SERIOUS VIRUS/TROJAN ISSUE ON LAPTOP
SERIOUS VIRUS/TROJAN ISSUE ON LAPTOP
Author
Discussion

RetroCosworth

Original Poster:

7,211 posts

221 months

Thursday 28th January 2010
quotequote all
Evening all,

I've got quite a serious issue on my laptop. I've tried my best to the remove the dll issue with Search and Destroy, and Anti-Malware but it isn't going.

What should I do?

Cheers

Charlie

David Godfrey

3,857 posts

241 months

Thursday 28th January 2010
quotequote all
I'd recommend giving malwarebytes a go.

lestag

4,614 posts

293 months

Friday 29th January 2010
quotequote all
David Godfrey said:
I'd recommend giving malwarebytes a go.
Also Malicious Software Removal Tool

The_Jackal

4,854 posts

214 months

Friday 29th January 2010
quotequote all
Boot into Safe Mode and run Malwarebytes.
That should sort most things.

What Antivirus are you running?

lestag

4,614 posts

293 months

Friday 29th January 2010
quotequote all
It is also worth noting that malwarebytes can throw up quite a few false positives. MSRT is less agressive, but with any of these, make sue your data is backed up first

RetroCosworth

Original Poster:

7,211 posts

221 months

Friday 29th January 2010
quotequote all
Well I've found out what it is.

http://www.microsoft.com/security/portal/Threat/En...

It would appear that Microsoft Security Essentials can't get rid of it.

Who me ?

7,455 posts

229 months

Friday 29th January 2010
quotequote all
If you've got a name -try http://www.symantec.com/norton/security_response/i...

It's symantec site ,which has dedicated removal tools which you can download .

lestag

4,614 posts

293 months

Saturday 30th January 2010
quotequote all
RetroCosworth said:
Well I've found out what it is.

http://www.microsoft.com/security/portal/Threat/En...

It would appear that Microsoft Security Essentials can't get rid of it.
It's probably a more recent version of the virus (trend shows 23 variants)
are your MSE definitions up to date 1.75.167.0
Did you try the MSRT i suggested?
You could download Trend Internet security evaluation version, install and update the definitions and do full scan
http://uk.trendmicro.com/uk/downloads/home-and-hom...

TheEnd

15,370 posts

205 months

Saturday 30th January 2010
quotequote all
if that fails, there is a couple of stronger under the counter remedies.

I needed to use one earlier in the week when there was a hidden rootkit on my laptop which would redirect search results. Trendmicro, Panda active scan, malwarebytes, ad-aware, and spybot couldn't find it, so i went for a hardcore program.

The one i used is called combofix, it's free, but only available from one place, and what it does is download windows recovery console (in effect, the install disc files) scan all the system files and replaces the ones that are different. Not many programs can get rid of them as there are core system files that are infected, deleting then means the PC won't start up.

http://www.bleepingcomputer.com/combofix/how-to-us...


chr15b

3,467 posts

207 months

Saturday 30th January 2010
quotequote all
Format, start again

spants

1,083 posts

244 months

Saturday 30th January 2010
quotequote all
some links for you:

http://www.superantispyware.com/portablescanner.ht...
http://wiki.lunarsoft.net/wiki/Anti-Malware_Toolki...
http://www.jeremyroe.net/?cat=73

Usually all can be cleared without reformatting - this is a last resort and something that "shops" will say because it takes time to clear bad infections and people are not going to pay for more than a couple of hours work....

so this is what I do (not all!),
1) try booting safe mode and run a good av prog.
2) look at trend housecall online scanner.
3) use a bootable windows key and do 2 (cold boot)
4) use a rebuild xp/vista option to reinstall the os but leaving data/progs intact and do 1 again

hth
Tony