Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Screwed With By Malware... Again
#1
Hmm, this is great. Well, yesterday, I contracted a greatly annoying virus from either an advertisement through a link from SP member Slip (in the BGM thread; BTW, new PQ music in KMST sounds awesome!) or before I logged on my own forum (after log-in, no ads, so…), both of which were brief experiences before Trend Micro went out of whack. Not to blame Slip or anyone, those were just the only visited places before the scenario. .-. A lot of pop-ups in the bottom-right corner from Trend Micro appeared alerting me of lethal files and then my computer froze (I think there was a noise too), then reverted to blue screen. I turned off and found nothing to work, safe modes going to blue screen and all, but finally I waited it out for a normal mode log-in and got on. I noticed a new file; Advanced Virus Remover, then I got off and luckily got into Safe Mode. I've dealt with too many bits of malware, each getting smarter each time, so I can't fall for it.

On safe mode with networking now and went to do a OneCare Safety Scan (from Microsoft), but only a quick one. Lots of messy crap found, then I did a Spy Sweep with Spy Sweeper and found only a spy cookie, but an alert would always be open about something being added to start-up, “lidovofim”, or something. Trying to remove it would do no good since the alert would reopen. I decided to load up my computer normal to find a scareware background, which DID scare me, but not into buying it. I’ve had to deal with a rough virus, Antivirus XP 08, despite it being the weaker version. That was just like this almost in a nutshell, except for the fact it’s not as bad compared to this one. When I tried to open MSN (besides IE8, my main browser as it came with my computer), it wouldn’t let me and a little icon in the bottom right corner appeared to say it wouldn’t open from some file being infected.

I did a Trend Micro scan in Safe Mode with Networking now and another OneCare scan (the long one that takes hours) and left my computer on overnight. I get up to find the Trend Micro done, it taking out a fake background file before I left (I believe), four obvious trojans caught by the OneCare. I go into my C:\ folder to find random executables in there, so I delete them and then again from the Recycling Bin. I go back to my main account to find the background gone, all seeming normal, but a blank spot where my Nintendo Wi-Fi Connector icon shows up (well, the roll-over text said that). Then the Advanced Virus Remover icon reappears, starts-up (I shut down), and EVERYTHING back to normal… with the virus restored and everything. WTHeck. Frown

I seem to get a virus offhanded from a bad ad once every two months or so, unluckily, and I know there are programs like HiJackThis and such that can show where an issue may lie, but I still don’t know what it will tell me. Can you tech-savvies assist me? Maybe I’m good with computers, but the malware trips get even more worse for me. Other things I didn’t point out was random pop-ups every ~10 minutes on the internet (browsing extremely safe and limited; guess how I posted here?) and System Restore being disabled. I tried to undisable but it didn’t work out, but the restore points are probably deleted anyway.

-Chuey
Reply
#2
That's....a REALLY bad problem. When I get those, I can usually get rid of them and that be the end of it. This is like...O.O
Reply
#3
Hmm. Try downloading Panda Global Protection 2010, and see what that comes up with.

You can download it at http://www.pandasecurity.com.
Reply
#4
I suggest running Malwarebytes Anti-Malware. It will get rid of the remaining stuff that other scanners CAN miss.

Just update it and run a quick scan. My brother got hit by spyware by accident once, and about quick scans of it removed all traces of it.
Reply
#5
Um, just for the future, if you're having problems like this, you should consider getting Firefox and installing the Adblock and Noscript add-ons. Adblock makes it so you never see ads, and noscript blocks all scripts except those that you white list. Noscript does take a little bit of getting used to, since everytime you visit a new site that uses Java, you have to allow it, but you're basically virus proof unless you download something or allow a malicious site.
Reply
#6
TKWizard Wrote:I suggest running Malwarebytes Anti-Malware. It will get rid of the remaining stuff that other scanners CAN miss.

Just update it and run a quick scan. My brother got hit by spyware by accident once, and about quick scans of it removed all traces of it.

Took a while, but I FINALLY got it done. Except my MSN mail is screwed up now and...

