Help - I am being haunted

• LyonK

  16 Aug 07, 23:10

  Originally posted by Lin Yu:

  some stupid friends sent don't what files in msn and infect the com. die die liao
  

  I think so too...cos the files exist in My Documents..most likely My Received files.
  
  Also, u used what to clean? Must be those pop ups asking you for free clean one, etc etc right?
• eagle

  16 Aug 07, 23:12

  I just had a new method for clearing which I did for my gf's comp last time...
  
  I use spybot to clear some spywares...
  But as you know, the spywares start itself again on reboot.
  
  What I did:
  I used easycleaner to check through the startup registry and delete those spyware entries... They usually have funny names.
• ndmmxiaomayi

  16 Aug 07, 23:22

  Hello Lin Yu,
  
  Please follow Step 1 properly and post the log. I will look through it.
• Lin Yu

  16 Aug 07, 23:24

  Originally posted by ndmmxiaomayi:

  Hello Lin Yu,
  
  Please follow Step 1 properly and post the log. I will look through it.

  post liao in pg 1
  
  
  many thks.....
  
• ndmmxiaomayi

  16 Aug 07, 23:26

  Originally posted by Lin Yu:

  post liao in pg 1
  
  
  many thks.....
  

  You haven't rename HijackThis yet.
• AndrewPKYap

  16 Aug 07, 23:30

  Maybe an online scan will be better...
  
  http://housecall.trendmicro.com
  
  click to link: http://housecall.trendmicro.com
• Lin Yu

  16 Aug 07, 23:32

  Originally posted by ndmmxiaomayi:

  You haven't rename HijackThis yet.

  got leh. rename as dumb.exe
  
• ndmmxiaomayi

  16 Aug 07, 23:37

  Lin Yu, skip the renaming part.
  
  I'll get straight to the fix.
  
  Step 1
  
  Follow this post to remove the MSN virus.
  
  Step 2
  
  

  [*]Download SDFix by AndyManchesta and save it to your desktop.
  [*]Double click on SDFix.exe. By default, it will install to C:\.
  [*]Click on Install.

  
  
  Next, boot into Safe Mode.
  
  

  [*]When you see BIOS screen, start pressing F8.
  [*]A boot menu will appear shortly.
  [*]Using the up down arrows, select Safe Mode and press the Enter key.
  [*]Windows will now load.
  [*]Log in to your usual account.
  [*]Navigate to C:\SDfix (if you installed it to the default location, otherwise, locate where you installed it)
  [*]Double click on RunThis.bat
  [*]Type Y to begin the cleanup process.
  [*]It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
  [*]Press any key to reboot.
  [*]When the PC restarts the tool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
  [*]Once the desktop icons load, the SDFix report will open on screen. You can also find the report in SDFix folder, named Report.txt.

  
  
  Step 3
  
  Please download Combofix from Tech Support Forum or Bleeping Computer. Save it to your desktop.
  
  Double click to run it. Follow the prompts. Once done, it will reboot and a log will be produced. Please post that log and a new HijackThis log in your next reply.
  
  Do not mouse click on Combofix while it is running. That may cause it to stall.
  
  Please post these logs in your next reply:
  
  1. MSN Cleaner log
  2. SDFix Report (C:\SDFix\Report.txt)
  3. Combofix log (C:\Combofix.txt)
  4. A new HijackThis log
• Aaron8209

  16 Aug 07, 23:37

  
• ndmmxiaomayi

  16 Aug 07, 23:37

  Originally posted by Lin Yu:

  got leh. rename as dumb.exe
  

  Never, but never mind. Skip this step first. Do as instructed. It will take some time.
• Lin Yu

  17 Aug 07, 13:51

  
  seems to be working......mayi jie jie, you are an angel
• Lin Yu

  17 Aug 07, 13:59

  can i use lavasoft & AVG again toi check later?
  
• yiha093

  17 Aug 07, 14:39

  Originally posted by Lin Yu:

  can i use lavasoft & AVG again toi check later?
  

  canot
• ndmmxiaomayi

  17 Aug 07, 15:32

  Originally posted by Lin Yu:

  can i use lavasoft & AVG again toi check later?
  

  After I'm done with your logs. That will be tonight.
• hiphop2009

  17 Aug 07, 18:10

  lin yu! wad hav been doing ar......so many trojan and virus....
• Lin Yu

  18 Aug 07, 01:00

  Originally posted by hiphop2009:

  lin yu! wad hav been doing ar......so many trojan and virus....

  some stupid fellow send msn files
  
• <Precious>

  18 Aug 07, 01:09

  Your anti-virus software may not be updated to handle newer viruses. To the worst, reformat your hard disk before reloading all your programmes afresh. Painful process if your data hasn't been backed up and will be wiped out this but the surest way to eradicate the menace!
  
  See what Dr mayi prescribes first.....
• <Precious>

  18 Aug 07, 01:14

  Isn't it very reassuring to have mayi around?
• progene

  18 Aug 07, 01:32

  Whaaa Realli power sia!!
  
  1st time i see ppl can save another party com thru thread and post..u really power sia..
  
  me got to bow down to you le!
  
  
• progene

  18 Aug 07, 01:35

  To Lin Yu,
  
  Hope everything is fine now!
• eagle

  18 Aug 07, 01:36

  Originally posted by progene:

  Whaaa Realli power sia!!
  
  1st time i see ppl can save another party com thru thread and post..u really power sia..
  
  me got to bow down to you le!
  
  

  there are many other forums who did that too... but mayi should be the first one to do it in sgforums.
  
  Actually if you can find the name of the spyware, chances are, you will be able to find the solution through google.
• Lin Yu

  18 Aug 07, 01:38

  Originally posted by :

  Isn't it very reassuring to have mayi around?

  you can say that again. dad will skin me alive
• ndmmxiaomayi

  18 Aug 07, 01:49

  Originally posted by Lin Yu:

  you can say that again. dad will skin me alive

  OK. Emailed you back. Check your mail. Freaking stubborn infection. Not to mention that this infection is very old!
• pierre^^

  18 Aug 07, 02:09

  yup
  
  it realli grt to have such a nice person to help solve our problems around
  
  thks mayi .... auntie..
• xShevchenkox

  18 Aug 07, 02:24

  Originally posted by pierre^^:

  yup
  
  it realli grt to have such a nice person to help solve our problems around
  
  thks mayi .... auntie..

  yea agreed too