Spyware and Buffer Overrun

Hi, All,

I’m nearly at my wit’s end. I hope you can help.

About 2 months ago, I got the attached error message. The header says “Sex.” The text reads as follows: “Runtime error ‘53’: File not found.”

I asked a computer friend about it, and he said it was a virus and that I needed to download Avast. I did. I ran a scan, but got the following error message while viewing the log: “Microsoft visual c+t - runtime library buffer overrun detected - …/program files/awil software avast 4/ashsimpl.exe - A buffer overrun has been detected which has corrupted the program’s internal state. The program cannot safely continue execution and must now be terminated.” And it does.

I asked another computer friend and he told me that I was the victim of spyware. He suggested removing several programs from the startup menu. Two of the files he suggested removing were Avast files. All that did was disappear the icons from my tray. I don’t know if Avast is really working because I don’t see the icons.

I have tried scanning many times, revising what and how to scan, but to no avail. I still get the same buffer overrun message.

And to make matters worse, I’m getting popups like crazy!!!

What am I doing wrong? What can I do to fix it all?

TIA for your help.

Naomi B

Your system id definatly infected. Most likely with both virus and spy-/adware. Follow the instructions on this page > http://members.home.nl/edeijl/acred/cleaning.htm < to remove the spy-/addware. Since Avast is not working run a online virus scan at http://housecall.antivirus.com When you are done. Reisntall Avast and it should work. If not let us know here.

naomib,

Atras is correct. It is evident that you have at least Spyware at play here. The “sex” header is clearly a downloaded trojan/worm.
You MAY have also downloaded a virus.

Your computer friend made you delete the Avast files that are needed if Avast is to detect and remove possible virus infection. Right now, I would do the following:

  1. Uninstall what is left of Avast. Got to the www.avast.com site. Look under Programs and find AvClear4 Uninstall utility. Download and use it.

  2. Install and run an antispyware program. Adaware is highly recommended. You will find it at www.lavasoft.de

  3. After clearing Avast and running the antispyware, reboot system.

  4. Reinstall Avast and run a FULL scan set to check archives and sensitivity to Thorough.

If you do not know how to do any of the above, let me know.
It is really easy.

Your system is messed up at the moment, but it will not be hard to put into shape. It will take a bit of time and patience.

Techie101

PS: Do you have a firewall installed?

Thanks, Guys,

I did everything you told me to do, but I still have the “sex” thingie. I downloaded Spybot, uninstalled and reinstalled Avast. I got rid of everything Spybot made red (I might need Sidestep again, but I can install that at any time). I ran MS Disk Cleanup and got rid of a bunch of files. I am running an Avast scan now.

Interestingly, when I shut down last night, I just turned off the monitor and went to sleep. When I booted up this afternoon, there was an error message because “Sex” couldn’t execute!!! What’s that all about? I tried to use Task Manager to determine what files were frozen and there were two “sex” applications there.

One thing I forgot to mention is that my computer tries to log on when it’s first booted up. A computer friend suggested that that’s part of the virus he though Avast would eliminate.

So, where do I go from here? Sorry to take up so much time.

Naomi B

p.s. Techie, I do NOT have a firewall. This is a home computer (though it is the same Dell workstation that I use at work). Do I really need one? Or is that the obvious solution to what caused the problems I’m having?

Thanks, again.
Naomi B

NaomiB, everybody needs a firewall :smiley:
Some viruses/trojans are not blocked by the antivirus but with Windows Updates or the firewall. You will be protected to hackers and have more privacy.
There are a list of good firewall in many threads of this forum: ZoneAlarm, Sygate, Agnitum, Kerio…
See http://forum.avast.com/index.php?board=1;action=display;threadid=1509;start=15 at section Firewall & System tests 8)

NaomiB,
How about running Ad-Aware? Spybot alone isn’t enough.

Try ZoneAlarm. http://www.zonelabs.com/store/content/home.jsp
I’ve use the free home version and the Pro (pay version with a few more feathers). Also I use both AdAware and Spybot. Both seem to pick up a few things the other doesn’t but I prefer Spybot. I like Spybots resident protection. ZoneAlarm give great security online. Avast! of course keeps my system health and allows me to sleep at night :wink: btw I go to school online and that alone sends me all over the web. So it’s nice to feel safe.

Hey LordDragonDan, who is in your avatar photo?

Dear All,

I’m now downloading AdAware and will run it.

As for a firewall, I have all the Windows Updates. Do I still need to install a firwall? I’m not clear on that.

I ran Avast! last night…it took forever, but I let it roll. At about 11:30 p.m., my computer kept trying to get online all by itself, with Avast! running. It was mostly annoying, as I was on the phone with my brother, who was calling from Tokyo.

This morning, I looked at the log, and it had 700+ entries and the same buffer overrun message. S.O.S. (same old s__t!)

I’ll let y’all know what happens after the AdAware is downloaded and run.

When I reboot, I’ll see if the sex message still pops up and will use Task Manager to see if the icons still show. I’ll try to find 'em and delete 'em.

Thanks, again, one and all.

Naomi B – who’s going to take a course online later on today.