my com infected with virus??!?!?!

• Y_Shun

  8 Feb 07, 18:05

  oh...my computer is infected with some virus n i dunnoe..only up till now when i run the scanner then i realised....
  
  what should I really do ar? some virus is like some programs like daemon..does it contain virus? or is my anti-virus too sensitive?
• FireIce

  8 Feb 07, 18:06

  wats the AV scan u use?
  wats the detected file?
• Y_Shun

  8 Feb 07, 18:08

  its avast!...
  
  now still scanning, when i finished scanning then i tell u all the infected files....
  
  it had spent 2 hrs already.
• Y_Shun

  8 Feb 07, 18:33

  3 infected files, all moved into the chest thingy
  
  1st is
  
  C:\Program Files\DAEMON Tools\SetupD T S B.exe\DaemonTools_WhenUSave_Installer.exe
  Infection: Win32:Agent-AWB [Adw]
  
  C:\System Volume Information\_restore{B22743D3-F062-426E-B1F6-9338BC116202}\RP196\A0050645.exe\DaemonTools_WhenUSave_Installer.exe
  Infection: Win32:Agent-AWB [Adw]
  
  C:\WINDOWS\system32\ActiveScan\pskavs.dll
  Infection: Win32:CTX
• ndmmxiaomayi

  8 Feb 07, 19:29

  Where did you download Daemon Tools from?
  
  You are infected with adware.
  
  If possible, locate these programs in Add/Remove
  
  SaveNow
  Save
  SearchBar
  WeatherCast
  
  Anything related to WhenU
  
  Then delete these folders in C:\Program Files
  
  Also uninstall BearShare if you use that P2P program. That P2P program is infected. For clean ones, refer here
  
  Sunbelt report
  
  After you uninstall, turn on and off your system restore. Your system restore point is INFECTED.
  
  Windows ME system restore guide
  
  Windows XP system restore guide
  
  Edit: typo error
• Y_Shun

  8 Feb 07, 19:46

  Originally posted by ndmmxiaomayi:

  Where did you download Daemon Tools from?
  
  You are infected with adware.
  
  If possible, locate these programs in Add/Remove
  
  SaveNow
  Save
  SearchBar
  WeatherCast
  
  Anything related to WhenU
  
  Then delete these folders in C:\Program Files
  
  Also uninstall BearShare if you use that P2P program. That P2P program is infected. For clean ones, refer here
  
  Sunbelt report
  
  After you uninstall, turn on and off your system restore. Your system restore point is INFECTED.
  Windows XP system restore guide

  I dun have the programs above...I downloaded my Daemon from rapidshare de...someone provided the link so i downloaded.
  
  for the system restore..can u tell me what to do in steps? the article u gave v. long..i lazy to read =x
• ndmmxiaomayi

  8 Feb 07, 19:50

  Originally posted by Y_Shun:

  I dun have the programs above...I downloaded my Daemon from rapidshare de...someone provided the link so i downloaded.
  
  for the system restore..can u tell me what to do in steps? the article u gave v. long..i lazy to read =x

  Using XP or ME?
  
  I see a WhenU installer.
  
  

  C:\Program Files\DAEMON Tools\SetupD T S B.exe\DaemonTools_WhenUSave_Installer.exe

  In fact, this Daemon Tools installer comes bundled with WhenU.
  
  Try uninstalling Daemon Tools and get a clean version from legitimate places.
• Y_Shun

  8 Feb 07, 20:56

  using XP
• Y_Shun

  8 Feb 07, 21:02

  i see tis folder..
  
  C:\Program Files\DaemonTools_WhenUSave_Installer
  
  but nth inside
• ndmmxiaomayi

  8 Feb 07, 21:22

  Originally posted by Y_Shun:

  using XP

  To disable your system restore, right click on My Computer and select Properties.
  
  Select the System Restore tab
  
  Unick this box: Turn off System Restore on all drives
  
  If you only have C drive, it will show Turn off System Restore instead.
  
  Click OK and restart the computer.
  
  After your computer restarts, right click on My Computer and select Properties. Tick back this box: Turn off System Restore on all drives.
  
  Click OK.
  
  Your system restore points will be reset.
• ndmmxiaomayi

  8 Feb 07, 21:25

  Originally posted by Y_Shun:

  i see tis folder..
  
