My puter has a bug and I cant get rid of it! - Page 2

Knipples · 17-08-2008, 14:54

Quote:

Originally Posted by karbon

run hijackthis and post the log here, shall see if there is anything there.

Can I have a link so I get the right one

Knipples · 22-08-2008, 19:32

Have just got back from my week away and the scan started (obviously)
it found 4 of these

trojan horse Adload_r.AQ

have removed them from the PC, but why in the heck do they keep coming back, I take it means theyre hiding somewhere and coming back when it boots up?

I found this
http://answers.yahoo.com/question/in...0070401AAa7GfK
which seems to mean its coming back when it boots up as you said Stan. How do I turn off system restore so I can do that, or should I just get rid of AVG and get avast?

Mark · 22-08-2008, 19:34

Open Control Panel and then System. Go to System Restore options and turn off System Restore. You'll probably get a warning - this is OK. Reboot in Safe Mode and run the scan again. Reboot once more and turn System Restore back on.

Knipples · 22-08-2008, 19:36

Ok thanks, will do that.

Knipples · 22-08-2008, 22:19

Aaaarrggh!
Have just spent blooming ages running the scan in safe mode after I turned off system restore, it found the same things, I deleted them, now am running the scan again in "normal" mode and theyre still sodding there!

edit, when that scan finished, it said to remove the objects it needed to restart, which I did, and then when it rebooted the windows defender popped up and said I had something which was vundo (which I know is not good) and so the defender removed that, and it needed to restart again.
Am keeping my fingers crossed for now, but am open to any suggestions - sodding thing!

another edit
Nope theyre still there! Now claiming to need another reboot to get rid of, but I dont believe that anymore.

Mark · 22-08-2008, 23:24

My guess is something else has hooked into Windows startup and keeps re-infecting your system. You'll have to go the HijackThis route to dig that one out I'm afraid, and even then there's no guarantee. You may simply have to re-install Windows to get rid.

I don't have any experience of HijackThis unfortunately, so can't help with that either.

divine · 22-08-2008, 23:37

There are sites that you can plug HiJackThis logs into and they tell you what all the various bits are and if anything is suspicious.

The last thing that infected my PC (because of my sister) dumped loads of crappy files everywhere, which it was using to reinfect from. I only found them because I knew the time the virus got there and went through the PC with a fine tooth comb finding every file created/modified at that time and getting rid of them.

Feek · 23-08-2008, 00:15

I've found autoruns to be quite handy in these situations as well.

Knipples · 23-08-2008, 09:10

I've only been having problems since I upgraded the AVG from 7.5 to 8.0. I hadnt had any bugs for a year until then.
I think im gonna get rid of the AVG and get Avast, will that and windows defender be enough?
Thanks for everyones help by the way.

Stan_Lite · 23-08-2008, 09:32

That's all I use on mine and it seems to work for me. I can't speak for AVG as I've never used it but I have been using Avast on all my machines for about 3 years and never had any problems. I do still run Adaware and Spybot S&D once a month to make sure but all they ever pick up are a few tracking cookies so the Avast/Windows Defender combo seems to be pretty effective

With the amount of time and effort you've put into trying to clear this with no luck, a format and re-install might be a quicker and more effective solution. Obviously you would need to back up all your personal data and it would mean re-installing all of your apps but it would ensure that your machine was free from any nasties.

22-08-2008, 19:32	#12
Knipples nipples lol (o)(o) Join Date: Apr 2008 Location: Brissle!!! Posts: 4,947	Have just got back from my week away and the scan started (obviously) it found 4 of these trojan horse Adload_r.AQ have removed them from the PC, but why in the heck do they keep coming back, I take it means theyre hiding somewhere and coming back when it boots up? I found this http://answers.yahoo.com/question/in...0070401AAa7GfK which seems to mean its coming back when it boots up as you said Stan. How do I turn off system restore so I can do that, or should I just get rid of AVG and get avast? Last edited by Knipples; 22-08-2008 at 19:35.

22-08-2008, 22:19	#15
Knipples nipples lol (o)(o) Join Date: Apr 2008 Location: Brissle!!! Posts: 4,947	Aaaarrggh! Have just spent blooming ages running the scan in safe mode after I turned off system restore, it found the same things, I deleted them, now am running the scan again in "normal" mode and theyre still sodding there! edit, when that scan finished, it said to remove the objects it needed to restart, which I did, and then when it rebooted the windows defender popped up and said I had something which was vundo (which I know is not good) and so the defender removed that, and it needed to restart again. Am keeping my fingers crossed for now, but am open to any suggestions - sodding thing! another edit Nope theyre still there! Now claiming to need another reboot to get rid of, but I dont believe that anymore. Last edited by Knipples; 22-08-2008 at 23:00.

22-08-2008, 23:37	#17
divine Moonshine Join Date: Sep 2007 Location: Southampton Posts: 3,201	There are sites that you can plug HiJackThis logs into and they tell you what all the various bits are and if anything is suspicious. The last thing that infected my PC (because of my sister) dumped loads of crappy files everywhere, which it was using to reinfect from. I only found them because I knew the time the virus got there and went through the PC with a fine tooth comb finding every file created/modified at that time and getting rid of them. __________________

23-08-2008, 00:15	#18
Feek ex SAS Join Date: Jun 2006 Location: JO01ou Posts: 10,062	I've found autoruns to be quite handy in these situations as well. __________________

23-08-2008, 09:32	#20
Stan_Lite Stan, Stan the FLASHER MAN! Join Date: Jul 2006 Location: In bed with your sister Posts: 5,483	That's all I use on mine and it seems to work for me. I can't speak for AVG as I've never used it but I have been using Avast on all my machines for about 3 years and never had any problems. I do still run Adaware and Spybot S&D once a month to make sure but all they ever pick up are a few tracking cookies so the Avast/Windows Defender combo seems to be pretty effective With the amount of time and effort you've put into trying to clear this with no luck, a format and re-install might be a quicker and more effective solution. Obviously you would need to back up all your personal data and it would mean re-installing all of your apps but it would ensure that your machine was free from any nasties. __________________ Just because I have a short attention span doesn't mean I...

22-08-2008, 19:34	#13
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	Open Control Panel and then System. Go to System Restore options and turn off System Restore. You'll probably get a warning - this is OK. Reboot in Safe Mode and run the scan again. Reboot once more and turn System Restore back on.

22-08-2008, 19:36	#14
Knipples nipples lol (o)(o) Join Date: Apr 2008 Location: Brissle!!! Posts: 4,947	Ok thanks, will do that.

22-08-2008, 23:24	#16
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	My guess is something else has hooked into Windows startup and keeps re-infecting your system. You'll have to go the HijackThis route to dig that one out I'm afraid, and even then there's no guarantee. You may simply have to re-install Windows to get rid. I don't have any experience of HijackThis unfortunately, so can't help with that either.

23-08-2008, 09:10	#19
Knipples nipples lol (o)(o) Join Date: Apr 2008 Location: Brissle!!! Posts: 4,947	I've only been having problems since I upgraded the AVG from 7.5 to 8.0. I hadnt had any bugs for a year until then. I think im gonna get rid of the AVG and get Avast, will that and windows defender be enough? Thanks for everyones help by the way.