VIRUS-need help (Bebo)

branne2003

I opened a mail, on Bebo, from a friend. It was entitled 'wow' and said to check out a video. I, in my stupidity, clicked to download the 'software' to view the link. My PC is now messed up. Needless to say, my father, who is doing exams at the moment and is relying on the PC is none too impressed!!!!

Can anyone please help with ways to rid my PC of this?

JaneyMc

Yeah, I've gotten two of these emails, but I deleted them! My friend got caught with it, and she fixed it, I'll ask her what she did.

branne2003

That would be great....thanks!!!!!

JaneyMc

Erm, I text her and she said her next door neighbour ran some virus scan on it, and she won't see him until after the weekend, if you have no solution by then I'll try get you an answer. What exactly is wrong with it?

Doodee

try running AVG Free if you don't already have it.

Another option is to run Stinger.exe from McAfee

Jari

hi

u can run online virus scan just go to Google and type online scan and choose anyone. if u don't have a anti virus u can download avg it's free

Lazarus2.0

Saruman had this to say about it ..

I know this one very well, i remove it off so many computers i have lost count. I even managed to get it myself, using firefox one day. Only had it for about 10 mins but i know that if it goes untreated, you can lose the ability to view network shares (except mapped drives) and you no option but to format. Even a repair windows install does not fix it.

If you get it, use the smitfraud fix software then install malwarebytes, update it and run a scan. It should get rid. Hijack this is great if you know how to use it too.

and said it in this thread http://www.boards.ie/vbulletin/showthread.php?t=2055408832

heresjonny30

My Mrs clicked this yesterday and nearly killed the laptop. boo!

One of the best and most trusted anti spyware/malware programs to run is malwarebytes. Website: http://www.malwarebytes.org/

You can upgrade to the pro version but the free version is excellent. you may have to big button you machine and restart in safe mode with networking to download, install and run.

I found a file called algg.exe in this folder: c:\windows\system32, there is another file next to it called alg.exe but this is a safe file. Check the date modified for the file, and it should match the date and time that you clicked the link. delete the algg.exe if you can but malware bytes will/should pick it up. Its also worth sorting this folder by date modified and ditching other files modified at around this time. A couple of other files I deleted had random numbers and letters making up the file name.

After running the malwarebyte scan I also ran my virgin virus scanner everything came back clean. I usually run this in "on access mode"

Hope this helps, also worth clearing all you internet cookies and temp files. Change your passwords once your machine is clean. Clear you recycle bin.

Think before you link!!!!

good luck

hj30

LEIN

Did you try the windows live one care scan?

http://onecare.live.com/site/en-us/default.htm

It works really well.

heresjonny30

Haven't tried it. Will give it a look over. I'm clean now. Just need to educate the mrs.

Been using the virgin media security suite for two years now, its done me proud. Its caught everything and isn't too intensive. Even caught the one yesterday just couldn't over power it. PC just hung for 4hours till I got in from work, after a day banging my head against servers, great way to relax, ;-)

Not usually into the free stuff but malwarebytes has a great reputation. you should check it out, can never be too secure.

hj30

KatCookie

i've gotten two of those emails.. thankfully didnt open either, i'm wondering how they get sent around.. must be those damn apps sending spam though peoples accounts!

LEIN

OP did you have any luck getting it sorted?

snorlax

thanks a million everyone..i got that virus thing to..im just about ready now to delete my bebo account!

stylers

were you using a script blocker on firefox ?.. interesting to know the attack vector.

davil

I've been at a few computers that were infected by this and so far I've usually seen "tinyproxy" and "Virus Response Lab 2009" malwares - there's more on the go, infected DLLS I think etc.

I was able to clean without re-install using Combofix
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

and

MalwareBytes Anti-Malware
http://www.malwarebytes.org/mbam.php

RichyX

This thing is all over the computers in my college.
I've noticed every time I used my usb drive in college it seems to have a virus on it when I try it a home.
Same virus?

davil

That's very possible Richy. but there's probably more than one virus doing the rounds in your college. it can be very hard for a college I.T. department to police a "public" windows network and keep it safe with people bringing in USB flash drives. I wish I could help there. but they'd need to give me a job first :-D in all seriousness though, I can't help your college dilemma because to run some cleaning tools you'd need full admin access. I suppose it depends on the system though. you could try some of the tools mentioned in this thread. Some of them can be downloaded in a "portable" format, which will run from your USB stick, eg. combofix is portable by definition, it's only a single EXE file. - give it a go. but to be honest I'm just glad I don't need to use a college PC ever . Laptop for the win!!!

Silenceisbliss

Anyone whos foolish enough to click one of those links deserves a computer virus imo. sheesh.

...
...
...
...
...

oh cool, whats this?! im the one millionth viewer to this page! I CAN WIN A FERRARI!...CLICKY CL...... ...poof!...../&(&%/(&(&§)%(/)="%)&/$§

davil

Yeah well my girlfriend uses my computer at home and she clicked on it but luckily I have firefox and a few blocker addons and it came up saying that it was a known attack site and not to continue and luckily she understood. But other people were not so lucky. People shouldn't be blamed for clicking on links that look like they come in from their friends. How are they to know without looking at the URL and researching it? That's all well and good for you and me that's good with computers but what about everybody else? Anyway it means I get to repair more computers which is good for my pocket, however I would much prefer if people didn't get these viruses. Honestly. the people who make these things should be tarred and feathered!!!! if not worse!

RichyX

davil wrote: »

How are they to know without looking at the URL and researching it?

I think quite a few of those emails said a video or whatever was on youtube.
The link clearly wasn't to youtube so a bit of common sense wouldn't do a lot of people any harm.

My girlfriend managed to click on one of those links while at work. She was bricking it that she'd wrecked the whole computer system there

davil

aye Richy you have a point. oh well. I've a job to do this evening cleaning this virus. I did same yesterday and am scheduled to do another one tomorrow. it's mental.