3 day supervirus! :(

Viruses and worms
1

Hello - I turned on my computer 3 days ago and got the message “windows cannot startup - repairing computer.” It finally repaired and windows booted. As I was using my computer for a few minutes I noticed my fan spinning like crazy and the CPU usage was through the roof. I restored to a previous point multiple times, ive scanned with AVG and malwarebytes in both safe mode and regular mode several times. I’ve scanned with aswMBR and fix zero access. All programs find and “remove” what appears to be the same couple trojans. After rebooting my computer it works great, for about 5 minutes, until what seems like the trojan is again downloaded automatically - the fan kicks in high gear - and CPU usage skyrockets…I’ve since uninstalled AVG and reinstalled avast!. The fan has calmed permenantly and the CPU usage is down, but it is only because avast! is constantly blocking malicious URL’s and trojans (constant red boxes)…though the computer now runs fine, the avast! software is constantly blocking the following (plus more):

  1. Infection Details

URL:

http://betbetbot.com/x/

Process:

\.\globalroot\systemroot\svchost.exe

Infection:

URL:Mal

…

2.Infection details
URL:

http://freedondon.com/z/

Process:

\.\globalroot\systemroot\svchost.exe

Infection:

URL:Mal

…

  1. Infection Details

URL:

http://betbetbot.com/z/

Process:

\.\globalroot\systemroot\svchost.exe

Infection:

URL:Mal

I’ve tried EVERYTHING - I don’t know where to turn :frowning:

I know that using programs such as hijackthis I can post reports from my computer and people are usually able to help from there - please let me know what I can post to help solve this!

About every 5 seconds AVAST pops up with what is either a “Malicious URL blocked” or “Trojan Horse Blocked” message…so though my computer is working ok now, it is only because AVAST is blocking what has caused my computer to go insane…if I remove AVAST I feel as though these malicious URLs and Trojan Horses will again get through - so there is something somewhere on my computer trying to again download these things…

2

Please attach your logs. (AdwCleaner, MBAM, OTL and aswMBR…!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0

3

What happened to the rest of this thread? When I looked here two days ago, there was a long and very promising thread. Now, there are only two posts which have no possible solutions in them.

The same EXACT thing is happening to my computer as szatryan describes. Avast! has helped make the computer at least functional again, but the Malicious URL Blocked balloon virtually never goes away. It blocks between 10 and 30 malicious URLs a minute, and this when I don’t even have a browser running. When I disconnect the Internet (disable the wireless radio and/or unplug the ethernet cable), the malicious URL messages are immediately curtailed (but do not go away entirely).

Here is what I have tried thus far:
*System Restore (did nothing)
*Complete re-install of Win7 (booting from the disc; first thing I did was re-install Avast! and then delete my “old.Windows” folder). Trojan/virus was still there and didn’t seem any worse for the wear.
*Because the Windows Malicious Software Removal utility found Trojan:DOS/Alureon.A, I tried fixing the Master Boot Record, following the directions here: http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Trojan%3ADOS%2FAlureon.A

I’m at my wit’s end with this thing. My experience with viruses up to this point has been very limited. To be honest, even though I’m a heavy Internet user, I’ve never had a virus that wasn’t easily and quickly removed.

Any tips would be greatly appreciated.

4
Any tips would be greatly appreciated.
if you want help, start your own topic and follow the directions in Asyns post
5

Thanks. I’ll do that.