Need Help PLEASE!

JasonMac · 01-04-2006, 09:45 AM

I am not sure what it is, but I am sure I got it in a email attachment. Anyway. On my infect computer if I connect to the internet the computer just keeps restarting itself over and over and over again. So the only way I am able to back my info up was to keep it offline. Well it took from 11 am until 3 am the next morning to backup 700mb. WOW! I know. The computer does a virus scan and locks up about half way through. I did do a S&D scan and found 2 Anti Virus and Fire Wall Overrides. I removed them and still nothing. It will not let me Norton Scan. I did do a Kasper Scan and it found 4 things of which 2 were spyware and it removed those 2 but was "unable" to delete the others. What can I do? I do have a jump drive if I need to download and move programs to do scans with. Please let me know. Keep in mind that I can NOT directly connect to the internet with the infected computer. Thanks!

Ried · 01-04-2006, 10:38 AM

Hello JasonMac,

Please download HijackThis - this program will help us determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\PROGRAM FILES\HIJACKTHIS\

Download Ewido Security Suite

Install Ewido Security Suite
When installing, under "Additional Options" uncheck..
- Install background guard
- Install scan via context menu
Double-click the icon on Desktop to launch Ewido

You will need to update Ewido to the latest definition files.

On the left hand side of the main screen click update.
Then click on Start Update.

The update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can use this link to manually update Ewido
When you have finished updating, EXIT Ewido.

**The update can be downloaded to your removable media device.

Reboot into Safe Mode to run Ewido.

Run Ewido. Click on the Scanner button in the left menu, then click on Complete System Scan. This scan can take quite a while to run.

If Ewido finds anything, it will pop up a notification. We have been finding some cases of false positives with the new version of Ewido, so we need to step through the fixes one-by-one. If Ewido finds something that you KNOW is legitimate (for example, parts of AVG Antivirus, pcAnywhere and the game "Risk" have been flagged), select "none" as the action.

DO NOT check "Perform action with all infections". If you are unsure of an entry, select "none" for the time being. I'll see that in the log you will post later and let you know if ewido needs to be run again.

When the scan finishes, click on "Save Report". This will create a text file. Make sure you know where to find this file again.

---------------------

Double click on HijackThis.exe to run the program.

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Post the hijackthis.log file and the results of the Ewido scan in the HijackThis Log Help forum. Do not fix anything in HijackThis since they may be harmless.

JasonMac · 01-04-2006, 12:00 PM

ok I posted my hijack log. Also to make sure I am doing this 100% correctly, how do I restart in "Safe Mode"? Will it give me that option once I have installed ewido?

JasonMac · 01-04-2006, 12:18 PM

It told me that I can not install ewido because either the file is corrupted, or a virus. So obviously it must be a virus.

01-04-2006, 09:45 AM	#1 (permalink)
JasonMac Registered User Join Date: Oct 2005 Posts: 14 OS: XP	Need Help PLEASE! I am not sure what it is, but I am sure I got it in a email attachment. Anyway. On my infect computer if I connect to the internet the computer just keeps restarting itself over and over and over again. So the only way I am able to back my info up was to keep it offline. Well it took from 11 am until 3 am the next morning to backup 700mb. WOW! I know. The computer does a virus scan and locks up about half way through. I did do a S&D scan and found 2 Anti Virus and Fire Wall Overrides. I removed them and still nothing. It will not let me Norton Scan. I did do a Kasper Scan and it found 4 things of which 2 were spyware and it removed those 2 but was "unable" to delete the others. What can I do? I do have a jump drive if I need to download and move programs to do scans with. Please let me know. Keep in mind that I can NOT directly connect to the internet with the infected computer. Thanks! Last edited by JasonMac; 01-04-2006 at 09:46 AM.

01-04-2006, 10:38 AM	#2 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,993 OS: WinXP and Vista	Hello JasonMac, Please download HijackThis - this program will help us determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded. Click on the "Unzip" button to install. It will by default install to the directory - C:\PROGRAM FILES\HIJACKTHIS\ Download Ewido Security Suite Install Ewido Security Suite When installing, under "Additional Options" uncheck.. Install background guard Install scan via context menu Double-click the icon on Desktop to launch Ewido You will need to update Ewido to the latest definition files. On the left hand side of the main screen click update. Then click on Start Update. The update will start and a progress bar will show the updates being installed. If you are having problems with the updater, you can use this link to manually update Ewido When you have finished updating, EXIT Ewido. The update can be downloaded to your removable media device. Reboot into Safe Mode to run Ewido. Run Ewido. Click on the Scanner button in the left menu, then click on Complete System Scan. This scan can take quite a while to run. If Ewido finds anything, it will pop up a notification. We have been finding some cases of false positives with the new version of Ewido, so we need to step through the fixes one-by-one. If Ewido finds something that you KNOW is legitimate (for example, parts of AVG Antivirus, pcAnywhere and the game "Risk" have been flagged), select "none" as the action. DO NOT check "Perform action with all infections". If you are unsure of an entry, select "none" for the time being. I'll see that in the log you will post later and let you know if ewido needs to be run again. When the scan finishes, click on "Save Report". This will create a text file. Make sure you know where to find this file again. --------------------- Double click on HijackThis.exe to run the program. 1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'. 2. If you don't get the intro screen, just hit Scan and then click on Save log. 3. Post the hijackthis.log file and the results of the Ewido** scan in the HijackThis Log Help forum. Do not fix anything in HijackThis since they may be harmless. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

01-04-2006, 12:00 PM	#3 (permalink)
JasonMac Registered User Join Date: Oct 2005 Posts: 14 OS: XP	ok I posted my hijack log. Also to make sure I am doing this 100% correctly, how do I restart in "Safe Mode"? Will it give me that option once I have installed ewido?

01-04-2006, 12:18 PM	#4 (permalink)
JasonMac Registered User Join Date: Oct 2005 Posts: 14 OS: XP	It told me that I can not install ewido because either the file is corrupted, or a virus. So obviously it must be a virus.