Antivirus Protection
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed Forums > System Administration > Antivirus Protection
Reload this Page

Help with viruses

Discuss Help with viruses in the Antivirus Protection forum on Dev Shed.
Help with viruses Antivirus Protection forum discussing issues relating to antivirus programs, spyware, hijack protection, and personal firewalls for all operating systems. Keep your systems protected from hackers and other hazards.

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
« Previous Thread | Next Thread »  
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old April 28th, 2005, 05:00 AM
sad.machine sad.machine is offline
I hate nerds
Dev Shed Novice (500 - 999 posts)
  
Join Date: Jul 2003
Posts: 533 sad.machine Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 20 h 48 m 41 sec
Reputation Power: 0
Help with viruses
I got two Trojans (I forgot the name), but they involve

C:\Windows\Microsoft.NET\cranti.dll

and

C:\Windows\System32\req.dat

Trendmicros tips involved deleting registry entries so that the next time I start my computer these viruses would not start to use these files and then I could delete them.

However when I delete the registry entries they come back up next time I start windows!

I can't get rid of these viruses and I dont want to reinstall everything so any help is appreciated.
Reply With Quote
  #2  
Old April 28th, 2005, 07:30 AM
aitken325i's Avatar
aitken325i aitken325i is offline
At a NO MA'AM meeting . . . .
Dev Shed God 18th Plane (13500 - 13999 posts)
  
Join Date: Mar 2004
Location: nr Edinburgh, Scotland
Posts: 13,542 aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)  Folding Points: 10110 Folding Title: Novice Folder
Time spent in forums: 5 Months 2 Weeks 1 Day 7 h 14 m 18 sec
Reputation Power: 1952
I think you would have been better posting this in the Antu-Virus forum. I believe that they can sometimes be removed by using HiJackThis (or some other program they use in that forum, not been in there for a while ). Check the stickys in that forum for more guidance on that.
__________________
The No Ma'am commandments:

1.) It is O.K. to call hooters 'knockers' and sometimes snack trays
2.) It is wrong to be French
3.) It is O.K. to put all bad people in a giant meat grinder
4.) Lawyers, see rule 3
5.) It is O.K. to drive a gas guzzler if it helps you get babes
6.) Everyone should car pool but me
7.) Bring back the word 'stewardesses'
8.) Synchronized swimming is not a sport
9.) Mud wrestling is a sport
Reply With Quote
  #3  
Old April 28th, 2005, 11:56 AM
Dngrsone's Avatar
Dngrsone Dngrsone is offline
Infernal Technomancer
Dev Shed Novice (500 - 999 posts)
  
Join Date: Apr 2005
Location: Centrally located far from everywhere
Posts: 950 Dngrsone User rank is Second Lieutenant (5000 - 10000 Reputation Level)Dngrsone User rank is Second Lieutenant (5000 - 10000 Reputation Level)Dngrsone User rank is Second Lieutenant (5000 - 10000 Reputation Level)Dngrsone User rank is Second Lieutenant (5000 - 10000 Reputation Level)Dngrsone User rank is Second Lieutenant (5000 - 10000 Reputation Level)Dngrsone User rank is Second Lieutenant (5000 - 10000 Reputation Level)Dngrsone User rank is Second Lieutenant (5000 - 10000 Reputation Level)  Folding Points: 340293 Folding Title: Super Ultimate Folder - Level 1Folding Points: 340293 Folding Title: Super Ultimate Folder - Level 1Folding Points: 340293 Folding Title: Super Ultimate Folder - Level 1Folding Points: 340293 Folding Title: Super Ultimate Folder - Level 1Folding Points: 340293 Folding Title: Super Ultimate Folder - Level 1Folding Points: 340293 Folding Title: Super Ultimate Folder - Level 1
Time spent in forums: 1 Week 16 h 34 m 19 sec
Reputation Power: 92
Send a message via ICQ to Dngrsone Send a message via Yahoo to Dngrsone
There is something else installing those files. Download Highjack this and install it into its own folder, run it and post the output into the Antivirus forum as aitken said.

Did you perform those registry entries fomr safe mode? that would be your best bet... but post that log in the AV forum and the guys in there will tell you the best way to go about recovering your system.
Reply With Quote
  #4  
Old April 28th, 2005, 03:42 PM
edwinbrains's Avatar
edwinbrains edwinbrains is offline
Retired Moderator
Dev Shed God 4th Plane (6500 - 6999 posts)
  
Join Date: Jan 2004
Location: London, UK
Posts: 6,670 edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)  Folding Points: 85411 Folding Title: Advanced FolderFolding Points: 85411 Folding Title: Advanced FolderFolding Points: 85411 Folding Title: Advanced FolderFolding Points: 85411 Folding Title: Advanced FolderFolding Points: 85411 Folding Title: Advanced Folder
Time spent in forums: 1 Week 6 Days 23 h 39 m 19 sec
Reputation Power: 92
Thread moved from Windows Help to Antivirus Protection.
__________________
- Edwin -

The General Rules Thread | The General FAQ Thread
Reply With Quote
  #5  
Old May 2nd, 2005, 12:46 PM
Tom Myboy Tom Myboy is offline
Contributing User
Dev Shed Regular (2000 - 2499 posts)
  
Join Date: Aug 2003
Posts: 2,491 Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 3 Days 20 h 13 m 41 sec
Reputation Power: 14
Hi sad.machine,

If you still need help, please post a HijackThis log.

Please download HijackThis. Make sure you install HijackThis to a permanent folder such as C:\HJT as it creates backups of what we will fix.

Run the program, click the button at the top "Do a system scan and save a logfile". Save the log to a convenient place such as C:\HJT Notepad will open, copy and paste the entire log into your post. Do not fix anything yet, most of what's in the log is needed!

http://www.majorgeeks.com/download3155.html

Tom
__________________
HijackThis
Ad-aware
Spybot Search & Destroy
SpywareBlaster
SpywareGuard
Housecall Online A/V Scan
Please read the stickys at the top of the forum before posting!
Reply With Quote
  #6  
Old May 2nd, 2005, 02:03 PM
sad.machine sad.machine is offline
I hate nerds
Dev Shed Novice (500 - 999 posts)
  
Join Date: Jul 2003
Posts: 533 sad.machine Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 20 h 48 m 41 sec
Reputation Power: 0
tommy boy

thanks for follwing up. i have been really busy and am making do on my infected computer because i have some deadlines.

im avoiding logging into bank accounts, etc for fear of information theft.

in about a week ill post the log.

thanks again for following up!
Reply With Quote
  #7  
Old May 5th, 2005, 09:53 PM
Tom Myboy Tom Myboy is offline
Contributing User
Dev Shed Regular (2000 - 2499 posts)
  
Join Date: Aug 2003
Posts: 2,491 Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 3 Days 20 h 13 m 41 sec
Reputation Power: 14
No problem, post a log when you can.

Tom
Reply With Quote
Reply

Viewing: Dev Shed Forums > System Administration > Antivirus Protection > Help with viruses

« Previous Thread | Next Thread »

Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Linear Mode Linear Mode
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 6 hosted by Hostway. 
Stay green...Green IT