I Got Spyware In My Pc!

[pat123]

try mo combofix hanapin mo sa free stuffs for members..sa softwares...

[HeinrichCu]

try

 

AVIRA antivir

 

search the internet

 

it works :thumbsupsmiley:

[NigerianMinisterOfFinance]

hello,

 

I have malware problem with my pc and it just wont go away

 

Autoit.BQ, path C:\WINDOWS\system32\blastclnnn.exe

C:\WINDOWS\SSCVIHOST.exe

 

Worm/AutoRun.G path \WINDOWS\system32\autorun.ini

 

I have tried AVG, Clamwin, SpyBot, Adaware but the malware just wont go away

 

What is the proper procedure for removal?

Thanks in advance!

[itikbitik]

try counterspy

[hondacity]

try housecall from trend micro

 

search string: trend micro housecall

[NigerianMinisterOfFinance]

try housecall from trend micro

 

search string: trend micro housecall

 

hello,

 

i already scanned with housecall, it identified the malware but it cant remove the malware.

[sexylicious08]

try to use smitfraudfix ( http://www.box.net/shared/ohaly395yo )

 

or

 

vundofix ( http://www.atribune.org/content/view/24/2/ )

 

 

:thumbsupsmiley:

 

or PM me for other removal tools.

[hondacity]

hello,

 

i already scanned with housecall, it identified the malware but it cant remove the malware.

 

gimme the virus name...

 

there are lots of methods...

 

there virus removal tools...scripts..etc

 

and then last resort: manual removal...freaky for the norms

[NigerianMinisterOfFinance]

AVG identifies these malware as:

 

-Autoit.BQ

-Worm/AutoRun.G

 

Other AV software uses different name for them.

The malware spreads mainly thru USB removable drives.

Then it infects C:\WINDOWS\system32

Then it disables the Registry Editor and Task Manager.

It creates"*.exe files" that try to connect to the internet ( ex. blastclnnn.exe, SSCVIHOST.exe, messengger.exe) and opens up the pc for other malware to enter.

Edited February 15, 2008 by NigerianMinisterOfFinance

[NigerianMinisterOfFinance]

gimme the virus name...

 

there are lots of methods...

 

there virus removal tools...scripts..etc

 

and then last resort: manual removal...freaky for the norms

 

AVG identifies these malware as:

 

-Autoit.BQ

-Worm/AutoRun.G

 

Other AV software uses different name for them.

The malware spreads mainly thru USB removable drives.

Then it infects C:\WINDOWS\system32

Then it disables the Registry Editor and Task Manager.

It creates"*.exe files" that try to connect to the internet ( ex. blastclnnn.exe, SSCVIHOST.exe, messengger.exe) and opens up the pc for other malware to enter.

[QAZAR]

Compatible ba ang Kaspersky antivi and NoD32 na mag run? or should I pair kaspersky with Spyware Dr. na lang?

[koki2006]

rule of thumb only use 1 anti-virus but can have lots of anti-spyware, firewall isw also a nice addition don't forget never turn it off mga first aid to pag meron k n infection try to run combofix sa safemode ( http://tinyurl.com/27gkbc ) and sabayan mo p sdfix search mo na lng pag d p din kaya tawagan mo ako or pm mo ako i'll be more than happy to help you basta b libre ako ok?

[QAZAR]

Thanks for the info. Pansin ko kasi strict ng kaspersky (which I like) the problem kasi hindi lang ako gumagamit ng PC and hindi alam ng siblings ko what to do whenever they receive a notice for action. Anyway I installed NoD32, Spyware Dr. and Kaspersky the last one however I disabled and just use it for backup. Any suggestions for a good firewall for the common user? I hate tweaking configs kasi baka masira ko, buti sana kung solo ko ung PC then I can do what ever I like nyahahaha. Thanks Again :)

[koki2006]

sa file hippo, meron dun comodo DL mo madali lng un no need to tweak much free lgn din pala un

[Kurtsky Keigee]

I have the ff at startup in msconfig fsfebtfw (RunDll32.exe)

dumprep 0 -k (Located sa systemroot) Pero pagcheck ko ng location ng file

Binura ko na sa System, mukhang ok na. Ung RunDLL32 nalang

 

Pag check ko located siya sa (C:\WINDOWS\System32

I tried deleting it, ran Antivirus in safe mode and Anti Spyware

Pero bumabalik siya eh. Andun parin sa startup, ung file andun ulit sa system32

 

Any advice?