how do I detect and remove this virus/worm

[Barfo]

A friend of mine told me he's sure his computer at work has a virus or worm infection but PC-Cilin doesn't detect it, and the only symptoms he could give was that it creates a lot of desktop.ini files and the mouse cursor jumps around the screen sometimes, he's not computer savvy and he's the sys admin in there (I know 😛) so I'm going there tomorrow to try and help him save his job, any ideas? I think that determining what the problem is would be a good start, so what would be a good set of antivirus and diagnostics programs should I bring?

 

[sieistganzfett]

http://www.kaspersky.com/downloads dl a trial of their anti virus, run it on that pc and find out what the virus is that it finds, then google for removal instructions on that virus, or goto symantec's website to use their removal instructions. i dont trust pc cillian. it could just be spyware on that pc causing problems. also, when does the mouse get funky? try another mouse while your at it, but start out with good anti virus, a free trial one with symantec or kaspersky to figure out whats on the pc. then check it for spyware with ad-aware, spybot, and if you can, check it with microsoft's anti spyware.. another good idea is after all of that, and removing what ever junk it finds is uncheck foreign looking programs from starting up with the computer by using msconfig.. hopefully all of this stuff will take care of the problem or set you in the right direction to solve it.

 

[dBTelos]

Download, Install, Update, and run in both reg. and safe mode all of the following:

Ewido Anti-MAlware
http://www.ewido.net/en/download/

Ewido Tutorial if you need it =
http://rstones12.geekstogo.com/ewidosetup.htm

McAfee Stinger (Stand alone so no install or update)
http://vil.nai.com/vil/stinger/

Ad-Aware SE Personal
http://www.lavasoft.de/software/adaware/

Spybot S-D
http://www.spybot.info/en/download/index.html

If you don't have an A/V or use something crappy like Norton or McAfee Bloat-Ware then download *one* of the following:

Avast Home
http://www.avast.com/eng/download-avast-home.html

AntiVir
http://www.free-av.com/

AVG Free
http://free.grisoft.com/doc/2/lng/us/tpl/v5

 

[Barfo]

yah thanks, will report the results tomorrow.

 

[Barfo]

It was some trojan and I think Avast removed it, thanks again 😀

 

[dBTelos]

No problem.

 

[imported_nocturne]

Umm... the desktop.ini problem is probally most likely him having a tool which can manage folder icons (in my case tweakxp, which I always install for quick tweaks, so I wouldn't know if this the default nature of XP), and him having "show hidden files" enabled. I have a desktop.ini in every folder, with just a reference to icons (and tweakxp). This has been on ever pc I'ce every setup with xp.

Erratic mouse movement is most likely a bad mouse or bad usb drivers.

Seriously, this is hardly the way viruses or trojans act. A trojan infiltrates your system acting as an ordinary program, and seeks to steal your info or track what type of ads you like. Viruses are mostly force-fed chain letters, with the intention of spreading as far as possible before being detected. Their are particularly nasty attacks (such as stealing someones files and offering them for ransome, or identity theft), but these only happen to people who are not careful (mostly, ppl who read spam).

Why do a lot of programming just to cause the mouse to jitter and create a bunch of empty files?!