UNSOLVED
M
millerchantel
5 Posts
0
902
September 22nd, 2007 21:00
i have a virus!! please help!!!
so, im very computer illiterate and i just bought this comp. When i first turned it on the norton protection came on and i downloaded it cause it said i needed it. then the very next day these pop-ups started and got really bad so i upgraded to the winantivirus but nothing worked. i even went as far as rebooting the comp. to manufacture stle and still the pop-ups occur and it still is not protected from the viruses. i dont know what eles to do. and what is buffer over run detection cause thats what happened too. PLEASE HELP!!!!
- Just for your information Winantivirus is itself a very nasty piece of work. I assume you had a pop-up from the system tray asking you to download it to clean up your machineIf you don`t want to reinstall you need to go to the HijackThis forum and post a logfile there to get cleaned up
As dunedin mentioned, "upgrading" to WinAntiVirus was bad news.
I'll give you detailed instructions for HiJackThis (lower in this thread), but I'd like to suggest two scanners that should help remove the WinAntiVirus (and popup) problem.
[I have no idea if they'll impact your buffer overrun situation, which may (or may not) be a completely separate matter.]
WinAntiSpyware is a rogue product.Both RogueRemover as well as SuperAntiSpyware can remove many [but not all] rogue products (including SmitFraud variants). If you wish, you could try these (links below)...RogueRemover runs really fast, and so is the more efficient to use when it works...be advised that a complete SuperAntiSpyware scan can run 20 to 40 minutes, because its scan is far more comprehensive.Be sure to let us know which one, if either, worked for you.RogueRemover [just the "regular"/free version --- there's no need to use the PRO] http://www.malwarebytes.org/rogueremover.phpSuperAntiSpyware [get the Free Version for Home Users] http://www.superantispyware.com/After downloading & installing [either one or both of these], be sure to check for updates first, and then run the scan. [Select COMPLETE scan for SuperAntiSpyware]====================================================If these attempts don't succeed --- or even if they do, but you'd like further confirmation that you're fully clean, then you can post a HiJackThis log in the HJT forum, where the helpers can offer you personalized assistance --- please do NOT try to proceed with HJT "fixes" on your own!Here's the information on HiJackThis, in case you decide to pursue it:Download the latest version of Trend Micro's HiJackThis (HJT) [version 2.0.2] installer fromSave it to your Desktop.Double-click on the HJTInstall.exe file you just downloaded, and click on the Install button, to install HJT in the suggested/default folder,C:\Program Files\Trend Micro\HijackThis( As part of the installation, a shortcut to the HJT program will be placed on your Desktop, and another shortcut in your START menu [for easy-access to using HJT in the future ---you only need to run the program again, but not the installer ] ).After installation, HJT will automatically open and start running.[If this is your first time running HJT, please read and accept the EULA (End-User License Agreement)]Click on Do a System Scan and Save a LogFileThis will automatically open NotePad
Copy the entire file from NotePad: EDIT/SelectAll, EDIT/Copy
Then go to the forum dedicated for HiJack This logs (**NOT** back here), and PASTE the results there:
http://forums.us.dell.com/supportforums/board?board.id=si_hijack
Be sure to include a detailed description of any problems/errors/warnings you are encountering.
Also, please indicate the steps you've already taken, if any, in terms of running anti-malware scanners or malware removal tools.
When you submit your HJT log, please make sure the box under your text which shows "Automatically convert carriage returns to HTML line breaks" is checked, or your log may not format correctly... it should consist of separate/readable lines, not one large "jumble".Hopefully, one of the HJT experts will get to it as quickly as possible.
WARNING: HiJack This is a VERY POWERFUL tool. While it's completely safe for you to download, generate, and post your log (as described above), you should *NOT* attempt to do anything else (in particular, do NOT use it to delete/fix any entries) until you are advised to do so by a forum expert!! Improper use of this tool can severely damage your system.- have you tried running a SuperAntiSpyware scan, after getting WinAntiVirus? if not, run it, and see if it will remove WinAntiVirus.RogueRemover is compatible with SAS... you can have both on your system. Occasionally, one may catch something the other one didn't (depending on which program updates its database sooner than the other. also, SAS is MUCH more comprehensive, in what it looks for.) so it's okay to run RogueRemover too. [you'll be amazed how fast it runs.]if you still have problems after your SAS and RogueRemover scans, then go for HiJackThis
millerchantel
5 Posts
480
0
Posted September 25th, 2007 01:00
thanks for all you help, i rebooted the comp back to manufacture and installed the superantispyware and it finally worked i also upgraded the virus protection. so far so good but if i have any more problems i know who to go to. again, thanks for all your help.chantel
BELL BOY
1145 Posts
480
0
Posted September 22nd, 2007 23:00
You don’t mention computer make/model, assume its Windows XP?
Not absolutely sure, but from the buffer over run message it sounds like your new computer does have a serious virus infection
Software can be used to scan & hopefully fix the problem but doesn’t always fix damaged registry entries
Since it’s a new computer, I’d restore it back to original condition using Dell PC Restore by Symantec a.k.a. Dell System Restore (DSR) utility (if installed on your computer)
Read this post for further information about using DSR