share Posted March 10, 2008 I did install a lot of cracked software off various torrents....1. You can now see what the end result of doing this is ? :( 2. Adding more memory will not get rid of any viruses/trojans you still have.3. Is your "lack of a windows disk" to re-install because Windows was pre-installed on this PC ? If so do you have a recovery disk ?so i can format my computer if i get a recovery disk?will i need the confirmation code you get on the windos disk? Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.