Help Computer with many virus infected

Viruses and worms
1

Who of you can help me?
The computer had over a long time no virusprotection as well as Firewall. After I did all this things for the family, found avast the following files…

All this files are infected with Win32:Adware-gen (Adw) (12)

108SAInstaller.exe
C:/Temp

cay104ui.dll
c:/Program Files/ProSiteFinder

M3IDLE.DLL and M3SKIN.DLL and M3SKPlay.exe
C:Program Files/MyWeb.Search/bar/1.bin

MediaGatewayx.dll
C:/Winnt/Downloaded Program Files

mf1y8qes.dll
C:/Program Files/ProSiteFinder

MLBcomShufflesetup-dm (1).exe
C:/Downloads

BLBPlayball Setup -dm(1).exe
C:/downloads

prositefinder1.dll and prositefinder1.exe
C:Program Files/ProSiteFinder/ProSiteFinder1

Prositefinderh.exe
C:Program Files/ProSiteFinder/ProSiteFinder

fymfezon.dll
C:Program Files/ProSiteFinder is infected with Win32:Trojan - gen (Other)

Get access.class-757cc4dar-5263a9e6-class
Infection: JS:Classloader-7
C:Documents Settings Administrator David-39M4RWYAX/Application Data/Sun Java/Deployment/Cache/Javapi/v.1.0/file

JS:Exploit Bytverify - 11
Insecure.classloader.class5c4c2e2f-30daf1e6.class
C:Documents Settings Administrator David-39M4RWYAX/Application Data/Sun Java/Deployment/Cache/Javapi/v.1.0/file

Win32:Dumaru (Worm) which is 7 times on the same file and same orginal folder
found by avast
which are marked as not to be restored
patch exe#3615982581
C:Documents Settings Administrator David-39M4RWYAX/Application Data/Thunderbird/Profiles/rsxducar/default/Mail/mail.access-4free.com/Inbox

and also 7 times Win32:Dumaru (Worm)
patch exe#3615982581
C:Documents Settings Administrator David-39M4RWYAX/Application Data/Mozilla/Profiles/p5d8vr1z.slt/default/Mail/mail.access-4free.com/Inbox

I am sure that there are files which we could delight but would it be better to renew the whole system. Please help me out!!!

2

Hi Kampfmaschiene, and welcome.

Reformatting may end up being the solution to this but first can you tell us the operating system you’re working with?

The following will not solve all the problems but it’s a start:

Empty the email inbox(es)

Delete temporary files with CleanUp which you can download here

http://www.stevengould.org/software/cleanup/

Open Add/Remove Programs in the Control Panel. If there are entries for Prositefinder or MediaGateway uninstall them.

While in Add/Remove Programs check your version of Java. If it does not read J2SE Runtime Environment 5 Update 8 uninstall it. You can get the current version here if you wish

https://sdlc4b.sun.com/ECom/EComActionServlet;jsessionid=7B2333AFE500E153238CECDB9745EB73

It looks like the first several entries are related to adware. It you haven’t already, download and scan with AdAware which you can get here

http://www.lavasoft.de/products/ad-aware_se_personal.php

Also download and scan with ASquared

http://www.emsisoft.com/en/software/free/

Now schedule a boot scan with avast! and reboot.

Please note that anything any of the above scans identifies should be put in quarantine for now. Don’t start deleting things unless there is no other choice.

Please post your results when you can.

3

Hellow there !I am the new user.I also want to tell you about a antivirus and antispy programme.The programme name is ‘spyware terminator’.It is usefull.It can auto block the threats.

4

spyware terminator is maybe too much paranoic… better to use spybot-sd in first step imho :wink:

5

Good tools are AVG Antispyware. Some users recommend SUPERantispyware, Spyware Terminator and/or a-squared (take care about false positives).
If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.

SpywareTerminator has some weird behaviors on Vista. On XP seems very stable.

6

If only Alwil had one ::slight_smile:

Al968

7

I’ve missed you… I mean, I’m not understanding… can you develop?