Viruses , my laptop is infected , need help

[#Palestinian#]

Guys , this is an advice
no one use NOD32 , it's crap , worse than a crap , I have a laptop which has NOD32 on it and updating it's database regularly and I found out that Viruses control the whole NOD32 , I removed it and tried to download Kaspersky but couldn't even lunch it cause the virus control everything in my laptop .

now I need help , can i scan my laptop by any site ?? and remove viruses online ??
pls tell me what can I do ?
I can't install any antivirus on my laptop .........

[IdolEyes787]

http://img475.imageshack.us/img475/4677/iconbitdefenderot6.gif BitDefender Online Scanner (http://www.bitdefender.com/scan8/ie.html)
Easy to use. High detection rate.

http://img388.imageshack.us/img388/6089/iconcapy6.gif eTrust Antivirus Web Scanner (http://www.ca.com/us/securityadvisor/virusinfo/scan.aspx)
Easy to use. High detection rate.

http://img254.imageshack.us/img254/5804/iconfsecurezc7.gifF-Secure Online Virus Scanner (http://support.f-secure.com/enu/home/ols.shtml)
Easy to use. High detection rate.

http://img254.imageshack.us/img254/7060/iconkasperskyie7.gif Kaspersky Online Scanner (http://www.kaspersky.com/virusscanner)
High detection rate. Cannot disinfect. Slow scanning.

http://img254.imageshack.us/img254/865/iconmcafeekg0.gif McAfee Freescan (http://us.mcafee.com/root/mfs/default.asp)
Easy to use. High detection rate. Cannot disinfect.

http://img477.imageshack.us/img477/5195/iconpandaqi5.gifPanda ActiveScan (http://www.pandasecurity.com/activescan/index/)
Very easy to use. High detection rate. Free Registration Required for disinfect .

http://img254.imageshack.us/img254/2759/iconsymantecne2.gifSymantec Security Check (http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym)
Easy to use. High detection rate.

http://img377.imageshack.us/img377/1723/icontrendmicrork2.gif Trend Micro Housecall (http://housecall.trendmicro.com/)
Easy to use. High detection rate.


Try a couple of these.They don't install so the virus shouldn't detect them.
You will have to use IE since they require active X.
Also disable system restore before scanning because things can hide in there.

[Chewie]

IdolEyes, that is one helluva fantastic fucking post.
:thumbsup:

[seppypom]

Yes, IdolEyes, that was bookmark worth.

Thanks

[#Palestinian#]

Thanks mate , I will try some i appreciate ur help .

[whip22]

use norton if you really do have a virus; it can find anything although it takes up an assload of system resources

[outfromdeep]

Guys , this is an advice
no one use NOD32 , it's crap , worse than a crap , I have a laptop which has NOD32 on it and updating it's database regularly and I found out that Viruses control the whole NOD32 , I removed it and tried to download Kaspersky but couldn't even lunch it cause the virus control everything in my laptop .

now I need help , can i scan my laptop by any site ?? and remove viruses online ??
pls tell me what can I do ?
I can't install any antivirus on my laptop .........
:lol: as i earlier said u about NOD 32. Now u realized, how good it is. Use KIS 2009 and NIS 2008. Norton Internet Security 2008 Takes less memory. But atleast u should hv 1 gb ram.:yup: remaining all are crap. I installed both KIS and NIS. and I keep active NIS only. Whenever I wanted to scan a file then i activate KIS:)

[asunasun]

Definetely worth bookmarking!

[peat moss]

I would just " Nuke " your computer ( Format and reinstall ) you'll never get it back how you want it , probably faster too . You may get rid of a few virus but its probably infested with Trojans and Root kits that those links won't find .Hyjackthis may help too .




Not a knock on IdolEyes post as I think it's worthy of a Sticky but some of those programs give alot of " False positives " . You get rid of one and it takes your programs out .

If you don't what to nuke then at least D/L a free Trojan scanner such as Trojan Killer or Trojan Remover . Not trying to be a know it all but been there , done that got the t shirt .

