Major Help Needed...
-
hey everyone...i got hit by a virus...and apparently i can't clear it with my pc-cillin anti virus...
i have located the exact location of the file...which is in c:windows\system32...and it goes by the name of mscornet.exe
plus i got loads of other things like security2k hijacker,spy sheriff, trojan download-zlob,antivirus gold, spy axe,spytrooper and a whole lots of other cookies...
the problem is i didn't know that the security2k hijacker actually mimics windows security alert and i went to click it and install their rouge anti virus spy trooper and spyaxe...
now i cannot delete the process from task manager as it will automatically start up again...even when i uninstall spy axe...it automatically installs itself again..
all IT experts...i have tried all means that i know of...and it doesn't work...please advice...
thx in advance... -
What are the anti spyware you're using? I advice you to download a anti spyware and conduct deep scanning first.
Those installed spywares should be in your reg. -
thx for the response...i using spyware doctor...but the only thing it detect is the cookie...spy sweeper manage to identify the problems...but it prompt me to buy their stuff to activate it....Originally posted by M©+square:What are the anti spyware you're using? I advice you to download a anti spyware and conduct deep scanning first.
Those installed spywares should be in your reg. -
try housecall frm trendmicro?
i use that =D -
i did a housecall already...didn't manage to detect anything...Originally posted by shinta:try housecall frm trendmicro?
i use that =D -
Yo, bro.. I also got hitted by the same virus a few weeks back.Originally posted by M©+square:What are the anti spyware you're using? I advice you to download a anti spyware and conduct deep scanning first.
Those installed spywares should be in your reg.
It's really hardcore. Anti-spyware like Spybot and Adware doesn't have any effect on it. I even tried using Hack to delete the BHO. but it will still come back. The source is a .tmp file. Can't even delete it from the system32.
Even if I manage to delete it, another new .tmp will appear.
Actually, there's a way to get rid of it using the restore function of the Window XP. Restore the PC to the date before the PC was hitted by the virus, and then scan with the anti-spyware program and delete the source from the system32.
Too bad I don't have any restore point, sigh... end up have to reformat everything again..
-
dld and run registry Mechanic to clean up your registry, and run msconfig and under the services and programs tab, uncheck any suspicious item that will load on start-up
-
argh!!!i un-did system restore cos i tot when u run antivirus...u gotta stop restore from happening first...so that u stop the virus from looping...Originally posted by Mao x 2:Yo, bro.. I also got hitted by the same virus a few weeks back.
It's really hardcore. Anti-spyware like Spybot and Adware doesn't have any effect on it. I even tried using Hack to delete the BHO. but it will still come back. The source is a .tmp file. Can't even delete it from the system32.
Even if I manage to delete it, another new .tmp will appear.
Actually, there's a way to get rid of it using the restore function of the Window XP. Restore the PC to the date before the PC was hitted by the virus, and then scan with the anti-spyware program and delete the source from the system32.
Too bad I don't have any restore point, sigh... end up have to reformat everything again..
OMG....i dun wanna reformat.. -
apparently i google-ed your problem and this might help you
http://geekstogo.com/forum/index.php?act=ST&f=37&t=85002 -
heh heh.Originally posted by R3SsH|n:argh!!!i un-did system restore cos i tot when u run antivirus...u gotta stop restore from happening first...so that u stop the virus from looping...
OMG....i dun wanna reformat..
Ok as far as i know.
Spydoc would have shown you the registry scan.
Thru the Reg scan, you have to manually/physically go into run>regedit
And delete those buggers.
Doing the spybot clean doesn't help at all. -
there is always a way to remove a virus. its only a matter of time and effort.
-
thx alot...i will look at it...Originally posted by lpx88:apparently i google-ed your problem and this might help you
http://geekstogo.com/forum/index.php?act=ST&f=37&t=85002 -
I see.. maybe you can try to restore again??Originally posted by R3SsH|n:argh!!!i un-did system restore cos i tot when u run antivirus...u gotta stop restore from happening first...so that u stop the virus from looping...
OMG....i dun wanna reformat..
Actually I tried this method and it works....
Provided you have restore point before the day you got hit.
If not.. try using registry mechanic..
hopefully it helps.. -
Hee...you know the next time.Originally posted by Mao x 2:Yo, bro.. I also got hitted by the same virus a few weeks back.
It's really hardcore. Anti-spyware like Spybot and Adware doesn't have any effect on it. I even tried using Hack to delete the BHO. but it will still come back. The source is a .tmp file. Can't even delete it from the system32.
Even if I manage to delete it, another new .tmp will appear.
Actually, there's a way to get rid of it using the restore function of the Window XP. Restore the PC to the date before the PC was hitted by the virus, and then scan with the anti-spyware program and delete the source from the system32.
Too bad I don't have any restore point, sigh... end up have to reformat everything again..
Don't rely on system restore too much
Do backups and reformat
Learn how to deal with Virus and Spywares. -
Haha... yeah.Originally posted by M©+square:Hee...you know the next time.
Don't rely on system restore too much
Do backups and reformat
Learn how to deal with Virus and Spywares.
Actually i have another harddisk for backups la.
I just hate to reformat and reinstall all my drivers and programs.
It's damn time consuming..
