Computing.Net > Forums > Security and Virus > storageprotector?? virus?? 2 shortc

storageprotector?? virus?? 2 shortc

Reply to Message Icon

Original Message
Name: nadimgawdat
Date: December 21, 2007 at 13:05:59 Pacific
Subject: storageprotector?? virus?? 2 shortc
OS: Windows Xp Sp2
CPU/Ram: PD 3ghz/1gb
Comment:

I got a virus that puts two shortcuts in the desktop, "help & support center" "Windows update" and it doesn't allow to erase them, if I click them, it takes you a web page that resembles windows help page, and update center has links to .exe files, this virus(i'm not sure what kind of thing it is) also puts thousands of temporary files in the root of "C" drive and in My Documents folder, not any antivirus software, could resolve the problem, i'm about to format and reinstall everything, Please help me , i'm fed up!

http://storageprotector.com/clean/?...

http://storageprotector.com/clean/?...

those are the url's of this thing


Report Offensive Message For Removal


Response Number 1
Name: Abnormal
Date: December 21, 2007 at 13:49:05 Pacific
Reply: (edit)

Warning to others, do not click above links!
DANGEROUS: LinkScanner Online has detected a malicious site.
http://linkscanner.explabs.com/link...


Report Offensive Follow Up For Removal

Response Number 2
Name: nadimgawdat
Date: December 21, 2007 at 14:30:10 Pacific
Reply: (edit)

yes it is, do not download those files .exe, and I hope that someone can help me with this issue, I don't want to reinstall everything.


Report Offensive Follow Up For Removal

Response Number 3
Name: Abnormal
Date: December 22, 2007 at 11:27:43 Pacific
Reply: (edit)

RogueRemover may help.
http://www.malwarebytes.org/roguere...
StorageProtector detection was added 12/10/07

VundoFix by Atribune
and combofix may help also.

Other tools
www.superantispyware.com
http://www.comodo.com/boclean/boclean.html


Or start with a hijackthis log in one of the many dedicated reading forums.
Alliance of Security Analysis Professionals


Report Offensive Follow Up For Removal

Response Number 4
Name: nadimgawdat
Date: December 22, 2007 at 20:38:17 Pacific
Reply: (edit)

I already removed it, it was a pain in the ass, cuz not any
antivirus could even detect it, I run several rootkit
detectors in order to determine which processes were
running behind, I detected some .exe in the system32
windows folder, so I erased the registry entries, then I
identified a service called storageprotector, I stopped it,
then from another Win Installation, I erased the thousands
of .tmp files that keep the application running, and finally
erase the dll, that keep this s--- alive..finally I managed to
do it.
I used rootkitrevealer and IceSword, hijackthis obviously,
another pc for erasing the used files that run processes


Report Offensive Follow Up For Removal

Response Number 5
Name: heyybeth
Date: January 21, 2008 at 12:01:53 Pacific
Reply: (edit)

I ran 2 programs and used the System Restore. (Window Washer- to remove the temp internet files and Spybot- Search and Destroy) to find the files, ad delete them. Then I used the go back button and I went back 48 hours. This worked for a TEMPORARY time. It seems like 22 hours later the problem came back.


Report Offensive Follow Up For Removal


Response Number 6
Name: Warren Hatton
Date: January 30, 2008 at 18:23:48 Pacific
Reply: (edit)

I've spent 2 days trying to get rid but finally had to do a restore after trying to delete files etc. I never made a back up of my files and lost 1,000's of important emails, contacts and files, feel like slitting my wrists right now. I spent £50 on two separate spyware packages but to no avail....

I'm so pissed off about this (which was the final nail in the coffin) and other issues with the UK's lazy government that tomorrow I'm making my two staff redundant and closing my business......

I've had enough, it's just not worth all this hassle. I've had 10 years of jumping through hoops and trying to avoid viruses blah blah blah.

The government will say, make sure you have an anti virus, that's like saying wear a stab proof and bullet proof jacket and you won't die from a stab or gunshot wound!!!!



Report Offensive Follow Up For Removal






Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: storageprotector?? virus?? 2 shortc

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes In 5 Days.
Discuss in The Lounge