Virus Problem

Viruses and worms
1

Hi all,

recentely I have discovered that my pc is uploading around 20kb/sec because of a Virus that I’ve recieved, I have thoroughly scanned the pc using avast, and spybot - And still nothing happens

Every second it makes at least 300 request to sites or something :s

12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED .
12/19/05 10:17:17 AM Alex FILTERED .
12/19/05 10:17:17 AM Alex FILTERED .
12/19/05 10:17:17 AM Alex FILTERED .
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED .
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED .
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED
12/19/05 10:17:17 AM Alex FILTERED

This is one sceond and only a fractions of what happens, i dont even know why its happening

The Words filtered are dirty words and l0ttery

Thanks In Advance,

Alex

2

This sounds more like a browser hijack or adware/spyware.

If you haven’t already got this software (freeware), download, install, update and run it.

  1. Ad-Aware
  2. Spybot Search and Destroy
  3. Spywareblaster Don’t install this until you are clean.
  4. Ewido Security Suite If using winXP.
3

Hi eggz,

Download toolbarcop from here:
http://www.majorgeeks.com/download4126.html, and look what is legit or not. If you are not completely sure, you can ask advice from someone here in the forum.

Look down here for a screenshot:

greets.

polonus

4

Ok thanks im doing it now

5

Polonus

What version of ToolBarCop are you using (3.4) as your image doesn’t look like the one on the Homepage (from the ToolBar Help menu) and there doesn’t appear to be any layout options.

6

Hi, I think it may have been sorted, I forgot to mention that I use mozzila firefox (the latest version)

7

Ok I have done it all but still no avail I may have to re-format the c which Im not looking forward to.

I have a “unsubscribed” version of webroot sysweeer which finds

directrevenue-abetterinternet
ufp-007 spy software
accona toolbar
accona toolbar browser hijack
systemproccess
webhancer

I dont know if this is the problem but it is definatley consistent and Avast doesnt find anything so Im comletey stumped :expressionless:

Thanks

Eggz

8

If you don’t want to pay for Spysweeper, your options are Ewido and Ad-Aware, as David mentioned plus:

a-Squared http://www.emsisoft.com/en/ and:

Microsoft AntiSpyware, X-Cleaner, Pest Patrol (1 year free trial) and Trend Micro’s Anti-Spyware for the Web (online scan which removes malware.)

Links here:

http://www.geocities.com/dontsurfinthenude/spyremoval.htm

If Pest Patrol detects ACTSKIN4.OCX as malware, do not remove it: this is a false positive!

To check for worms, viruses and Trojans, try an online scan from Trend Micro Housecall, F-Secure, Panda etc.

(Disable avast first or you may get false positives.)

The Kaspersky online scanner probably has the quickest updates, but won’t delete malware- at least it will tell you what is infrcting your computer.

http://www.geocities.com/dontsurfinthenude/antivir2.htm

9

Frank, I’m not intendind to be rude in anyway, but I can’t imagine why you still recommend Pest Patrol.
For me, it’s one of the most ‘promisse-but-do-nothing’ application besides false positives.
It’s unbelivable that a serious company does not manage its false positives :stuck_out_tongue:
It’s ridiculous for me… a lot of time and still ACTSKIN4.OCX is detected as malware? Unbelivable…

10

It does get some good reviews:

Summary: Clean performance 
1. Lavasoft (smart system scan)
2. Computer Associates
3. Symantec (quick scan)

Infected performance

1. Computer Associates
2. Lavasoft (smart system scan)
3. Trend Micro

Accuracy in detection (out of 10)

1. Symantec (full scan) 9
2. Computer Associates 6
3. PC Tools (quick and full scans) 6 each</blockquote>

http://www.zdnet.com.au/reviews/software/security/0,39023452,39225147-13,00.htm

There is the false positive issue, but I seem to remember avast! destroying people’s iTunes installations a while back!

The program is nice to use, and there’s a free trial at the moment. It might be useful in detecting and removing things that Ad-Aware etc. miss. It has a restore function so any mistakes can easily be corrected.

In summary, good detection, but expect some false positives. Use at your own risk!

11

I think mainly related to merchandise agreements.

Miss a white list.

If I remember correctly, restore everything or nothing… can’t choose just one item. Maybe I’m wrong.

Detection, for me, is not better than Ad-aware, SpyBot, etc.

Anyway, just opinions 8)