Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
Ok i think i got a unkillable virus/trojan. I have AdAware,Spybot,AVG 8.0 Premium.
What happens is when i edited the RegistryEditor after i scanned from DisplayBackground/Screensaver from 1 to 0.
Then when i log off and log back on i get my edited desktop background but then it reverts back to a white screen and AVG/Spybot goes off. I tried AVG to heal it, it said unfixable,etc and Spybot says changes in Screensaver.exe from the original to the virus. It says allow change or don't change. Help plz ive been working on this for a while
0 
Your post is as clear as mud. You need to explain things a lot better.
Unfortunately, no one anti-spyware or anti-virus program finds and/or can remove all malware, but there is almost always something out there that will, or some procedure to find that will tell you how to remove it.
""I tried AVG to heal it, it said unfixable,etc"
Sometimes when a file is infected it cannot be healed - if it's an essential file, it must be replaced - if it isn't you can delete it, one way or another.You have not provided a good enough description so far for us to be able to determine what virus or other malware you have.
If AVG detects an infected file and names the malware, what is the name it gives the malware?
If you have other symptoms, we need to know the details.
You should probably NOT be running AVG 8.x and SpyBot at the same time! The anti-spyware software in AVG will likely clash with that in Spybot!
You may need to disable one or the other at a time!
- You can disable the Resident Shield in AVG under Tools - Advanced Settings - Resident Shield - that disables the resident part(the part that runs all the time) for both the anti-virus and anti-spyware.
- you can probably disable the resident part of Spybot, but I don't like it and I don't use it, so I can't tell you how.
- the free Adaware 2008 version can be run at the same time as AVG 8, because it only runs when you run it - it has no resident part (that runs all the time).
- I have no idea whether running AdAware gets along with Spybot running at the same time.
- Personally, I would un-install Spybot - then you don't have to mess with it or disable AVG!
......There is no file Screensaver.exe built into Windows XP, but if you have downloaded a screensaver from the web, or if one was installed by some progran you installed, you may have a file by that name on your computer somewhere.
When Spybot nags you about that file, or any file, changing, you should be able to close that message window by click on an X in the top of the message or similar, rather than you having to answer the message one way or the other. If you can do that Spybot will evetually nag you about it again, but in the mean time you could search your computer to find out where Screensaver.exe is on your hard drive, which should give you clues about what it might have been included in or installed by. You can also RIGHT click on it, choose Properties, and you may be able to determine which software maker made it.
Once you have an idea who made it or what it was included with, you can go on the web, search using screensaver.exe and the name of the company and find out what size(s) it is supposed to be - if it's not the right size delete it! It is probably infected!Spybot will alert you when many things change - it's like a firewall that way - that does NOT necessarily mean it's malware, and it usually is NOT malware.
On the other hand, screensavers don't normally change size, and it's not an essential file that's included with Windows!
0
What happen was i ran SpyBot first then AVG afterwards. I listed the names of the malware i believe in response 3. Now AVG can heal it but when i restart it comes back and resets the settings on registry editor. Also the Screensaver i didn't download one it just happened to disable my 5 tabs into 3 tabs as well as disable the settings for my screensaver. Also the reason my explanation wasn't that thorough was because im new and didn't know to list everything. The virus's are in C:/Windows/system32/the 2 viruses/spyware/malware
0
Oh now i know what you mean on listing it.
Ok the phcv1cj0er1q.bmp(Background error) is a Trojan horse generic_c.VCZ
The other is a Trojan Horse Agent.AADP
0
Try performing the following but before you do, disable System Restore (all restore points will be lost). Run them all from safe mode.
Download, install & run CCleaner 2.10.618 - do NOT install Yahoo tool bar.
Download, install & run Trojan Remover 6.7.2a
Download & install SuperAntiSpyware 4.15.1000, run the update, then run the scan.
Also, use MSCONFIG to disable any suspicious startup entries:
How to use MSCONFIG in Windows XP
"If my answers frighten you then you should cease asking scary questions" - Jules Winnfield (Samuel L. Jackson) in Pulp Fiction
0
It's good to hear you seem to have solved your problem.
"What happen was i ran SpyBot first then AVG afterwards."
You may not be "getting" it - both are probably running their resident module all the time.
Whether you are actively running a scan yourself or not.....
- AVG 8.x, whether the free or paid version, has a resident module called Resident Shield that runs all the time - so does (I'm still using 7.5 in 98SE) / did AVG 7.x, but it is/was anti-virus only. It is always running in AVG 8.x in the background unless you disable it, as in response 4. According to AVG's support, that's usually all you need to do to prevent AVG from interfering with other software, or if a software installation tells you to not have anti-whatever software running while installing their software.
I disable that whenever I am installing software myself, or usually when I run other anti-spyware programs (I don't need to for the free AdAware, but I turned it off while running the free Malwarebytes version), or other anti-virus programs.
- the last time I downloaded the free version of SpyBot, it had a resident module that runs all the time - as far I know it still does. As I vaguely recall, I think one of the reasons I stopped using Spybot was because it clashed with something else I was using.I don't know for sure if the resident anti-spyware part of the module AVG loads clashes with the same sort of thing in Spybot or not, but I do know many similar programs will clash with each other if more that one that does the same sort of thing has a resident module running at the same time.
0  |
 |
 |
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
