10 public posts in this discussion.
Well at the moment the pc is infected with Win32:Alureon-EU and avast keeps popping up with the virus detected etc etc, repair,delete,move to chest dont work. it just re pops up.
I looked on me m8 google and most of the solutions usually end up reformating or ending in bluescreen.
any ideas how to fix? its quite broad this question but im lost on what to do.
If you need more info, just ask away.
Plug drive into another computer and scan it that way.
its a eepc
Try this mate
Because that infection is also called Worm.Win32.AutoTDSS!IK, you might want to do this:
Click on Start, click Run, and then type devmgmt.msc and click OK
On the View menu click on Show hidden devices
Browse to Non-Plug and Play Drivers and you should see something like TDSSserv.sys
Highlight that driver and right click on it and select "DISABLE"
RESTART your computer.
Download a copy of Malwarebytes but DO NOT run it yet.
Download it from Malwarebytes Anti-Malware - Free software downloads and software reviews - CNET Download.com
You can also download it from http://www.gt500.org/malwarebytes/mbam.jsp
Rename the downloaded installer of malwarebytes to any name such as your mytools.exe or yourname.exe
Install by double-clicking the mytools.exe or yourname.exe
Once the program is installed go to the UPDATE tab and try to update the program if you can.
If you can't update MBAM, download the definitions manually:
http://malwarebytes.gt500.org/mbam-rules.exe
Next run a quick scan when the update is installed.
Or Download A2 Free (A2) A-squared Free - Free software downloads and software reviews - CNET Download.com
Install, Update then run a SmartScan (not the quick scan)
Go google lol
Quote from Piggy;376391:
Try this mate
Because that infection is also called Worm.Win32.AutoTDSS!IK, you might want to do this:
Click on Start, click Run, and then type devmgmt.msc and click OK
On the View menu click on Show hidden devices
Browse to Non-Plug and Play Drivers and you should see something like TDSSserv.sys
Highlight that driver and right click on it and select \"DISABLE\"
RESTART your computer.
Download a copy of Malwarebytes but DO NOT run it yet.
Download it from Malwarebytes Anti-Malware - Free software downloads and software reviews - CNET Download.com
You can also download it from http://www.gt500.org/malwarebytes/mbam.jsp
Rename the downloaded installer of malwarebytes to any name such as your mytools.exe or yourname.exe
Install by double-clicking the mytools.exe or yourname.exe
Once the program is installed go to the UPDATE tab and try to update the program if you can.
If you can't update MBAM, download the definitions manually:
http://malwarebytes.gt500.org/mbam-rules.exe
Next run a quick scan when the update is installed.
Or Download A2 Free (A2) A-squared Free - Free software downloads and software reviews - CNET Download.com
Install, Update then run a SmartScan (not the quick scan)
Go google lol
Thanks for that, i'll have a try of that when my friend is online. Because its her little pc thats infected.
maybe this picture may serve some help. Sorry about the size.
http://img14.imageshack.us/img14/4213/leahp.jpg
I think i got rid of the virus. But its these stupid rootkits that are in a pain to get rid off now. Also some program called "labiyvl" keeps wanting to connect to the internet, i suspect it to be malware but theres no information about it on google.
Also avast wont update its virus definitions even when i disabled the firewall. Just plain annoying now
Quote from Joshuayu101;376567:
I think i got rid of the virus. But its these stupid rootkits that are in a pain to get rid off now. Also some program called \\"labiyvl\\" keeps wanting to connect to the internet, i suspect it to be malware but theres no information about it on google.
you should try google: Google :)
you're running a zboard yeah? http://www.whatsrunning.net/QueryProcessID.aspx?Process=23428
nuke it from orbit, it's the only way to be sure.
nope not a zboard.
I think i solved the virus problem. Its weird that malwarebytes,spybot S&D, microsoft malicious thingy Jan2010, Avast, Sophus anti-rootkit, didnt pick up on the malware. The only way i found out that the labiyvl was really a virus was when i submited it to virus total and on their site only a 2-3virus scanners picked it up as a virus.
I had to use a program called a-squared and wow it detects stuff that i never thought would be there. Only problem is that their scanner isnt very optimized and takes a while to scan.
what basically happened with the pc was software called labiyvl kept copying the names of exe's that were loaded at startup and creating copys of them with different file names like for example java.exe ===> xcjava.exe and kept trying to connect to the internet. It was an ongoing cycle.
But now its over and later today i have to work on my friends sisters laptop and who knows what she has installed for me.