virus

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
My pc has a virus i can't get rid of w32.myzorFK@yf

I don't know how it got there as I am not the only 1 to use my home pc.

I got problems after downloading incodec (dumb).

My home page won't goto google and goes to a security centre page with some
pop up warning about I have this virus mentioned.

I ran avast/spyware/adaware but i think I need something more.

can anyone help?



Re: virus

jagguy wrote:

Quoted text here. Click to load it

multi-posting problem. Please don't multi-post; cross-post only when
necessary. How about looking for answers in alt.comp.virus where you
posted first?

http://oakroadsystems.com/genl/unice.htm#xpost

--
   -bts
   -Warning: I brake for lawn deer

Re: virus

johntownsley@optusnet.com.au says...
Quoted text here. Click to load it

Tried them in Safe Mode?
f8 during boot-up to get it.
--
The first rule of optimisation: "Don't do it yet"
The second rule of optimisation: "I told you, don't do it yet"

Re: virus


| My pc has a virus i can't get rid of w32.myzorFK@yf
|
| I don't know how it got there as I am not the only 1 to use my home pc.
|
| I got problems after downloading incodec (dumb).
|
| My home page won't goto google and goes to a security centre page with some
| pop up warning about I have this virus mentioned.
|
| I ran avast/spyware/adaware but i think I need something more.
|
| can anyone help?
|



Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate section.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.

If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to JRE/JSE
Version 5.0.  There are vulnerabilities in them and they are actively being
exploited.
This is most likely why you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of Sun
Java
to Version 5 on the PC that they be removed and Sun Java JRE/JSE Version 5.0
Update 7
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_07


http://www.java.com/en/download/manual.jsp



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool --
SmitRem.exe
http://noahdfear.geekstogo.com/click%20counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute;  SmitFraud.exe  { Note: You must accept the default of C:\McAfee }
Choose;   Unzip
Choose;   Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute;  c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated.  At the end of the scan, it
will be
displayed in your browser (Opera, FireFox or Internet Explorer).  However, if
you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have
to manually
shutdown/reboot the PC.  On Win9x/ME platforms the report will not be shown in
your bowser
but your PC will automatically be shutdown.  It is suggested that you move the
report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of
the HTML
report for each session.


ALTERNATE:

Part 1
-----------

Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.

http://secured2k.home.comcast.net/tools/AntiPuper.exe

http://forums.mcafeehelp.com/viewtopic.php?t=65072


Part 2
-----------

S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML  in your reply.

* * *  Please report back your results  * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: virus

Hi' Dave,
I just read this post and had a look at what version of Java I have and it
was or is  5_6, I removed from add remove and then tried to remove the
folder from Program files but it wouldn't let me so I rebooted thinking that
would help, then I did a search and there are a lot of files there some say
Windows system, I wanted to get the latest version you mentioned in this
thread. Now I don't know what to do, sorry if I am jumping in on Jagguy's
information but I am starting to worry as I have this version on my laptop
too which I only installed 2 days ago so one would think it is the latest
but not according to what you have said here. I don't have a virus but
wanted the right one,
Hope you can advise me,
Cassie.
Quoted text here. Click to load it



Re: virus


| Hi' Dave,
| I just read this post and had a look at what version of Java I have and it
| was or is  5_6, I removed from add remove and then tried to remove the
| folder from Program files but it wouldn't let me so I rebooted thinking that
| would help, then I did a search and there are a lot of files there some say
| Windows system, I wanted to get the latest version you mentioned in this
| thread. Now I don't know what to do, sorry if I am jumping in on Jagguy's
| information but I am starting to worry as I have this version on my laptop
| too which I only installed 2 days ago so one would think it is the latest
| but not according to what you have said here. I don't have a virus but
| wanted the right one,
| Hope you can advise me,


Sun Java Version 5 update 6 is OK and is not vulnerable (or at least no known
vulnerabilities).

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: virus

Oh....no, I've deleted from add remove so what will I do now Dave?.
reinstall it over all those files.
Cassie.
Quoted text here. Click to load it



Re: virus

Me again, now I'm worried about Avast, as I was going to install that on my
Laptop when Norton's 3 free months is up. Also I was going to download onto
my friend's computer tomorrow as her free 3 months is up on her desktop, but
if Avast didn't find that virus then I'm worried about it.
Cassie.
Quoted text here. Click to load it



Re: virus

I've installed Java again so all is okay. Still concerned about Avast
though.
Cassie.
Quoted text here. Click to load it



Re: virus

Cassie wrote:
Quoted text here. Click to load it
If you're willing to pay, KAV or NOD32 are the AVs to
choose.  My personal preference is NOD32, but there are many
here who prefer KAV.

If you want a free one, as I understand it, the best is AntiVir.

Either way, stay away from Norton bloat.

Louise

Site Timeline