  C:\Program Files\DaemonTools_WhenUSave_Installer
  
  but nth inside

  Is that a folder or ?
  
  A folder will not have extensions.
  
  Open My Computer, go to Tools > Folder Options
  
  Select the View tab
  
  Untick Hide extensions for known file types box
  
  Click OK. Close My Computer and open it again
  
  Does it have a .exe at the end ?
• Y_Shun

  8 Feb 07, 22:19

  Originally posted by ndmmxiaomayi:

  Is that a folder or ?
  
  A folder will not have extensions.
  
  Open My Computer, go to Tools > Folder Options
  
  Select the View tab
  
  Untick Hide extensions for known file types box
  
  Click OK. Close My Computer and open it again
  
  Does it have a .exe at the end ?

  its a folder leh..nth inside
• ndmmxiaomayi

  8 Feb 07, 22:21

  Originally posted by Y_Shun:

  its a folder leh..nth inside

  Delete the folder.
• norm

  8 Feb 07, 22:31

  Can download AVG anti virus for free from internet. Best anti virus software.
• norm

  8 Feb 07, 22:33

  Originally posted by norm:

  Can download AVG anti virus for free from internet. Best anti virus software.

  Website is at www. grisoft.com
• ndmmxiaomayi

  8 Feb 07, 22:37

  Originally posted by norm:

  Website is at www. grisoft.com

  free.grisoft.com
  
  www.grisoft.com will bring you to the paid version, and make you turn one round before finding the free one.
• Y_Shun

  9 Feb 07, 18:54

  now how ar? after deleting the restore pts..etc
• ndmmxiaomayi

  9 Feb 07, 20:33

  Does AVG alert you of anything?
  
  How is your system running? Is it still slow?
• Y_Shun

  9 Feb 07, 22:53

  Originally posted by ndmmxiaomayi:

  Does AVG alert you of anything?
  
  How is your system running? Is it still slow?

  must i die die download AVG?
• ndmmxiaomayi

  9 Feb 07, 23:17

  Originally posted by Y_Shun:

  must i die die download AVG?

  Paiseh... see wrongly. I meant if your avast AV got warn you about any more viruses...
  
  How's the PC running as well?
• kawasaki2

  10 Feb 07, 02:13

  Do you mind using this tool to scan your system and post the log file results back here?
  http://www.mynetwatchman.com/tools/sc/
  
  Download this: http://www.mynetwatchman.com/downloads/seccheckui.exe
  
  This will help us to identify more areas of infection and to aid you in confirming that your system is clean.
  
  Thanks.
  
  Also, please read this FYI:
  http://en.wikipedia.org/wiki/Daemon_tools
  http://www.siteadvisor.com/sites/daemon-tools.cc?ref=safe&aff_id=0
  http://en.wikipedia.org/wiki/WhenU
• Y_Shun

  10 Feb 07, 21:17

  Originally posted by ndmmxiaomayi:

  Paiseh... see wrongly. I meant if your avast AV got warn you about any more viruses...
  
  How's the PC running as well?

  it neva warn at all..infact last time never warn at all, it was only i scan, then i found out have virus.
  
  PC is running slow though..but i thought it was because my hardisk is quite full thats why slow. (95% full liao)
• Y_Shun

  10 Feb 07, 21:25

  na beh..
  
  i read the wikipedia then found out...
  
  Adware included
  
  The latest version of DAEMON Tools (4.0 is bundled with SaveNow, an adware product of WhenU.[1] Although the adware can be deselected during installation, this is not made clear to the user as it masquerades as "DAEMON Tools Search Bar". The WhenU web site describes this as a "SearchBar interface and new user enhancements, designed to maximize your online and desktop experiences". The setup program does ask the user if they wish to install the 'Search Bar', but it does not specifically state what the program will do. If installed accidentally, the toolbar can be removed using Add or Remove Programs.
• ndmmxiaomayi

  10 Feb 07, 23:41

  Originally posted by Y_Shun:

  it neva warn at all..infact last time never warn at all, it was only i scan, then i found out have virus.
  
  PC is running slow though..but i thought it was because my hardisk is quite full thats why slow. (95% full liao)

  You are right. Windows need at least 5% of the hard disk space to be free to run properly, and 20% of the hard disk space to be free to run without going slow.
  
  After another avast! scan, does it still report?
• gigabyte14

  11 Feb 07, 00:27

  hey jus askin... is ares spyware?