Brontok Worm on my comp

Stephen_Leak

The little so-and-so, is probably hiding in the "registry" where Windows keeps all the settings it needs to start up. Therefore, it also reloads Brontok every time as well.

Have you tried powering up the PC whilst hitting the F8 key, which boots the PC in "Safe Mode". Malware detection and removal is usually a lot more effective in "Safe Mode".

Donnie

Download these three files; http://www.badongo.com/file/2675554
http://www.badongo.com/file/2675555
http://www.badongo.com/file/2675556

Instructions are included in the .doc file

albertross_2

I suggest getting a clean boot CD, and running removal and virus checking tools from there.

See the earlier links, regarding Bartspe. The instructions look more complicated than they are. It needs to be run on a clean XP SP2 system. Or you could try this:

on a clean PC,
http://www.ultimatebootcd.com/
download the iso, burn to a CD using Nero etc, or burncdcc from http://www.terabyteunlimited.com/utilities.html
stick it in the infected PC, boot, select other tools, antivirus, mcafee, select all the defaults, then in the box type

scan c: /CLEAN /UNZIP /SUB

Be careful about interchanging things such as usb keys from the infected PC to others, as you could end up transmitting the worm to a clean system.

If you had AVG installed and updated at the time of the infection, maybe it is time to dump it, because it didn't protect you.

Alfonso_Skinarelli

Can you post a HijackThis log please.

black-saturn

Sorry I'll have to wait until my boyfriend comes round to look at this as I havn't a clue what your all on about

Browntoa

the hijackthis program and instructions are here

http://www.tomcoyote.org/hjt/

the download has a little green flashing button next to it

follow the instructions on how to run it and copy the log back here and then follow either mine or Alfonso's instructions on what to do next

it allows us to see what's affecting the PC and why you may be having these problems (may be more than one infection !! )

black-saturn

Browntoa wrote: »

the hijackthis program and instructions are here

http://www.tomcoyote.org/hjt/

the download has a little green flashing button next to it

follow the instructions on how to run it and copy the log back here and then follow either mine or Alfonso's instructions on what to do next

I've already tried this and the virus switches my computer off when I try to download it.

skiddy2k

click start>run... type in "msconfig"... select "diagnostic startup", restart and then try to download and run HijackThis (as posted by Browntoa)... or try to run HijackThis from Safemode

If that doesnt help, try to download a trial version of Kaspersky AntiVirus... http://www.kaspersky.com/trials?chapter=186685140 and tick "enable self-defense before instalation"... install it, restart your PC, update it and do a full PC scan in SafeMode

Browntoa

black-saturn wrote: »

I've already tried this and the virus switches my computer off when I try to download it.

get someone to download the program to a Cd for you and then install it from there

we may also need to do this for the tools to remove the infection if you cannot download, it's would not be the first time we have had to do that

Donnie

Have you downloaded the files that I supplied to you?