Real hassle from virus/spyware

Browntoa

you are such a happy chap are'nt you

go have a nice cup of tea and chill ......

rosy

The etrust antivirus came with the PC when we bought it but have never used it after the initial free trial and did not sign up for it - I didn't think it was running at all, all I've been using is AVG. All I could find on the list of programs was a registration for e trust but I have removed it now. I will fix the thing you listed now - however I have now done the panda scan and although it's much better ( only 65 issues instead of the original 95!!! ) all the things such as longbarb eggs, fourbookgrimnoun stuff are all still there - this is after using AVG, ewido, adaware, Windows defender ( which I had to remove again as I could't use AOL properly with it on ) and hijack this. I'll try the hijack this again now, and will come back with a new log and the panda scan if it would help. Thanks again

Edited to add - didn't see your post about the home page - according to my control panel, internet options, my home page is google.

Edited again to add - I've just checked - it actually does come up as google when I click the home button at the top of the aol screen

Browntoa

I've got the feeling that the PC is clean, do you get pop-ups at all ???

did you reset the homepage ??

maybe Pchelpman may spot something I've missed

Donnie

Cheeky sod. You 'respond' to me without being addressed first and then tell me to chill.

With all of your talk, you haven't solved the problem.

My solution is simple. If rosy chooses not to follow it, that up to her.
Though I think the lack of a reply is either a mistake or extraordinarily rude.

Happy? Not to many people have my lifestyle. That why I have the time to help.
Clearly, the 'experts' don't like others treading on what they see as their domain.

rosy

Thanks, I have just fixed the last thing with hijackthis.

This is a summary of what is happening over the last few days: All of this started a few days ago when a program called Virus Burst seemed to install itself on the desk top and the taskbar saying it had found viruses and I should go to a certain website to purchase the antivirus product ( which I did not do). Since then I have been chasing Trojans round the PC and done what seems like hundreds of scans! ( I do update AVG virtually every day and adaware whenever there is a new update available and scan at least two or three times a week. In the couple of years I have had the PC I have only had about three or four viruses ( and that was before I installed AVG ) - in the last three days I have had loads!!!

I was getting French popups which have stopped.

I am still getting the McAfee firewall popping up ( three or four times now for different applications ) saying the application has been changed and do I still want it to access the internet. I have ignored it and the next time I log on it doesn't come up.

Within a few minutes of going on the internet, I have been getting flashed alerts from AVG with various viruses, even after it has just been scanned and either found one or two which I can seem to fix or when it has found none at all none at all. These virus alerts all seem to be coming one after the other with gaps in between.

None of the programs ( AVG, adaware, ewido ) are finding anything now. The only thing showing anything is the panda scan . It's the names of the things that make me wonder if there is still something deep rooted here drip feeding trojans. The panda scan still shows one unwanted application (Virus Burst )- ewido did clear something like that on it's first go but it is still on the other users desktop, though gone from mine - and there are still 65 bits of adware/spyware which do sound sinister and sound like viruses are being "hatched " and sent out one after the other ( words like longbarbeggs, ooze, army). I know that might be just to put the wind up me ( and its working! ) but it really does match what is happening on my PC! Is it worth posting the panda scan?

Thanks for the time and effort for this.

Browntoa

Donnie, you obviuosly have some anger issues that need resolving...

Rosy, download and run this

http://www.f-secure.com/blacklight/

and copy the log it produces here, the panda scan should also have produced a log, can you post that here as well ?

I think it may also be worth turning off system restore, then turniing it back on again as the files you see may be hiding in there

http://www.pchell.com/virus/systemrestore.shtml

To turn off Windows XP System Restore:

NOTE: These instructions assume that you are using the default Windows XP Start Menu and have not changed to the Classic Start menu. To re-enable the default menu, right-click Start, click Properties, click Start menu (not Classic) and then click OK.

1. Click Start.
2. Right-click the My Computer icon, and then click Properties.
3. Click the System Restore tab.
4. Check "Turn off System Restore" or "Turn off System Restore on all drives" as shown in this illustration:
5. Click Apply.
6. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
7. Click OK.
8. Proceed with what you need to do; for example, virus removal. When you have finished, restart the computer and follow the instructions in the next section to turn on System Restore.

To turn on Windows XP System Restore:
1. Click Start.
2. Right-click My Computer, and then click Properties.
3. Click the System Restore tab.
4. Uncheck "Turn off System Restore" or "Turn off System Restore on all drives."
5. Click Apply, and then click OK.

Donnie

So angry, that I can't spell 'obviously' and can't help 'responding' to someone who didn't address you in the first place.
Oh...that's you isn't it?

Browntoa

anything to keep you happy, you must have too much time on your hands....

Donnie

Lots.... Just back from holiday and off again next weekend.

Still 'responding'?

pchelpman

Rosy ... to fix any lingering Virus Burst issues follow this procedure.......

http://www.bleepingcomputer.com/forums/topic63896.html

Post a fresh HJT log with any other log(s) from scans you have managed to run.

ALSO ... please give us an update on how your computer is operating now.

PCH