Newbie in crisis

Viruses and worms
1

I apparently recently picked up some malware.
Unfortunately, not knowing that it could be bad. I did delete some of the files Avast brought up.
I have run the Avast checker and it found a couple of files, they were moved to the chest and subsenquently deleted (again I didnt realize)
Nothing has worked.
It pops up as “Spyware Protect 2009 Alert” There is a shield on the icon bar.
When I reboot, Avast prompts that Windows/system32/iehelper.dll contains reminants of system32:rootkit-gen[rtk]
Unfortunately I thought deleting iehelper.dll would fix it so I did. It did not fix it.
Now everytime I reboot, I get that message, I move it to the chest but nothing is fixed.
I still keep getting popups from this, 3 different ones.

In addition, I am getting an error when I try to log off or shut down saying that I have exceeded my profile storage space. It is only allowing 10240 kbs. I have never seem that before and cant find where to go to increase that.
Any help would be appreciated.
Thanks.

2

Have a good look at this link,it contains info and download links :slight_smile:

http://www.bleepingcomputer.com/malware-removal/remove-spyware-protect-2009

Post back if you have any problems installing/running MBAM

3

You are a life saver. That worked perfectly.

Now I just have this problem of my “profile storage space”
Ive never seen it until this malware popped up.
It is a giant “X” in front of a red circle on the icon bar.
It says I have exceeded my profile space and is only allowing me to have 10240kbs. It wont let me reboot or even log off until the space is reduced. Ive searched on windows and I cant find where a setting would be limiting profile storage for me to go adjust it.
Any help is again appreciated. Thanks a lot.

4

:slight_smile: Hi :

Did you only run Malwarebytes’ Anti-Malware ? IF Yes, you should ALSO
follow the “Additional Info” in the “Tutorial” at Bleepingcomputer :

"Associated Spyware Protect 2009 Files:

c:\WINDOWS\aazalirt.exe
c:\WINDOWS\dkekkrkska.exe
c:\WINDOWS\dkewiizkjdks.exe
c:\WINDOWS\iddqdops.exe
c:\WINDOWS\ienotas.exe
c:\WINDOWS\iqmcnoeqz.exe
c:\WINDOWS\irprokwks.exe
c:\WINDOWS\jikglond.exe
c:\WINDOWS\jiklagka.exe
c:\WINDOWS\jrjakdsd.exe
c:\WINDOWS\jungertab.exe
c:\WINDOWS\kitiiwhaas.exe
c:\WINDOWS\kkwknrbsggeg.exe
c:\WINDOWS\klopnidret.exe
c:\WINDOWS\krkdkdkee.exe
c:\WINDOWS\krkmahejdk.exe
c:\WINDOWS\krtawefg.exe
c:\WINDOWS\krujmmwlrra.exe
c:\WINDOWS\ktknamwerr.exe
c:\WINDOWS\kuruhccdsdd.exe
c:\WINDOWS\ooorjaas.exe
c:\WINDOWS\oranerkka.exe
c:\WINDOWS\oropbbsee.exe
c:\WINDOWS\otnnbektre.exe
c:\WINDOWS\otowjdseww.exe
c:\WINDOWS\otpeppggq.exe
c:\WINDOWS\rkaskssd.exe
c:\WINDOWS\ronitfst.exe
c:\WINDOWS\seeukluba.exe
c:\WINDOWS\skaaanret.exe
c:\WINDOWS\sysguardn.exe
c:\WINDOWS\tobmygers.exe
c:\WINDOWS\tobykke.exe
c:\WINDOWS\zibaglertz.exe

Associated Spyware Protect 2009 Windows Registry Information:

HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ‘sysguardn’ "

Do a “Windows Search” of the above .

5

Bit of a new one on me ,if you double click on the X, a box should appear telling you whats in your profile space,look for anything big. Have a look at the link. You need to delete or move some of your temp/tmp file from
C:\Documents and Settings\your username\Application Data and in your documents and settings username/local settings /temp.This has to be done manually. Also run CCleaner ( do not install the yahoo toolbar )

http://www2.wlv.ac.uk/its/selfhelp/help/manage_account/your_personal_profile.asp

http://filehippo.com/download_ccleaner/

Also do you have any large files on your desktop ( not shortcuts )