computer virus please help!!!?

Question

i asked a question days ago about removing a trojan virus. i had the yahoo online protection and adware, but it didn't seem to read it nor remove the virus. so i tried panda. panda did however remove some other stuff that it detected as harmful to my computer. but it says there was 4 other things that couldn'tbe removed and it was renamed. my question is should i leave it a that or how do i get rid of the trojan vrus i still have. it is a RUNDLL and it says wo3a2bd88.dd ( i don't know much about computers so i'm not sure what these mean). i wanted to go back to the initial restarting point or to a nother restarting point but my computer doesn't let me . i have an HP desktop. how can i go back or how can i get rid of this trojan virus. please help. thanks!.

Answer 1

The unfortunate thing when it comes to viruses and other similar problems is that even provided you do remove the actual virus you do not know what damage it has done before it was removed. The best thing to do always is reformat and start off fresh. Lack of experience could make this a problem for you but it is in all honesty the best thing that can be done in such a situation.

I have been relying on my computers for my work for years and since I use PC's I have encountered virus's and other similar problems and these days I keep a good backup of all my files and when a problem comes up (which it very rarely does since I protect my computers very heavily) I don't even think twice before reformatting and reinstalling windows. Is it a pain in the ***? Yes, but it is necessary more often then not.

Answer 2

If you are willing to come to my forum and follow my instructions, I could help you clear you system of whatever may be on it by providing you with detailed, easy to follow instructions.

Start off by following the instructions for posting a HijackThis log in this thread: http://malwaremedic.suddenlaunch3.com/index.cgi?board=Logs&action=display&num=1135140266

The log from the Panda scan would be of great use also.

Did you use the Panda AV or the online scanner "ActiveScan"???

Active scan only removes "Viruses" which make up an extremely small portion of todays threats. Trojans, worms keyloggers, spyware and adware are detected by ActiveScan, but not removed. I can however give you a link to a program, make a script to enter in that program, from the info in the Panda log, that will remove what you have left on your system.

BTW, if the file is renamed, it can't harm you. Without log files, I can't see what is going on with your system, so I'm limited to the info you provided for me here. I'm assuming what you tell me is correct.

If you already have and AV on your computer, please, do not listen to the advice of others and install a second one on top of it. It will do more harm than good. A HijackThis log will let me see what is running on your system so I could provide you with proper instructions for the removal process and set you up with a solid security solution.

PLEASE, DO NOT USE THE SYSTEM RESTORE FUNCTION!!! IT WILL PUT BACK WHAT YOU HAVE CLEANED. It should however remain on until you have finished the cleaning. I'd rather have an infected restore point to return to, than none at all if something goes wrong. After the cleanup is when you clear System Restore.
Best regards,

Windsor
Malware Medic Site Owner
http://malwaremedic.suddenlaunch3.com

Answer 3

This procedure looks long and complicated, it isn't. Just follow the steps and uses the ewido program and you will do just fine. ewido is the best Trojan remover available.

Download and Update Ewido (now called the AVG Antispyware). Do not run:

http://www.ewido.net/en/download/

TEMPORARILY SHOW HIDDEN FILES AND FOLDERS.

1. Click Start, and then click Control Panel.

2. Click Appearance and Themes, and then click Folder Options.

3. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.

IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


EMPTY INTERNET EXPLORER BROWSER CACHE:

1. On the Internet Explorer Tools menu, click Internet Options.

2. On the General tab, in the Temporary Internet Files section, click the Delete Files button. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK. Click OK again.

RESTART IN SAFE MODE:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



START THE SCAN WITH YOUR ANTI-VIRUS OR ANTI-SPYWARE PROGRAM.


When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode. DON'T FORGET TO RESET HIDDEN FILES AND FOLDERS.


NEW RESTORE POINT.

The RESTORE POINTS may be infected with the Malware and cannot be used.

HERE'S HOW:

1. Click Start, and then click Control Panel.

2. Click Performance and Maintenance, click System, and then click on the System Restore tab.

3. Select the Turn Off System Restore check box, click Apply, then restart your computer.

4. Return to the System Restore Tab and turn System Restore back on.


TO SET A NEW RESTORE POINT:

1. Click the Start button.

2. Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3. Choose Create a restore point, and then click Next.

4. In the Restore point description box, type a name for your restore point, and then click Next.

5. Click OK.

NOTE: If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the box. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.

Answer 4

Easy 10. Go to the below URL and on this site you can download Norton's antivirus for 30 days I think. They have three programs you can download for trial 30 days and that way you can have 90 days coverage. Anyway, the Nortons should remove your viruses. Now after you have successfully downloaded it, run it without the internet hooked up. The only bad thing I hate is the time it takes to do it., Like 6 hours. Before I go to bed, that is when I run it. Now if it takes care of business, then after the trial you can buy it. It is cheap too. In the store they may sell it with a rebate if you can supply a receipt of another antivirus program. You have to check.

Answer 5

Well, if you tried Panda and it detected it but wasn't able to remove it, then you have to get a little serious.

These instructions are a pain, but they are rock-solid, by the guys over at MajorGeeks:
http://forums.majorgeeks.com/showthread.php?t=35407

If you get to the end of that process and still have malware, then they will give you free support and tell you how to manually remove the malware from your computer. I've had to do this several times, and this process has never failed to work. It's time consuming, but it's probably the only surefire effective way to address malware I know.

Answer 6

Usually once a virus is on the computer you should start from scratch. You lose all data that isnt backed up, but at least you dont have to worry about people stealing info from your computer. If I was you I would reformat your hard drive. Your computer should have come with a disc that can do that for you. Just insert it and restart the computer and it should automatically start running, then follow the step by step procedure. Or you could take it to a professional and pay an arm and a leg to have them remove the virus.

Answer 7

Scan again and try and remove in safe mode.

In general, Windows does not allow the deletion of files when they are in use. However, Safe Mode will only load a minimum amount of drivers and services to run Windows, making removal a better bet. Scan again and attempt to delete while your computer is in safe mode.

To access Safe Mode, reboot then repeatedly press the F8 key at the first screen. When finished removing that pesky pest, reboot again to return to normal mode.

Answer 8

I would really advise you to get Avast! Antivirus. The software is great, and it blocks everything! I haven't gotten any viruses since, and if I did, it deleted them immedietly. For your problem I would also advise to use Webroot Spysweeper to clean your system. Also make sure to run your software in Safe Mode, so that way the viruses/spyware can be found easier.

Answer 9

How do you know it's a trojan virus? Try also using Spybot search and destroy. I find it catches things that most others do not.

Answer 10

Look there is a book on the library that is call protect your pc it teach you how to make virus and how to protec your pc.