Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
virus problems
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Other forums
- :
- Tech Help - Software/Hardware etc
- :
- Re: virus problems
virus problems
14-12-2007 10:46 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I'm trying to sort out a computer for someone as it was riddled with viruses
Even though it had Norton Internet security 2007 that didn't managed to stop them
Since The subscription was due for renewal I removed Norton at his request and installed AVG 7.5 free. It immediately came up with viruses which were either "healed" or moved to the "virus vault".
I then ran the AVG scan and it picked up a load more. Again, some were healed and others sent to the vault.
I also ran spybot which detected tons of malware and spyware, all of which were dealt with
Now the computer appears to be running fine except that when I connect it up to my router the light for the port I used flickers constantly. This is worrying
Is there a way to see what it is doing?
Also I am wondering wether all or some of the items in the vault can be removed.
I'd be grateful for any advice
They are the following:
Trojan horse BackDoor.Generic9.EFP C:\WINDOWS\system32\drivers\ip6fw.sys ip6fw.sys 28.38 KB
Virus found BackDoor.Ntrootkit C:\WINDOWS\TEMP\122890.exe 122890.exe 25 KB
Virus found BackDoor.Ntrootkit C:\WINDOWS\TEMP\165812.exe 165812.exe 25 KB
Trojan horse Downloader.Zlob.SRE C:\WINDOWS\bgvijmdu.dll bgvijmdu.dll 96 KB
Virus found BackDoor.Ntrootkit C:\WINDOWS\TEMP\388906.exe 388906.exe 25 KB
Virus found BackDoor.Ntrootkit C:\WINDOWS\TEMP\409484.exe 409484.exe 25 KB
Trojan horse Downloader.Zlob.SRE C:\Documents and Settings\All Users\Application Data\lczipepg.dll lczipepg.dll 96 KB
Trojan horse Downloader.Zlob.RD C:\WINDOWS\PeMon\pemon.dll pemon.dll 158 KB
Trojan horse SHeur.ABSM C:\WINDOWS\PerfInfo\kjlHLSpcjn.exe kjlHLSpcjn.exe 3.51 MB
Virus found BackDoor.Ntrootkit C:\WINDOWS\TEMP\122828.exe 122828.exe 25 KB
Virus found BackDoor.Ntrootkit C:\WINDOWS\TEMP\4272656.exe 4272656.exe 25 KB
Even though it had Norton Internet security 2007 that didn't managed to stop them
Since The subscription was due for renewal I removed Norton at his request and installed AVG 7.5 free. It immediately came up with viruses which were either "healed" or moved to the "virus vault".
I then ran the AVG scan and it picked up a load more. Again, some were healed and others sent to the vault.
I also ran spybot which detected tons of malware and spyware, all of which were dealt with
Now the computer appears to be running fine except that when I connect it up to my router the light for the port I used flickers constantly. This is worrying
Is there a way to see what it is doing?
Also I am wondering wether all or some of the items in the vault can be removed.
I'd be grateful for any advice
They are the following:
Trojan horse BackDoor.Generic9.EFP C:\WINDOWS\system32\drivers\ip6fw.sys ip6fw.sys 28.38 KB
Virus found BackDoor.Ntrootkit C:\WINDOWS\TEMP\122890.exe 122890.exe 25 KB
Virus found BackDoor.Ntrootkit C:\WINDOWS\TEMP\165812.exe 165812.exe 25 KB
Trojan horse Downloader.Zlob.SRE C:\WINDOWS\bgvijmdu.dll bgvijmdu.dll 96 KB
Virus found BackDoor.Ntrootkit C:\WINDOWS\TEMP\388906.exe 388906.exe 25 KB
Virus found BackDoor.Ntrootkit C:\WINDOWS\TEMP\409484.exe 409484.exe 25 KB
Trojan horse Downloader.Zlob.SRE C:\Documents and Settings\All Users\Application Data\lczipepg.dll lczipepg.dll 96 KB
Trojan horse Downloader.Zlob.RD C:\WINDOWS\PeMon\pemon.dll pemon.dll 158 KB
Trojan horse SHeur.ABSM C:\WINDOWS\PerfInfo\kjlHLSpcjn.exe kjlHLSpcjn.exe 3.51 MB
Virus found BackDoor.Ntrootkit C:\WINDOWS\TEMP\122828.exe 122828.exe 25 KB
Virus found BackDoor.Ntrootkit C:\WINDOWS\TEMP\4272656.exe 4272656.exe 25 KB
6 REPLIES 6
Re: virus problems
14-12-2007 11:05 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
You could put ZoneAlarm on - as each process tries to connect to the internet an alert will pop up asking if you want to allow this action. That will tell you if there is anything untoward trying to call out.
jelv (a.k.a Spoon Whittler) Why I have left Plusnet (warning: long post!) Broadband: Andrews & Arnold Home::1 (FTTC 80/20) Line rental: Pulse 8 Home Line Rental (£14.40/month) Mobile: iD mobile (£4/month) |
Re: virus problems
14-12-2007 11:33 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
tcip view from
http://www.microsoft.com/technet/sysinternals/Networking/TcpView.mspx
will show all the connections and its FREE.
As you have so many virus I wouldn't connect it to your router if you other pc's on at the same time as the first port of call for virus would be the local network.
With so many virus I would format the hard drive and start again as there is no sure way of knowing you got them all and what damage they have done.
Its takes longer to mess about than to re install.
http://www.microsoft.com/technet/sysinternals/Networking/TcpView.mspx
will show all the connections and its FREE.
As you have so many virus I wouldn't connect it to your router if you other pc's on at the same time as the first port of call for virus would be the local network.
With so many virus I would format the hard drive and start again as there is no sure way of knowing you got them all and what damage they have done.
Its takes longer to mess about than to re install.
Re: virus problems
14-02-2008 9:36 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Do a Format,its much quicker than messing about.
Re: virus problems
14-02-2008 9:52 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
dont forget its a rootkit virus, Have you tried to remove it from Dos, as a windows program wont work. also, you probably need a specific root kit killer. try http://www.trojan-zlob-removal.com.removal-instructions.com/removetrojan.zlob.html
Re: virus problems
14-02-2008 10:08 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
funny, just done another search and came up with this http://forums.cnet.com/5208-6142_102-0.html?forumID=32&threadID=275831&messageID=2654164
Re: virus problems
14-02-2008 10:17 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote from: leon Do a Format,its much quicker than messing about.
Just looked back at the other posts, somebody took a very long time to do a format, the previous post was on 14th December
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page