Here's a site I use for suspicious files .: http://virusscan.jotti.org/

Hyjackthis : http://www.merijn.org/programs.php

Links for Trojan Programs :

http://www.softpedia.com/get/Antivirus/Trojan-Remover.shtml


http://www.download.com/Trojan-Killer/3000-8022_4-10755236.html

Oh bye the bye , I use Eset .:yup:

[IdolEyes787]

No offense taken peat moss some of those could indeed give you false positives.
The only one I would really say is going to give you problems though is CA.I have great faith in KAV,Eset and Symantec.
I like the idea of the occasional reinstall but even that isn't a guarantee.If you are backing up files there is always the risk saving the one with the malware in it.

[peat moss]

No offense taken peat moss some of those could indeed give you false positives.
The only one I would really say is going to give you problems though is CA.I have great faith in KAV,Eset and Symantec.
I like the idea of the occasional reinstall but even that isn't a guarantee.If you are backing up files there is always the risk saving the one with the malware in it.

I'm glad you did n't take offence as I help friends all the time in tears trying to get back lil Billy's grade two pictures they had stored on that computer . He's 20 now but they sure wish they could keep them . :lol:

I'm such a softie that I usually try and save pic's and documents on a external hdd for them then formatt and put back . I would like to see the OP'S Hyjackthis log tho just to see what's leftover . :)

As I said great links that should be saved or stickyed .

[lynx]

With all due respect to the OP, since he doesn't know where his infection came from it is difficult to say that any other AV product would have dealt with this infection any better than NOD32. The fact that the OP couldn't launch the installer for KIS suggests that the virus is KIS aware. That in turn leads me to suspect that KIS would have had just as much trouble in detecting this infection.

A virus that can install itself as a root kit can evade detection from ANY antivirus software, even online scans if they've been written that way. They simply divert attempts to view anything that would reveal their presence and consequently they never get scanned. The only foolproof solution is to install the drive in an external case (eg USB) so it isn't present at boot time (because windows reads the boot sectors of ALL installed drives at bootup) and scan the drive while it is attached to a non-infected system.

I'm posting this not as support for NOD32, I'd be saying the same if the OP has been using KIS, NIS, AVG or whatever. I'm simply pointing out that casting doubt on one piece of software is no reason to assume that another piece of software would have fared better against one particular virus. There will always be viruses that slip the net otherwise detection rates would be constant at 100% and the arseholes that create these viruses would realise that their attempts were futile.

As an example of how these things can occur, I'll relate what happened to a friend of mine. While he was away on holiday a new virus became active (one that exploited a vulnerability in Microsoft's LSASS.EXE program). On his return he started his pc, and immediately went to download the latest AV updates and Windows Update critical updates. Too late, within 30 seconds of going on the net his system had been infected. And since LSASS.EXE has access to anything in the computer, it installed itself as a root kit and the updates to his AV software couldn't spot it. Fortunately the effects of this particular virus were well documented and I was able to stop it in it's tracks fairly easily. Removing the infection took several hours though.

I can't remember which AV software he was using at the time (I suspect it was NAV) but it isn't really relevant. It was a new virus and it slipped the net. That will always happen to someone no matter what AV is in use.

The only sensible solution to deciding which software to use is to look at independent tests. No-one here is qualified to say that one piece of software is a more effective product than any other. All we can do here is relate how our experience of using our systems has been with a particular package installed. I won't use NIS or McAfee because I like to have sufficient resources left to actually do some work. I used to use AVG, but dropped it because I'll decide what software runs on my pc, not them. I tried a few others and decided on ESS, but that was simply down to personal preference of how it works. If a virus sneaks through I won't be suddenly blaming the people at Eset, I'll be thinking how stupid I was in not being more careful about that dodgy software I installed.

