In big trouble - worms on my mum's new p.c - help appreciated

worc1146

Hi all,

I downloaded a software file for my sound card last week and appear to have succeeded in acquiring a worm or some sort which tries to break my dial-up connection and dial a premium rate !!!!!! line. I have Ad-aware, Spybot search & destroy and AVG antivirus which are all up-to-date. Running AVG in safe mode picks up nothing. Ad-aware has spotted its a coulomb dialer. The main problem I've got is despite running these programs and deleting all that they find, the problem keeps returning. I haven't managed to eradicate it completely. Various programs are trying to load up my Tesco dial up - these were jusched.exe, svchst.exe - I searched these on Sophos and deleted appropriate registry keys which got rid of them. Currently a program called winagent.exe is trying to open tesco dial up when I boot up. Beginning to wonder what else I can do before I format the lot. Any ideas from you techie wizards?

Please help me out - my parents are not pleased their new p.c has been compromised!

Thank you very much.

Nicola

m00nie

read opportunitys notes on sytem restore/safe mode


hth

Tony_H_3

Use Google / Yahoo to search for Panda Active Scan.....


This virus scanner is an absolute gem, just follow the instructions!!

aussielle

you can find Panda here

david78

When you have got rid of it secure your on-line future install a copy of spyware blaster. (Search for it on Google).

Smiley_Mum

I had that Winagent.exe virus on my computer just before Christmas and it got so bad that I had to put my pc into a store in town to get it checked over and have everything reinstalled, cost me £170!!! I tried everything too and it eventually left me with all my programs frozen, locked everything and couldn't do a thing with it. Good Luck!!

gatita

Hello There,
When my computer was infected with all sorts of nasties, and yes, I too had all the usual safeguards! the only thing that FINALLY got rid of everything was this:

http://hijackthis.de/index.php?
a truly amazing programme.

Run this, and then look a this site to Analyse the results
http://hjt.wizardsofwebsites.com/

You will find that this will definitely get rid of all your nasties! OH YES........
when you ran Spybot, Adaware etc. did you remember to TURN OFF System Restore? if not, any virus, worm etc will stay there! (make sure to turn it on again after the scans lol)

worc1146

Many thanks for all your help. Trying out your suggestions now. Fingers crossed!

Enjoy the rest of your weekend.


Nicola