[Image: 2cp97ro.png]

The last "piece" of this virus that won't go away. .-. When Id di the first scan with Malwarebytes, it found 73 infected files/keys/etc. 73. Frown Also, in the lower right corner is an invisible "spot", where it says my Nintendo WFC Connector can't be found when scrolled over... (mentioned before)

Edit: Plugged in my connector and it finally came up after some time, then unplugged. It was just a tiny error. Last file is the only issue left.
Reply
#7
Chuey Wrote:Took a while, but I FINALLY got it done. Except my MSN mail is screwed up now and...

[Image: 2cp97ro.png]

The last "piece" of this virus that won't go away. .-. When Id di the first scan with Malwarebytes, it found 73 infected files/keys/etc. 73. Frown Also, in the lower right corner is an invisible "spot", where it says my Nintendo WFC Connector can't be found when scrolled over... (mentioned before)

I use Malwarebytes' Anti-Malware too, and I was once stuck with one of those fake anti-virus things. MBAM managed to get rid of the virus, but it also deleted MSN mail. I had to re-install MSN to get it to work again.
Reply
#8
PirateIzzy Wrote:I use Malwarebytes' Anti-Malware too, and I was once stuck with one of those fake anti-virus things. MBAM managed to get rid of the virus, but it also deleted MSN mail. I had to re-install MSN to get it to work again.

I'm using a program called Driver Detective, it still setting up. I'm just curious if I'll be able to take out that last file or not.

Edit: Shoot, it was one of those "scan to see" and "buy to fix" programs. .-. I still need some assistance after all, fixing my mail and this icon issue with my Wi-Fi Connector and whatnot...
Reply
#9
Wow, so scanning in Safe Mode didn't help at all? o_o Have you tried using Spybot S&D?
Reply
#10
Turns out this was from a trojan called Trojan.Vundo. I tried a program set to get rid of it specifically from Symantec, but leaving it to look at something else and going back to it leaves it to not finish and not respond. Checking out what you posted Karen, but the trojan is not fully gone after all.
Reply
#11
I recently found the same virus on my mom's computer. Symantec has a fix you can download for it.

I don't claim to have some great understanding of computers and how they work, but it could just be a number of simple registry errors? If that's the case you can download CCleaner and use the registry fix function on it to see if it will fix it for you. You can also use it's other function to clear out your temporary Internet files, etc.

Let me know if that helps at all :3
Reply
#12
Reply
#13
Quote:Go to Start > Run > type cmd and then click the "OK" button.
Unregister HUKODARE.DLL file, type in the directory path + "regsvr32 /u HUKODARE.DLL "and press the "Enter" button. A message will pop up that says you successfully unregistered the file.
Restart your computer,after you power on your computer, repeatedly press the F8 key,choose Safe Mode and presss Enter. Delete HUKODARE.DLL . Restart your computer.

try that? Hurt
Reply
#14
Well, seems kinda risky since I can't use System Restore... anyone know how to fix it? .-.

Computer Wrote:System Restore has been turned off by group policy. To turn on System Restore, contact your domain Administrator.

Edit: Currently working on doing this. Once System Restore is fixed I'll work on hukodare.

Edit 2: No luck with System Restore, despite myself deleting one of the two possible registry keys to disable it. What the heck. .-. I DID delete hukodare in Safe Mode without any trouble with unregistering or anything. I just need to get System Restore back...

EDIT THREE: Saved System Restore! I finally found a fix, but didn't check it to find out more. Then when I got the list of a bunch of XP fixes, I forgot the number. Looking around more and losing hope, I FINALLY got the number again; 278. I got the fix and System Restore is BACK! Everything's better... except MSN Mail.... The FINAL hurdle!

Edit Quatre: MSN Mail can be accessed through a link on the homepage, so not too big of an issue. This is FINALLY over with. Thank god. Now I can go to a Little Big Town concert tonight and go on an MoN run tomorrow.

Edit Five THE NEXT DAY: Fixed MSN Mail. Took literally no time at all when I found out what to do.
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)