Hi,I'm a regular user of the internet & i download a lot of things daily.. a few days ago i noticed tht i'm not able to download any updates for my anti virus (ESET NOD 32)Neither am i able to visit any anti virus websites!! I tried everywebsite.. Bitdefender, kaspersky, AVG, macafee... jst abt everything in the list! other websites open without any prob... it's only the antivirus websites. also, i'm not able to open firefox browser, gtalk , yahoo messenger . then i downloaded MBAM freeware & spybot. after scanning it detected 3 trojans "Win32.delf.uc" It did remove it. but, when i rescan.. it keeps appearing again & agian! it doesnt get removed at all! I tried scanning with NOD 32 and it didn't detect a thing! it says it's clean.. then i downloaded bitdefender 10 free antivirus & i ran a scan.. it detected those 3 trojans & i deleted them. but still the prob persists.. now
i'm not able to update my anti virus,
unable to open any anti virus websites
unable to run any spyware removal softwares.. (tried ad aware, spybot, MBAM, windows malicious prog removal tool, superantispyware & many more )

I'm really desperate to get rid of this prob..... pls help me out...

Hello, my name is fenzodahl512 and welcome to Geekstogo.. Please do the following....



Please download The Comedian.exe by Rorschach112 to your desktop

• Please disable all of your antivirus/firewall before doing this step. Please visit HERE if you don't know how..
• Double click the program to run it. It will only take around several minutes to run.
• It will do a series of tasks and tell you when each one is finished.
• You will be prompted to press any key after each step
• When it is done it will close and exit itself automatically.
• You can delete The_Comedian.exe once it is finished

STOP! if you can't complete this step.. Tell me more about it..




NEXT


Please download Norman Malware Cleaner and save it to your Desktop.

• Reboot your computer into Safe Mode.
• Double-click Norman Malware Cleaner >> click Accept >> click Start scan
• Let it finish it scan. A log will be created on your Desktop. Post the log in your next reply

NEXT


Please download RSIT by random/random and save it to your Desktop.

• Double click on RSIT.exe to run RSIT
• Before you click "Continue", make sure you change the List files/folders created or modified in the last 3 months
• Click Continue at the disclaimer screen.
• Once it has finished, two logs will open. Please post the contents of both log.txt and info.txt in your next reply.

NEXT


Please download GMER and unzip it to your Desktop. <<mirror>>
Please rename the random filename or GMER into GAMERS

• Open the renamed program and click on the Rootkit tab.
• Make sure all the boxes on the right of the screen are checked, EXCEPT for ‘Show All’.
• Click on Scan.
• When the scan has run click Copy and paste the results into a Notepad >> save it and attach in this thread.

IMPORTANT: Do NOT run any program while you are doing these scans as it may interfere with the output results



Post me these logs in your next reply.. Post each log in separate post..

1. Norman Malware Cleaner
2. RSIT log.txt
3. RSIT info.txt
4. Attach GAMERS result..

Hello fenzodahl512, I did as u tld me to. first i tried running "the comedian.exe" A window popped open & it closed all of a sudden, Couldn't open it, cos something was blocking it from opening. So, i rebooted my pc in safe mode & then i ran "the comedian.exe" It worked.

NEXT,
For the second step i downloaded "Norman Malware Cleaner" on my desktop. I rebooted my PC in safe mode & then i ran norman malware cleaner, but it failed to initialise i mean, it didn't start the scan. It's showing an error message "Unable to initialise cleaning module. Error (0x00000001)"

Now, i dont know how i can proceed further.. Can u pls tell me wht i should do next??

Hello, i forgot to tell u this, i tried scanning with an online scanner. (bitdefender online scanner) I don't knw wht, but yesternight i was able to open bitdefender's site in safe mode..(it doesn't open now!! ) It detected a few virus mainly "Win32.virtob.gen.12" having a high threat level. (it had spread too much! it reported 574 infections!) the scanner deleted most of it, but still it couldnt do a 100% cleaning (It only disinfected 518 infections.)

I've uploaded the scan report. (its in HTML web page format, i've also uploaded it in .txt format) Can u jst see it? i hope it may be of some help.

This post has been edited by Praveenk: Jul 4 2009, 11:05 PM

"Win32.virtob.gen.12" = Virut.. Its the most nastiest computer virus I ever know.. Here's an excerpt from sUBs (malware expert) about Virut..



full reformat means, format on ALL partitions..

I would advised you to start backup all of your valuable data/documents/pictures/movies/songs/etc.. Do NOT backup any applications/installer and Do NOT backup any .exe/.scr/.htm/.html/.xml/.zip/.rar/.pif/.asp/.php/.iso files...

Make sure you back-up everything ONLY via CD or DVD (non-rewritable).. If you need to backup into external hard drive or thumbdrive, make sure it is EMPTY.. Meaning NO FILE inside it.. Format the external drive first before attach it to the infected computer.. A single .exe file inside the external drive may infected other computers as well..

I'll let this thread open until you successfully reformat the computer

Can u tell me how i can format my computer???? And for reinstallation.. what r the programs tht i should re install other than windows xp????

Here's some guides on how to reformat your computer with Windows XP.. Remember to backup everything important before reformat!!

http://helpdesk.its.uiowa.edu/windows/inst...ns/reformat.htm
http://www.youtube.com/watch?v=7usco-1nXGg

And after reinstall Windows XP, you should install an antivirus, and others software that you use..

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.