fifo

Viruses and worms
1

I don’t know the exact name, but i am pretty sure i have a virus

i found out about it when i saw it trying to access something with my firewall event log.
i use COMODO pro and avast 4.7 home

it is in my system volume information, i’ve already enabled all the options to access it, but i cant find the folder directory the firewall prevented.

i scanned with avast and it found nothing. i’ve also tried booting safe mode.

what should i do?

2

I suggest:

  1. Disable System Restore and reenable it after step 3.
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast with archive scanning turned on.
  4. Use AVG Antispyware; SUPERantispyware and/or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  5. Test your machine with anti-rootkit applications. I suggest AVG or Trend Micro RootkitBuster.
  6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.
3
  1. Disabled restore
  2. Downloaded and Installed CCleaner, used it.
  3. Scheduled boot scan with Avast. (Archives too.)

This is what I’ve done SO FAR.

I have a problem with CCleaner right now though. I can’t run, open, or uninstall CCleaner. The logo for it vanished. And I cannot delete any files; even the .exe to install it.

I’m going to enable System Restore and get one of those scanners shown.

Thanks.

EDIT: Oh, and Avast didn’t pick up anything. I have WINDOWS folders shown, aswell.

4
  1. Used Spywareterminator - found 1 or 2 things, not fifo tho
  2. Used Trend Micro RootkitBuster - found nothing
  3. Ran HijackThis log. Attached below. ~~ Will run RunScanner after.

Downloading SpywareBlaster now… or should I just use SpywareTerminators immunize since I already have it?

Thanks for your help. Still finishing your list. :smiley:

5
  1. Immunized.
  2. Ran Inspector. Updated Java, Adobe Reader, and Adobe Flash.

Still have CCleaner problem. Posted at Official CCleaner forums.

Also, here is my RunScanner / HijackThis post at Bleeping Computers.
http://www.bleepingcomputer.com/forums/topic124642.html

Thanks for your help. I don’t think it removed the thing, but I feel a little better about it after doing all those things :smiley: