help please. i'm screwed

Skellington

hey people.

an alert keeps flashing from the toolbar on the bottom right of the screen on my laptop saying a dangerous infection was detected on on my computer. when i ran adaware it said i had 7 trojan downloaders and 7 trojan alerts with tac(?) ratings of 10:( (very bad) but it wasn't able to delete them... when i ran avg, that said result ok.

edit...
actually i now have two alerts flashing at me from the bottom right toolbar.

what the hell can i do about this? please help.
punch and pie for the person who helps fix this.

thank you.

Endurance Man

Download Spybot and try that quickly .

Tony H

are the flashing alerts from a programme you know that you installed ?
because if not they are probably spyware themselves
and adaware cannot delete them until the programme itself has been closed

sweno

Open up task manager (Ctrl + Alt + Del) and goto processes tab. Go down the list and see if you can find the program(s) mentioned in the alert then click on the program to highlight it and click the "end process" button. It probably can't be deleted if its running away in the background. Post up the details of the alerts and it'll be easier to find a solution..

J.R.HARTLEY

fitzdragon wrote:

are the flashing alerts from a programme you know that you installed ?
because if not they are probably spyware themselves
and adaware cannot delete them until the programme itself has been closed

this is a very important question, you must be sure the alerts are not a form of trickery from some sneaky bit of malware

Offalycool

Hi, if u are using IE explorer to navigate the web, it is probably responsible for this sorry state. I recommend that u go to http://housecall.trendmicro.com/ and download coolwebshredder. This badass program will clean up explorer. Once this is done, use IE to access the online scanner available on the same page to clean up ur system, This cleaner is the business. I then recommend u never use IE again as it is really S**T. Download Firefox, just Google it. When u have this get the add blocker and the no script plug in, available from the extensions options in the tool options of Firefox. This will give u much more controle over what gets in and out of Firefox. SpyBot is also a must have, get all these programs from there homepages.. Good Luck.

Skellington

hey again.
thanks for the help all but nothing worked. spybot gave the all clear as did coolweb shredder. when i click end process in task manager on the programs they which are actually malware(nvctrl.exe and ncompact.exe are only ones i can remember) they stop for about 2 seconds then reappear elsewhere on the list of programs. the alerts from the toolbar aren't from progras which i installed. i cant even access boards.ie from IE Explorer (i'm using firefox now), when i try it goes straight to a page which says

Attention! Your system is under control of remote computer with IP address 227.4.167.118. The remote computer has access to the following folders on your PC:
- \WINDOWS\System32
- \Program Files\Internet Explorer
- \My Documents
- Drive C:\ files

will wiping everything from my computer help, i.e memory, hard drive, whatever else. if so, how do i do that, or are there any other solutions you can come up.

thank you.

Offalycool

Have u used the online scanner at Trendmicro? If that hasn’t worked get the Microsoft Windows Malicious Software Removal Tool http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en
Give this a try

kleefarr

Hacked? :eek:

Tony H

http://www.trendmicro-middleeast.com/enterprise/vinfo/encyclopedia.php?LYstr=VMAINDATA&vNav=2&VName=TROJ_ZLOB.AN
was going to suggest the trend online scan as well , i would also suggest turning off system restore first , then boot into safe mode and run the online scanner

Skellington

hey,
thanks for the link but sadly

NO MALICIOUS SOFTWARE WAS DETECTED

also, an alert popped up saying

Urgent System Message: Virus
Your computer is infected with the last version of internet trojan
(iworm_attck_v122.02a)

i'm guessing thats bad but how bad is it?

Skellington

hi,
can you tell me what system restore and safe mode are please?

thanks.

Offalycool

what version of windows have u got?

Tony H

looks like you are infected with spyaxe
http://forums.spywareinfo.com/lofiversion/index.php/t64255.html

have a look at this link

and this one
http://www.computing.net/security/wwwboard/forum/17278.html

Offalycool

http://www.bleepingcomputer.com/forums/topic36868.html dont know about this???

this is intresting http://www.wilderssecurity.com/showthread.php?t=105881

Offalycool

I found this on AVG's web site, worth a try http://www.grisoft.cz/softw/70/filedir/util/avg_rem_sup.dir/vcleaner.exe
There are loads of removel tools like this on the same page http://www.grisoft.com/doc/112/lng/us/tpl/tpl01

TheWolf

Boot into safe mode by pressing F8 at startup, then try running spybot and the others