Haha... I actually continue using the computer without the window explorer for a month, finding ways to get rid of the source using only the task manager.
Last time I still can manage to remove some spywares.
but this one is really too hardcore till I totally give up and finally format my harddisk..
-
hardcore ar?Originally posted by Mao x 2:Haha... yeah.
Actually i have another harddisk for backups la.
I just hate to reformat and reinstall all my drivers and programs.
It's damn time consuming..
Haha... I actually continue using the computer without the window explorer for a month, finding ways to get rid of the source using only the task manager.
Last time I still can manage to remove some spywares.
but this one is really too hardcore till I totally give up and finally format my harddisk..
-
Originally posted by R3SsH|n:hardcore ar? What are you thinking about?
-
ke lian.Originally posted by Mao x 2:Haha... yeah.
Actually i have another harddisk for backups la.
I just hate to reformat and reinstall all my drivers and programs.
It's damn time consuming..
Haha... I actually continue using the computer without the window explorer for a month, finding ways to get rid of the source using only the task manager.
Last time I still can manage to remove some spywares.
but this one is really too hardcore till I totally give up and finally format my harddisk..
dat forum one guy gt post link to an app dat kills this virus. 5 minutes can gao ding le. -
I never bother myself with updating drivers. Viruses are getting cleverer. We shall see what happens next yearOriginally posted by Mao x 2:Haha... yeah.
Actually i have another harddisk for backups la.
I just hate to reformat and reinstall all my drivers and programs.
It's damn time consuming..
Haha... I actually continue using the computer without the window explorer for a month, finding ways to get rid of the source using only the task manager.
Last time I still can manage to remove some spywares.
but this one is really too hardcore till I totally give up and finally format my harddisk.. -
what i did is that i normally dld the important applications that i need lyk mozilla, msn, Zone alarm, so on and so forth and i burned them to a cd so nex time i format can jus install dem
-
Originally posted by Ito_^:ke lian.
dat forum one guy gt post link to an app dat kills this virus. 5 minutes can gao ding le.
I don't know about that app ma..
Anyway, my case is much different from the one they described in that forum.
Kaoz.. it crashes my window explorer as well.
I actually ignored it in the 1st place, until I got sick of having to use the task manager to start everything. -
Originally posted by R3SsH|n:
mscornet.exe comes together with this particular trojan (trojan download-zlob). You have to remove the trojan to remove mscornet.exe
hey everyone...i got hit by a virus...and apparently i can't clear it with my pc-cillin anti virus...
i have located the exact location of the file...which is in c:windows\system32...and it goes by the name of [b]mscornet.exe
plus i got loads of other things like security2k hijacker,spy sheriff, trojan download-zlob,antivirus gold, spy axe,spytrooper and a whole lots of other cookies...
the problem is i didn't know that the security2k hijacker actually mimics windows security alert and i went to click it and install their rouge anti virus spy trooper and spyaxe...
now i cannot delete the process from task manager as it will automatically start up again...even when i uninstall spy axe...it automatically installs itself again..
all IT experts...i have tried all means that i know of...and it doesn't work...please advice...
thx in advance...[/b]
spy sheriff is an adware and can be removed using your anti-spyware. spyaxe will be harder to remove. Scan using your anti-spyware and remove all the spywares. Restart your computer in safe mode and delete everything to the spyware where they are installed.
Here's how to remove the trojan download-zlob:
http://www.f-secure.com/v-descs/trojdown.shtml -
System restore is not recommended as it will make things worse. The trojan horse that got into his computer was the main cause. Trying a system restore will do more harm than good.Originally posted by Mao x 2:Yo, bro.. I also got hitted by the same virus a few weeks back.
It's really hardcore. Anti-spyware like Spybot and Adware doesn't have any effect on it. I even tried using Hack to delete the BHO. but it will still come back. The source is a .tmp file. Can't even delete it from the system32.
Even if I manage to delete it, another new .tmp will appear.
Actually, there's a way to get rid of it using the restore function of the Window XP. Restore the PC to the date before the PC was hitted by the virus, and then scan with the anti-spyware program and delete the source from the system32.
Too bad I don't have any restore point, sigh... end up have to reformat everything again..
The trojan horse has to be removed first. Then this will be followed by a spyware scan and removal of the spywares. Thirdly, restart your computer in safe mode and delete the files where the spyware are installed. The last thing is to delete the entries in your registry that the spywares have written. -
my brothers...thank you for your help...here is an update...
apparently...i have cleared all trojans and adware on the surface...used spyware doctor to check for anymore activities...apparently it said nothing was found...
my task manager look like normal...
my browser has stop showing me www.systemwarning.com (don't go there)
the spyaxe appear to have been remove from c: , startup and spyware detection...
spy sheriff seems to be deleted oso...
the fake windows alert is oso gone...
if u were wondering...this is basically what i did:
used killbox to delete all infected files in c:windows\system32\...
for spyaxe...i found out all infected registries via spyware doctor...and since i nv subscribe spyware doctor...i went to regedit and manually deleted every infected registries and its key...
i oso deleted all infected .tmp files...
so overall...i think my system is fine...thank you all for your help...couldn't have done it without u guys... -
btw...what is registry mechanic used for?
i seem to have over 500 problems...but alot of those are temp files...