PDA

View Full Version : I think I've got a virus..



sparkyminer
22nd January 2007, 15:51
Apparently I'm throwing emails out like confetti..........I'm not. see attachment for sample page.

And I've got an icon in my notification area that if you click takes you to a website called anti vermins. the icon flashes from a blue question mark and an icon of a pc and the red question mark.

I either got it whilst the kids were mucking about, or when I was downloading my daily fix of hardcore pornography.:D

GlosRFC
22nd January 2007, 16:12
And you think we're going to click on one of your attachments???

Seriously though, go to www.pandasoftware.com/activescan (http://www.pandasoftware.com/activescan)
Look for a large button in the middle of the page that says "Check your PC online FREE" and give that a thump to get started. You'll need to enter an email address but no problem making one up either. It wil download the Active X object that performs the scan first then the database of viruses. Once done, select the option to scan your entire disk and let it go. When it's finished it will give you the option of saving a text file with the details of the nasty stuff it's found. In the case of viruses, it will automatically remove them but for trojans and diallers you have to pay - however it will also provide links showing you how to remove these items manually if you wish.

So save a copy of the file and let us know what the results are. However, I wouldn't panic just yet - if you read an earlier reply of mine in this forum, you'll see that these failure notices are not usually the fault of the person receiving them.

Win2Win
22nd January 2007, 16:15
Run the Spyware Doctor trial, it will pick it up,and then tell us what it finds.

GlosRFC
22nd January 2007, 16:18
Oh, here's the link I mentioned http://www.win2win.co.uk/forum/showthread.php?t=46286

BTW, Anti Vermins is a subset of the Zlob trojan - nasty but fairly easy to remove. Leg it over to this site and download their Anti Vermins remover or follow the manual instructions:
http://411-spyware.com/remove-anti-vermins

sparkyminer
22nd January 2007, 16:30
Oh, here's the link I mentioned http://www.win2win.co.uk/forum/showthread.php?t=46286

BTW, Anti Vermins is a subset of the Zlob trojan - nasty but fairly easy to remove. Leg it over to this site and download their Anti Vermins remover or follow the manual instructions:
http://411-spyware.com/remove-anti-vermins

133 of the Zlob thingies in the registry alone.:yikes: :ermmm

GlosRFC
22nd January 2007, 16:36
Yes...it generates LOADS of them so you've got a days work ahead of you! Hopefully the Panda Active Scan will remove as many as it can - it should certainly remove the key processes that are replicating themselves.

Try this link for Bleeping Computers too as that will eradicate them all.

http://www.bleepingcomputer.com/forums/topic69886.html

When you've finished that, re-run Panda to check that you're now clear.

If you don't fancy wading through all those instructions, this free software will also remove it:
http://virusinfo.prevx.com/pxparall.asp?PX5=1385f34700f05d8420711be6f15d8c00cb2339ff&psection=desc

So just to clarify that:
1. Run the Panda Activescan and let it remove all of the viruses it can find.
2. Save a copy of the log
3. If you would rather run an automated removal, download Prevx from the virusinfo site.
4. If you're brave and want to keep tabs on every change you're making, follow the manual instructions on the Bleeping Computer site.
5. Re-run Panda Activescan and compare your logs
6. If still infected, try the 411-spyware anti vermin remover.
7. Repeat step 5. If still infected, come back here!

The good news is that it's not related to your email failure notices :D

GlosRFC
26th January 2007, 15:47
Did you manage to unZlob yourself in the end?

sparkyminer
26th January 2007, 15:59
Yes mate thank you very much. I thought I'd already told you. Aluminium pans you know.:rolleyes: :D
I'm still getting shed loads of duff e-mails though.:(

GlosRFC
26th January 2007, 16:03
Good stuff.

The only thing I can advise about the email failure notices is to ignore them as they tend to come and go in cycles. If you can scan the emails that are on your ISPs server (most now offer a webmail facility that lets you do just this) you can delete them en masse before they hit your inbox. If that becomes too onerous, let your ISP know and they can probably implement an anti-spam filter or block the emails at source. After all, it's in their interest to reduce the demand on their mail server too.