Bio hazard

Discussion in 'Computer Security' started by soady, Feb 23, 2008.

  1. soady

    soady Bit Poster

    13
    0
    2
    Hello All.


    i am back, but this time i have a problem, i am trying to fix a friends laptop for them and i am having real trouble locating the last of the bugs that are on it.

    i will tell you what i have done so far so maybe that will help, i will also tell you what the problem(s) are.

    the problem that i am having is two fold, first where the "C" drive is, there is a Big RED X like what is located at the top right on every window in a windows PC. the disc is only half full, and i have already done a defrag on it to make sure. i have also looked in folder options just to make sure that its not had its icon changed

    i know through looking on the internet that its VirtuMonde, otherwise known as Vundo, that can be a cause for this red X. So i have Down Loaded the fix for it here: http://www.atribune.org/content/view/24/2/ i have run this program and it did find a few things and i managed to delete them, i have also run this in safe mode now and it finds nothing (in either safe mode or not).

    i also manages to remove just over 4 grands worth of pos*.tmp files from the C drive, and my documents, and there is now none of these .tmp files left on it, i have done several searches on the pc and i cannot find them any more. i have removed all the registry entries for them as well using a combination of CCleaner and me going thought it looking for them. i have also done the same with all the other files that i have removed.


    i have also installed AVG 7.5 on to the PC and it also found a few things, and so has Spybot search and destroy which also found a few things, one of the main problems that was on the pc was a virus from a program called "trusted antivirus" and "window pro 2006" i have completely removed these and all there associated files with them, again either by me going thought the registry and CCleaner, there are no longer any traces of either of these.

    i said at the start the there problems where two fold well the second part of the problem is that whenever i try and Run an ad-aware sweep it crashes the pc when it gets to the folder C:\windows\system32\dllcache and any number of files that are in there, my first reaction was to remove the files that it was scanning last to see if that would fix the problem but all that happens is that it crashes on a different file. i have tried to run this in safe mode but it says there is an "exception EAccesses Violation in module Ad-aware.exe at 00ica094" and it goes on, so i am thinking that it cannot get to the memory location for the program but i am sure that u can run this program in safe mode.


    thanks for any and all help.

    and for those that know me from when i was thinking about getting a new pc, i have got it, and i am so happy that i waited untill after Xmas, and i saved over 200 pounds on it and i got the samsung pebble monitor 22 inch so i am very happy and this new pc is a beast!

    soady
     
  2. Bluerinse
    Honorary Member

    Bluerinse Exabyte Poster

    8,878
    181
    256
    If you have that much crap on there, you will never be sure that you have removed it all.

    It's time to back up your data, format and re-install Windows.

    Then, start using safe surfing techniques :rolleyes:
     
    Certifications: C&G Electronics - MCSA (W2K) MCSE (W2K)
  3. soady

    soady Bit Poster

    13
    0
    2
    hi,

    well there in lies the problem, as its a friend's pc and they need it for their university work i cannot do that other wise i would of, i have given them some good info on how to surf in safety, but re-formatting is not an option, and if i do back up and reformat then i run the risk of taking an infected file over to the back up and i will be back to square one again.
     
  4. BosonMichael
    Honorary Member Highly Decorated Member Award 500 Likes Award

    BosonMichael Yottabyte Poster

    19,183
    500
    414
    Well, then, if you're not willing to reformat and start from scratch... enjoy your viruses. I'm not sure what magic you expect to happen. :rolleyes:

    You won't likely take infected files over if you simply back up your data (data, not apps - your pics, your documents, your music - anything you cannot recreate or reinstall) and restore it after you've formatted and reinstalled Windows.
     
    Certifications: CISSP, MCSE+I, MCSE: Security, MCSE: Messaging, MCDST, MCDBA, MCTS, OCP, CCNP, CCDP, CCNA Security, CCNA Voice, CNE, SCSA, Security+, Linux+, Server+, Network+, A+
    WIP: Just about everything!
  5. Mitzs
    Honorary Member

    Mitzs Ducktape Goddess

    3,286
    85
    152
    Soady you have to reformat that harddrive. It is crashing when you run something like a antivirus or antispyware. Most time it is because you are still majorly infected with something and it is fighting back and wining. To be honest it could kill the HDD eventurally, then where will your friend be? Spybot does not keep their database up as well as they use to and adware just suxs. If I was you I would download a 15 day trial of counter spy.

    http://www.sunbelt-software.com/Home-Home-Office/Anti-Spyware/

    This is what I use and it works good.They are very good at keeping their databases updated! It is what I have my nontech friends use when they start running into prombles. I have found in the past that while it runs it will start kicking things up and avg will start finding more things too. When it is done running, reboot that bad boy and run it again. Then run your avg. Keep doing this till you have nothing found. Then do it aleast one more time. Rebooting after every search. If this does not work, the only thing left that I would know to do is reformatt it. It is a tough lesson for your friend to learn but there is only so much one can do.
     
    Certifications: Microcomputers and network specialist.
    WIP: Adobe DW, PS

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.