VIRUS/SPYWARE HELP

Do you have a technical question that doesn't really fit a specific console? Want some general info on electronics, hacking, making cookies, etc? Here's the place to ask! Go nuts.

Moderator: Moderators

Post Reply
MaDnEsS
Portablizer
Posts: 980
Joined: Mon Oct 10, 2005 9:33 pm
Location: rochester MN
Contact:

VIRUS/SPYWARE HELP

Post by MaDnEsS »

alright i was stupid and went against my better judgement of running an .exe from a DL and now im in pop up HELL the worst part is Norton isn't detecting it, im goning to try running AVG but i doubt it will do anything. Anybody have any suggestions.
Bibin
Posts: 1127
Joined: Sun Mar 04, 2007 2:14 am
Location: Brooklyn, NY

Post by Bibin »

AVG, HiJackThis, and SpyBot S&D are your gods.
vskid
Senior Member
Posts: 6314
Joined: Fri Mar 25, 2005 8:25 am
Steam ID: vskid3

Post by vskid »

What are the pop ups (to what sites)? I got a virus (same way, too) that opened pop ups to the site for a system doctor program. I don't remember what its called, but its super hard to get rid of. I some how got rid of it after a month or two (or at least I think I did, haven't had the pop ups for a few months).

Make sure you run the virus scans in safe mode, after you've deleted your browser's cache. Even better, do a system restore if you have one from before the virus.
Image
bicostp
Moderator
Posts: 10491
Joined: Mon Mar 07, 2005 5:47 pm
Steam ID: bicostp
Location: Spamalot
Contact:

Post by bicostp »

Bibin wrote:AVG, HiJackThis, and SpyBot S&D are your gods.
Agreed. Also add in SmitRem, CCleaner, msconfig, Ad-Aware 2007, and of course upx to cram as much as possible into a cheap USB drive. 8)

Install these tools, disable system restore, and reboot into safe mode to do the cleaning.
Skyone
Moderator
Posts: 6390
Joined: Tue Nov 29, 2005 8:35 pm
Location: it is a mystery
Contact:

Post by Skyone »

Check registry

Code: Select all

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components
and

Code: Select all

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
or msconfig alternatively.

If you find any key/value that looks suspicious, delete the exe from the given location and delete the key. Most viruses are programmed by morons that don't know their way around the kernel anyways, so you'll probably be able to kill it.
Post Reply