Computing.Net > Forums > Security and Virus > Unable to track down Virus.. help!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

Unable to track down Virus.. help!

Reply to Message Icon

Name: ViperThunder
Date: April 11, 2005 at 14:35:55 Pacific
OS: Windows XP Home Edition
CPU/Ram: 1200 MHz / 512 mb RAM
Comment:

Hello, I am having trouble tracking down a virus which entered my computer through Internet Explorer. When I open the Task Manager and view the processes running on my computer, there is a process with a name like "dexqyjx.exe" - i know this is the virus. However, when I end this process, the process pops back up, only with a different name. It seems that the process name is generated with random numbers and letters, and I have no way of finding this virus! I have used Norton, McAfee, Virus Chaser, AVG Antivirus, PCC Client anti-virus, and others. None of these programs are able to track down any viruses on my computer.

This virus is a nuisance because it does not allow me to view ANY pages WHATSOEVER on internet explorer. I must use mozilla firefox to surf the web.

Also, the virus will sometimes place Icons on my desktop, such as "Casino online!" "Virus Killer!"

If anyone has any idea where I might find the virus please tell me. (i have done extensive searches in my programs folder, my system folder, and my registry, yet I have found nothing suspicious yet.)



Sponsored Link
Ads by Google

Response Number 1
Name: bofra
Date: April 11, 2005 at 15:05:34 Pacific
Reply:

turn off system restore: check msconfig for any unknown selected files...
try booting in safe mode, try using solo antivirus demo, try ad-aware6/se, try toolbarcop to remove BHO plgins-only, empty temp folder, if needed manually list and remove files, using regedit search and remove those linked files and folders if needed,
after errors removed,turn on system restore and reboot, also try using regedit to save registry in seperate folder for backup later....:)


0

Response Number 2
Name: aosclay
Date: April 11, 2005 at 15:33:06 Pacific
Reply:

Hey ViperThunder,

this first part is a two step process:

First download and install TDS-3
TDS-3


Then follow this link to get the latest Radius file update for TDS-3. FOLLOW THE INSTRUCTIONS YOU SEE ON THAT PAGE TO APPLY THIS UPDATE.
Update Radius Database

Preferably, run TDS-3 from Safe Mode with System Restore turned off.

When you open TDS-3, it will perform a quick scan. Even if it detects nothing with this quick scan, you should still perform a more thorough scan. Please select System Testing > Normal Scan in the TDS-3 Control Console.

You may see results in the “alarms” column such as “Positive Identification”. Use TDS-3 to delete any confirmed threats. Right-click on any of the listed items to see a list of actions you can take. If in doubt about alarms such as “Suspicious File” ask for help or leave it alone. If the threat is part of a running process TDS-3 will ask for permission to terminate the process before attempting to remove the threat. Just let TDS-3 do its work.

NOTE: If your virus scanner or other program detected a threat as “X” name, TDS-3 may not detect it by the same name. THIS IS COMMON BETWEEN DIFFERENT VIRUS/TROJAN SCANNING UTILITIES.

Additionally, feel free to try other useful tools as well:

SpyBot S&D 1.3

Ad-Aware SE

M$ Anti-Spyware Beta

This is a very basic list of tools, but give them a try first before you start feeling hopeless.

INSTALL, UPDATE, RUN all of the above. Post if you have questions.

GOOD LUCK!


AOSCLAY
PEBKAC, baby


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


DDoS and Helkern attack People trying to connect ...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Unable to track down Virus.. help!

Unable to remove RBOT Virus www.computing.net/answers/security/unable-to-remove-rbot-virus/16080.html

Unable to Initialize Virus Scanning Data www.computing.net/answers/security/unable-to-initialize-virus-scanning-data/1547.html

T-Virus Help www.computing.net/answers/security/tvirus-help/19997.html