05 Sep, 08:47PM in sunny Singapore!
Home → IT Support and Tech Corner →

Virus sos?

Subscribe to Virus sos? 35 posts

Please Login or Signup to reply.
  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
    • 09 Jul `08, 7:03PM

      Oh shoots, i tink i mistakedly downloaded virus thinking that it is a codec for videos.

       

      Is there any free software that I can download to get rid of the virus??

       

      Thanks alot!

       

      The virus keeps prompting me to somewebsite to download their program to protect privacy. Damn boh liao.. 

  • mr_sotong
    mr_sotong's Avatar
    9,662 posts since Sep '03
  • dumbdumb!
    dumbdumb!'s Avatar
    11,876 posts since Jan '03
  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
    • 09 Jul `08, 7:18PM

      This is my desktop right now. I tink this virus is pretty common, anyone noes how to get rid of it?

  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
    • 09 Jul `08, 7:19PM

      So the only thing i can do now is

       

      1) Reformatt comp

       

      2) buy anti virus software?

  • MyPillowTalks
    MyPillowTalks's Avatar
    15,006 posts since Nov '06
    • 09 Jul `08, 7:39PM

      tio before, is u downlaod a codec

      i will recommend u to use combofix to fix

      but scan a log for mayi to see first

  • Moderator
    ndmmxiaomayi
    ndmmxiaomayi's Avatar
    53,111 posts since Aug '05
  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
    • 10 Jul `08, 1:30AM

      ya lor ya lor this virus is quite old liao.

       

      I read stickies le, and i decided to download antivirus works and spybot-search and destroy.

       

      Hope can work.

  • Moderator
    LatecomerX
    The only cure for procrastination is a terminal illness.
    LatecomerX's Avatar
    2,069 posts since May '07
    • 10 Jul `08, 4:12AM

      She's referring to the sticky to upload a HijackThis log to Mediafire and posting the link to the log here.

      And I see Lancraft there. DotA? 

       

  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
    • 10 Jul `08, 7:23AM

      DotA is for my DotA-siao brother XD.

       

      http://www.mediafire.com/?bdtmdyeeljy

       

      Is this the log file? Anyways i tink my comp is fine le! Except for the bottom left hand corner where the time is says "VIRUS ALERT!"

       

      So i guess 'Search and Destroy' kinda fixed the problem le. Right? confused.png

  • Moderator
    ndmmxiaomayi
    ndmmxiaomayi's Avatar
    53,111 posts since Aug '05
  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
    • 11 Jul `08, 1:04AM

      wah new pattern ar??

       

      My windows is working fine, except sumtimes it still prompt me to dl the file. Other den that it's ok.

  • Moderator
    ndmmxiaomayi
    ndmmxiaomayi's Avatar
    53,111 posts since Aug '05
    • 11 Jul `08, 1:05AM

      LOL... you got an assortment of old and new viruses.

      Virus Alert near the clock - New

      That bio hazard background - Old

      In between, add Vundo.

      Disable AntiVir as it will interfere with Combofix.

      This topic contains the instructions for disabling AntiVir Antivirus (find the one with umbrella icon) - http://www.bleepingcomputer.com/forums/topic114351.html

      If you already have Combofix, please delete this copy and download it again as it's being updated regularly.

      Please visit this webpage for download links, and instructions for running the tool:

      http://www.bleepingcomputer.com/combofix/how-to-use-combofix

      Please ensure you read this guide carefully and install the Recovery Console first.

      The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

      Once Recovery Console is installed, you should see a blue screen prompt like the one below:

      RC_whatnext.gif

      Click Yes to allow Combofix to continue scanning for malware.

      When done, a log will be produced. Please post that log and a new HijackThis log in your next reply.

      Do not mouse click on Combofix while it is running. That may cause it to stall.

      Upload all the logs to Mediafire as usual so sgF don't eat up the letters.

      Edited by ndmmxiaomayi 11 Jul `08, 1:08AM
  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
  • Moderator
    ndmmxiaomayi
    ndmmxiaomayi's Avatar
    53,111 posts since Aug '05
    • 11 Jul `08, 1:12AM

      Most likely I will check back tomorrow. You can just post if you want. biggrin.png

      Edited by ndmmxiaomayi 11 Jul `08, 1:13AM
  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
    • 11 Jul `08, 1:15AM

      can can tml den check back ba, i go take my time look around the web.

      I beri IT idiot one. icon_mrgreen.gif

  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
    • 11 Jul `08, 1:48AM

      Fwah i do the Combofix liao. Reali power lehs!

      No more VIRUS ALERT beside my computer clock liao!

       

      And i can see more items on my desktop now~ I tink the virus block some programs last time.

       

      http://www.mediafire.com/?f3vbdtmjttz

       

      This is the new media log file. Should be ok le rites?? XD

      Sho happi~

  • Moderator
    ndmmxiaomayi
    ndmmxiaomayi's Avatar
    53,111 posts since Aug '05
    • 11 Jul `08, 3:35PM

      biggrin.png

      Please upload the Combofix log to Mediafire. There may be some leftovers.

      Log can be found at C:\Combofix.txt

  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
    • 11 Jul `08, 3:56PM

      Ok i upload later k.

      Coz my brother is back from camp and he's hogging the comp. =_=

       

      Thanks alot yea!~

  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
  • Moderator
    ndmmxiaomayi
    ndmmxiaomayi's Avatar
    53,111 posts since Aug '05
    • 12 Jul `08, 12:38PM

      The wrong version of Recovery Console has been installed. We need to get it removed and re-install the correct version. Please ensure that you read through all instructions carefully. If any of the steps are unclear, please let me know.

      Show hidden files and folders

       

      1. Open My Computer.
      2. Go to Tools > Folder Options.
      3. Select the View tab.
      4. Scroll down to Hidden files and folders.
      5. Select Show hidden files and folders.
      6. Uncheck (untick) Hide extensions of known file types.
      7. Uncheck (untick) Hide protected operating system files (Recommended).
      8. Click Yes when prompted.
      9. Click OK.

       

      Step 1

      Delete this file, it's on your desktop.

      C:\Documents and Settings\Administrator\Desktop\WinXP_EN_HOM_BF.EXE

      Step 2

      Delete this folder - C:\cmdcons

      Step 3

      Delete this file file - C:\Boot.ini

      Step 4

      Right click on this file - C:\Boot.bak and select Rename.

      Copy and paste in Boot.ini and press Enter.

      Let me know when you have done all 4 steps. Don't restart your computer yet.

  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
    • 12 Jul `08, 1:04PM

      I cant find c:\boot.ini in my C drive though when i type c:\boot.ini i can find it.

       

      As in, i don't see boot.ini file in c:\

  • Moderator
    ndmmxiaomayi
    ndmmxiaomayi's Avatar
    53,111 posts since Aug '05
  • motoway
    motoway's Avatar
    5,698 posts since Dec '05
  • Moderator
    ndmmxiaomayi
    ndmmxiaomayi's Avatar
    53,111 posts since Aug '05
Please Login or Signup to reply.