Spyware and Viruses. Keep coming back.

bazza1603

Hi,

Can Anyone help.

I downloaded a program a few weeks ago and ended up with about 14 viruses. It took me 48 hours to think I had finally got rid of them all. However they seem to reappear after 72 hours.

I protected my machine with Norton 2006, Adware and Microsoft Antivirus.

Today I have found

ADWARE.DOLLARREVENUE
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[95]=Regkey : software\microsoft\downloadmanager
obj[96]=RegValue : software\microsoft\windows\currentversion\run "timessquare"
obj[105]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033228.exe

CMDSERVICES
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[97]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP333\A0033180.exe

TARGETSAVERS
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[98]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP333\A0033182.exe
obj[99]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033217.exe
obj[100]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033219.exe
obj[101]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033223.exe
obj[102]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033224.exe
obj[103]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033225.exe
obj[104]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033226.dll

ADWARE.Z-QUEST
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[106]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP335\A0033343.exe

ADWARE.DOLLARREVENUE
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[95]=Regkey : software\microsoft\downloadmanager
obj[96]=RegValue : software\microsoft\windows\currentversion\run "timessquare"
obj[105]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033228.exe

CMDSERVICES
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[97]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP333\A0033180.exe

TARGETSAVERS
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[98]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP333\A0033182.exe
obj[99]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033217.exe
obj[100]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033219.exe
obj[101]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033223.exe
obj[102]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033224.exe
obj[103]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033225.exe
obj[104]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP334\A0033226.dll

ADWARE.Z-QUEST
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[106]=File : C:\System Volume Information\_restore{179001E5-6952-451B-A2F3-CCACA9C8CC55}\RP335\A0033343.exe

Source: Manual Scanner
Risk category: Virus
Click for more information about this risk : Trojan.Dropper
Action taken: Deleted
Description: Affected areas:
1 Files:
C:\RECYCLER\S-1-5-21-1197206543-3743433867-2044492220-500\Dc49.exe - Deleted

Can Anyone suggest whats going on and how I can stop the buggers coming back?

Best regards

Barry

CIS

They're hiding in your system restore, yoiu'll need to turn off teh system restore and tehn reboot , once you've rebooted you can run your antivirus program.

This should clear them out completley allowing you to re-enable your system restore.

One problem is though that you will loose the ability to system restore back to a date prior to when you re-enable system restore, but its the only way to really clear out the virii.

Turn off system restore by CONTROL PANEL > SYSTEM > SYSTEM RESTORE

Browntoa

while you are at it download Ewido fro www.ewido.net and run that with your anti virus while in safe mode

there is a full guide to removal here

http://forums.moneysavingexpert.com/showthread.html?t=133269