[peat moss]

Good point lynx, my rule of thumb is I don't trust a Virus program that can't stop its own cracks or key gen.'s

So I only use ESS or KIS ,only problem is I spend most of my waking time looking for said cracks , serials or key gen's .:whistling

[outfromdeep]

I spend most of my waking time looking for said cracks , serials or key gen's .:whistling

if u know where exactly to search:naughty: then may be u won't waste that much amount of time:whistling. I got KIS key still working over past 3 months:P

[peat moss]

That's just it my little friend , it only seems to work for a few months . I put a good program on a few friends computers and bang the phone starts ringing .......:pinch:


"Peat , you schmuck this program doesn't update anymore" . :noes:

[outfromdeep]

That's just it my little friend , it only seems to work for a few months . I put a good program on a few friends computers and bang the phone starts ringing .......:pinch:


"Peat , you schmuck this program doesn't update anymore" . :noes:

Yes my friend that's true. But I will let u know when my key will work for 1 yr. Still no blacklist problem arised:happy:

[maverick_andy]

@peatmoss,
If u want KIS key then PMe :D

[peat moss]

Thank you very much Andy , but find ESS works very well . I thought about paying for a security solution and would be hard pressed to decide between KIS or ESS . Their both that good .

[maverick_andy]

Thank you very much Andy , but find ESS works very well . I thought about paying for a security solution and would be hard pressed to decide between KIS or ESS . Their both that good .

pal,why to pay, when no antivirus are ideal to find viruses. Use net effectively mate to find right keys at right spot:happy:. BTW I just downloaded AVG Internet Security 8.0+AIO keygen in TorrentBytes. It works gr8 for standalone,server editions:yup:

[saulin]

Well I think there are many ways to get infected and is very possible that the infection could have happened before even installing NOD32. Anyways I just started using NOD32 and I heard so many good things about it and it seems like a pretty solid AV. Very neat indeed. I have it on 2 laptops. I also just installed Kaspersky AV on 2 computers and it also looks pretty kick ass. I used to use it years ago and I always liked it.

Anyways if you want to clean this biatch.

I would boot into safe mode with networking and simply download and run Smitfraudfix and Combofix, go through your add/remove programs and see if there is spyware that needs to be removed. Then run one or 2 of those online scanners posted.

If you have registry permission errors or policy errors you need to use dial-a-fix to fix these errors. It will show you the policies and restrictions that are on your system and you can remove them with it.

Then see how is running. At this point it should be pretty clean, you should be able to reinstall the AV software and do some other scan but at this point I would just use process explorer and autoruns. In fact I would use these 2 right after going to safe mode but I know what I'm doing and what I'm looking for. You kind of need to know what you are looking for when using these 2 programs so don't use them if you don't know what files are legit windows files or your system won't boot again.

[snakebite]

Top Job IdolEyes...kept on doing this great job.

[Chewie]

norton is the best one
Care to elaborate on that bullshit statement?

[peat moss]

norton is the best one
Care to elaborate on that bullshit statement?




Ya I would love to hear it too . :naughty: I'v ran that Symantec program and it's many flavors on high end machines and just chuckled .

Seems to be my biggest problem when fixing friends computers after their " paid " subscription runs out . What do I put in for a trouble free antivirus solution ? It depends on their noobieness of course but keep using ESS and never hear problems later .

There's even free 30 day trials to see for ones self .


http://www.eset.com/landing_pages/landing_page1.php?CMP=KNC-g-ag&HBX_PK=nod32&HBX_OU=50&utm_source=google&utm_medium=cpc&utm_term=nod32&gclid=CPyqpZXnx5UCFQv7agodDTznig

Best ESS crack I'v found is NodEnabler 2.2 by the way .

[Overlord]

Man I would have liked to have known about NodEnabler a few days ago... :( Thanks for the tip though.

[saulin]

Well I run Norton Corporate for years and it didn't use much resources. Although I have to say that it probably had more false possitives than Kaspersky. I replaced Norton CE for Kaspersky AV and did a scan and Kaspersky did not find anything that Norton didn't pick up. I do however like Kaspersky better because it has more options and better scan options as well.