Computing.Net > Forums > Security and Virus > More AIM Virus Problems

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

More AIM Virus Problems

Reply to Message Icon

Original Message
Name: Nick
Date: November 20, 2003 at 12:51:21 Pacific
Subject: More AIM Virus Problems
OS: WinXP
CPU/Ram: Pentium M Processor 1.58G
Comment:

I had that stupid b.exe (aim virus) thing on my comp. I downloaded the phx program and got rid of it. Problem is the bbb.exe file is still there. I quarentened it but i cant clean it of my comp. In addition to the bbb.exe file i also have several more infected files (also quarentened) and they are as follows: randomiser.exe, A0014063.exe, A0013984.exe, and rbuxgbdz.dll. I know they won't do much so long as they are quarentene but i would prefer they not be there at all. Is there anyway to remove the files without formatting my comp?

Also, after i got it the virus this wierd popup for Golden Palace Casino started to show up every now and again. I ran Ad-aware 6 and Spybot S&D and niether of them came up with anything. Anyone know how to clear the popup off?

Thanks for any help you can give.

Nick



Report Offensive Message For Removal


Response Number 1
Name: blender
Date: November 20, 2003 at 13:31:27 Pacific
Reply:

To remove the files from Quarentine...depending on what av program you are using you will need to get to the quarentine panel (should be under options or something like that) once open hilight all files listed and click delete button, ok the are you sure box that comes up.

As for the Golden Palace popups...found a site with some info:

http://themezz.com/index.shtml

There might be a file loading up from the xctive x folder...c:\windows\downloaded program files; if you see anything in there relating to Golden Gate delete it.
If you havn't already done so...
Also good idea to delete your temporary internet files and cookies in IE properties, check to delete offline content, ok.
Someone else here might have better info on Golden Gate.

Good luck


Report Offensive Follow Up For Removal

Response Number 2
Name: Nick
Date: November 20, 2003 at 18:13:37 Pacific
Reply:

I couldnt find the folder the article talked about. However I cleared out my temp folder and cookies and the popup has yet to reappear but it wasnt popping up at random when i first got it so i will let u know if it comes back.

as far as my av program, i am using symantic antivirus corporate edition but is it safe to delete the files? doesnt deleting them mean that the quarentine is lost for a very small time right before they are deleted, so couldnt they escape? i dont know much a whole lot about this stuff. Anyone out there who can shed some light on the situation?



Report Offensive Follow Up For Removal

Response Number 3
Name: blender
Date: November 20, 2003 at 19:43:45 Pacific
Reply:

I've done more looking at those file names you have in quarentine...
If your norton detected the virus as downloader.mscache you might want to look at nortons write-up before deleting those files. It seems that you need to "unregister" the nasty browser helper object which means you likely need to restore the .dll file from quarentine in order to unregister it...then remove it again.
sorry this is so confusing but here's the link with instructions.

Downloader.MSCache

Hopefully that helps more


Report Offensive Follow Up For Removal

Response Number 4
Name: john115
Date: November 28, 2003 at 11:24:04 Pacific
Reply:

I solved the Golden Palace Casino pop-up problem on my computer running XP. There are two files that you have to remove: htgvnkmx.exe in the Windows/Prefect directory and another file that starts with htgvnkmx that has a .pf suffix that I found in the Windows\System folder. Run a search for htgvnkmx and it will lead you to both.

Also, run regedit and run Find (Control F) htgvnkmx. Delete all folders with reference to it and do the same for casino.

That did it for me. It was really bugging me. Score one for the little guys who have to put up with the dirtbags that attack our computers with adware.


Report Offensive Follow Up For Removal

Response Number 5
Name: simmer
Date: December 20, 2003 at 20:51:53 Pacific
Reply:

I keep getting the Downloader.MSCache virus and my system 32 folder stays open when windows starts up. i tried what norton anti virus told me to do and it didnt work. i need help.


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home



Results for: More AIM Virus Problems

i found a cure for aim virus?
    Summary: Good on you, rebeccaestes! Always great to hear of a removal tool update, and particular AIM as it's an annoying little sod. We've used Jayloden's tools in the past, so if they recommend Raisp.com's ...
www.computing.net/answers/security/i-found-a-cure-for-aim-virus-/8131.html

AIM Virus
    Summary: ok, i installed this virus on me and it was really easy to get rid of it. here are the steps. 1) reboot into "safe mode" 2) go into c:\windows\system\ and delete explorer.exe ( the main explorer.exe i...
www.computing.net/answers/security/aim-virus/712.html

AIM virus and spyware
    Summary: for aim virus download and run aimfix http://www.jayloden.com/aimfix.htm for spyware and other viruses try an online scan at http://housecall60.trendmicro.com/en/start_corp.asp?id=scan run the complet...
www.computing.net/answers/security/aim-virus-and-spyware/16783.html








Which MP3 player do you have?

iPod/iPhone
Zune
Something Else
None


View Results

Poll Finishes Today.
Discuss in The Lounge
Poll History






Data Recovery Software