problem with a nasty virus/trojan

[tbalon]

Hey Guys,

I have inherited a nasty little bug that I can't seem to get rid of. I am runnig win xp pro and was in the process of trying to fix a different problem with a dll file corruption when I came across a forum with a link to a website that was supposed to scan my computer for viruses, but instead it installed a program/virus/trojan I am not quit sure which/ that is giving me popups pf porno stuff and balloons that are warning me that I have been infected with all kinds of bad things. It keeps prompting me to download a program to fix the problem but I am sure it just wants my money and to rip me off. Can you help me to rid this plauge from my system?
THX

 

[mechBgon]

Hi tbalon, what antivirus software do you have right now (if any)? BTW you are correct about the stuff they're trying to entice you with, it's just a scam.

 

[tbalon]

I am using AVG and it did find a trojan and a couple others but the problem is still here......

 

[mechBgon]

I bet you have a Zlob or DNSChanger variant. Can you uninstall AVG (so it doesn't cause conflicts) and install a free 30-day trialware of Kaspersky AntiVirus Personal 6 from here: link

Kaspersky is waaaaaay better than AVG at detecting Zlobs, which come out at the rate of up to 15 variants per day. I'm going to take the liberty of emailing you a Windows Media Player screencapture movie showing how to set up Kaspersky for maxed-out detection, using the email address in your profile, so your Zlob is killed dead on the first try :evil: The movie clip is about 1.8MB, not too big.

 

[mechBgon]

D'oh, the Netzero address bounces Got another email address I could use? Also, what is the bogus product that they're trying to scam you into buying? Let me guess, is it DriveCleaner?

After you've updated Kaspersky, rebooted, maxed out all of Kaspersky's settings, and run a full scan, now run Spybot Search & Destroy and a Microsoft OneCare online scan (use Internet Explorer to run this scanner).

I got to get to bed but hopefully that will kill the root of the problem and the rest of it as well :moon:

 

[John]

Is it prompting you to download VirusBurst or VirusBursters? If not please post the name of the malware. At a minimum you should scrap AVG, run crap cleaner + smitfraudfix + AOL Kaspersky + f-secure or bitdefender online scans. You can find the links to them in my sig.

Mech, upload the video to your FTP.

 

[mechBgon]

Mech, upload the video to your FTP.

I would, but I was asked to stick to small files (JPGs and stuff) to keep the bandwidth usage down. Since I'm getting no-cost hosting as a gift, I'm not going to rock the boat

 

[John]

I'd be happy to host it for you if you're interested. :beer:

 

[mechBgon]

Originally posted by: John
I'd be happy to host it for you if you're interested. :beer:

Thanks I'll try to do a few useful ones Monday and Tuesday, since I'm off work those days (although there may be some schedule-juggling this week).