Virus spyware adder

[Guest]

I have a virus at the moment that first managed to disable norton antivirus,
and now has managed to evade spyware doctor, the cleaner and avg. I dont know
whats its called, but every now and again I get an error message thats says
that a file in documents and settings called se.dll is denying me access,
then avg shield kicks in and says it infected. It deletes it, then a varied
amount of time later it starts all over again. My homepage keeps changing to
about:blank and coolsearch and other spyware keeps adding itself. What can I
do?

 

[David H. Lipman]

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt412.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point


* * * Please report your results ! * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html







| I have a virus at the moment that first managed to disable norton antivirus,
| and now has managed to evade spyware doctor, the cleaner and avg. I dont know
| whats its called, but every now and again I get an error message thats says
| that a file in documents and settings called se.dll is denying me access,
| then avg shield kicks in and says it infected. It deletes it, then a varied
| amount of time later it starts all over again. My homepage keeps changing to
| about:blank and coolsearch and other spyware keeps adding itself. What can I
| do?

 

[Steve Shattuck]

I have a virus at the moment that first managed to disable norton
antivirus,
and now has managed to evade spyware doctor, the cleaner and avg. I dont
know
whats its called, but every now and again I get an error message thats
says
that a file in documents and settings called se.dll is denying me access,
then avg shield kicks in and says it infected. It deletes it, then a
varied
amount of time later it starts all over again. My homepage keeps changing
to
about:blank and coolsearch and other spyware keeps adding itself. What can
I
do?

People need to learn the difference between a virus, backdoor, Trojan horse,
adware, malware and BHO. Then you would understand that it is the right
tool for the right problem. What makes you think it disabled NAV? Unless
you are using a very old copy, don't have SP2 and the Security Center
running, I find it hard to believe that the about blank BHO did that.

A well protected environment includes a good two-way firewall (I recommend
Zone Alarm or Zone Alarm Pro if you have a Linksys Router), a BHO detection
program (BHODemon is outstanding), almost any mainstream virus program (I
use NAV), and at least two adware/malware programs (recommend ad-aware and
the new Microsoft Anti-Spyware program. Spybot S&D is also good if a little
too aggressive IMHO). If you have a broadband connection, a hardware
firewall/router (I recommend a LinkSys) is not only relatively cheap, but
provides an added layer of protection.