Critical Virus

skiddy2k

marleyboy wrote: »

Cheers skiddy2k I am currently running it on my uninfected XP, should I try and run it from the affected XP as well or instead of? Thanks in advance.

Do as was instructed whilst on your infected XP

GreenNotM

save the file to the root of the infected drive or a temp directory on the infected drive/partition. then you should be able to browse to it or type c:\setup_7.0.0.180_11.01.2008_01-49.exe or c:\temp\setup_7.0.0.180_11.01.2008_01-49.exe but to avoid the typos best to browse ...

same with combo fix ....

skiddy2k

Sorry, bed time!... will be back in morning to see if any more questions... I'm sure others such as GreenNotM will be able to help you out if you have any troubles
Remember to run Restrictions Removal Tool first and check all the boxes and click "remove" on the bottom left.

Night night all.. sweet dreams

marleyboy

Sorry about the delay in responding, I have been trying to work on it, ive come close to repairing it, but still had no joy. It seemed to have installed a virus which crashes my explorer repeatedly. No Virus software has found it upto now, I managed to run a repair using my XP disk, but that didnt help solve it, but I did discover it had installed something called need2find, which i suspect is the name of the virus, but cannot find anything about it.

It wont let me run a windows update, nor let me uninstall and re-install my Netgaurd, which simply crashes.

Whatever it is, I cant find where it is running from, yet I can see what it is doing.

imho

Have you looked here http://www.google.co.uk/search?client=firefox-a&rls=org.mozilla%3Aen-GB%3Aofficial&channel=s&hl=en&q=need2find+virus&meta=&btnG=Google+Search

pchelpman

need2find is not that invasive. It's just a piece of annoying adware.

Download, install & scan your infected system with this .....

http://www.ewido.net/en/download/

It should fix it.

Whatever happens ...

1. Post a HijackThis log so we can try and see what's going on

2. DO NOT use combofix unless under the guidance of an trained analyst. It is an extremely powerful tool and must not use used ad hoc like a general clean up tool. It has the power to trash your system.


PCH

marleyboy

I am still having no success on ridding it, and I have tried all the explenations on tech sites, on deleting this virus, but I dont see the files prompted to delete it, in so far as, they are not where they should be. My system diagnostic only reports that explorer was shut down, and offers no explanation to what it is doing.

Even in safe mode, i only get the same problem. I have the same problem in administrator and even trying to reinstall xp hasnt solved it.

imho

Have you tried running Panda on line scanner http://www.pandasecurity.com/homeusers/solutions/activescan/

I would do what pchelpman suggests and Post a HijackThis log so we can try and see what's going on

marleyboy

Is it possible I could have rid the virus (no detectors finding anythin), but it has corrupted or altered another program that may be causing the problem, I will do a Hijackthis file when I am able to access it from my infected XP, its a bit of a challenge.

cookie_monster_8

Might sound simple but one thing i always do when i have a virus is use THIS
process explorer from microsoft. It allows you to look at each process that is running on your computer like Windows Task Manager (Ctrl+alt+del) but allows you to see where the process is running from. You can also look up the process name online if you don't know what it is using right click. If you find what you think is causing the problem you can use something like icesword HERE to delete it.

Not saying you will find anything but its worked for me in the past.

GL