Virus - Please help

FlawedGenius

Earlier while looking for a stream for Liverpool match I caught a virus. It said the computer had caught a virus, i was asked to scan. It kept bringing me to an Anti Virus System Pro and it asked me to pay 69 euro thru Visa. I kept getting Viagra and Porno.com pop ups. I could go on certain websites but it would be very slow and it would usually fail the first time. I was told by somebody to download SPYWARE DOCTOR and that stopped the durty pop ups but its still took very long to load pages and it would fail first time, and it still kept giving me the following "INTERNET EXPLORER WARNING - visiting this web site may harm your computer
Most likely causes:
The website contains exploits that can launch a malicious code
Suspicious network activity detected
There might be an active spyware running on ur computer
What can you try
Purchase Antivirus System Pro for secur Internet surfing
Check your computer for viruses and malware

It also said, "your computer is infected by spyware - 34 serious threats have been

FlawedGenius

sorry not writing this at a PC so could not write it in full.
it said 34 serious threats found while scanning your files and registry.
It also said it is strongly recommended that you disinfect and activate Realtime secure protection against future intrusions.
What should I do its very annoying? Im not fetting the pop ups anymore but I stkll have the virus.
I think its very similar to the other thread about his/her Dads laptop, exact same pop ups so hopefully its nothing serious.
Sorry for the long posts.
Id really appreciate the help

Spudzz

GerCPM wrote: »

sorry not writing this at a PC so could not write it in full.
it said 34 serious threats found while scanning your files and registry.
It also said it is strongly recommended that you disinfect and activate Realtime secure protection against future intrusions.
What should I do its very annoying? Im not fetting the pop ups anymore but I stkll have the virus.
I think its very similar to the other thread about his/her Dads laptop, exact same pop ups so hopefully its nothing serious.
Sorry for the long posts.
Id really appreciate the help

Download, http://download.cnet.com/SuperAntiSpyware-Free-Edition/3000-8022_4-10523889.html free edition.
That should sort you out.If not get back and we can try some more.

Spudzz

Ger,
If the above does not work try did one.
http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html

What you have is Adware,

PS.. Do a full scan with both of them if the first one does not work.

Deliverance

Well what I would do is this: Download Ccleaner here: http://www.ccleaner.com/ Also download this: http://www.malwarebytes.org/ Run malware bytes (full scan) and see how that goes. What antivirus software are you running at the moment?

FlawedGenius

LADS, THANKS ALOT FOR THE QUICK RESPONSES. STILL NO JOY ITS DRIVING ME MAD. I DONT HAVE ANY POP UPS ANYMORE BUT SURFING THE WEB AND CLICKING ON UR LINKS IS HIT AD MISS.I HAVE TO DOUBL CLICK EVERYTING REALLY FAST FOR THEM TO WORK. I CANT VIEW UR LINKS, ANYTIME I CLICK ON THEM IT SAIS """ INTERNET EXPLORER WARNING VISITING THIS WEBSITE MAY HARM UR COMPUTER"""" IT HAS A LITTLE COLOURED CIRCLE BESIDE IT. ITS THE SAME THING THAT WAS COMING UP EARLIER. I CANT CLICK THE LINKS THIS PAGE KEEPS COMING UP. WHAT D FUK AM II MEANT TO DO.... DO I UNINSTALL ANTI VIRUS AFTER INSTALLING THEM?
SORRY FOR THE CAPS
THANKS AGAIN LAD

FlawedGenius

It wont let me click ur links

FlawedGenius

When I click to go to link it shows that warning with a coloured circle beside and sais i should try purchasing AntiVirus System Pro..hope u understand what I mean lads.

ActorSeeksJob

hi

Please download ComboFix from Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**

1. If you are using Firefox, make sure that your download settings are as follows:
   • Tools->Options->Main tab
   • Set to "Always ask me where to Save the files".
2. During the download, rename Combofix to Combo-Fix as follows:
   
   
   
   
   
   
3. It is important you rename Combofix during the download, but not after.
4. Please do not rename Combofix to other names, but only to the one indicated.
5. Close any open browsers.
6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

   ---

   • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
   • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.

     ---

   • Close any open browsers.
   • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
   • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
   • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.

   ---

7. Double click on combo-Fix.exe & follow the prompts.
8. When finished, it will produce a report for you.
9. Please post the "C:\Combo-Fix.txt" for further review.

**Note: Do not mouseclick combo-fix's window while it's running. That may cause it to stall**

FlawedGenius

I think this is serious stuff. I cant click any links, Windows Security Alert keeps coming up saying the file is infected.Help

FlawedGenius

When I change the name and try to run it no black screen comes up it just fails on me.

ActorSeeksJob

rename combofix to svchost.com

it run then ?

If not do these


Please download exeHelper to your desktop.

• Double-click on exeHelper.com to run the fix.
• A black window should pop up, press any key to close once the fix is completed.
• Post the contents of log.txt ( Will be created in the directory where you ran exeHelper.com )

Note : If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together ( they will both be in the one file ).



Please save this file to your desktop. Double-click on it to run a scan. When it's finished, there will be a log called Win32kDiag.txt on your desktop. Please open it with notepad and post the contents here.

scubagit

here's how I sorted it.
Open your task manager and in the processes page look for something like osguard.exe (It may be there more than once). Take note of the location as well as it will be in your C/program files. Highlight it and click end process. This will turn the virus off.
Next, go into your C/Program files and you should see the folder named in step one. Delete the bugger and empty your trash.

I tried several antivirus programs (AVG, Symantec, and Panda) and none would shift it. This is the only way I could get rid. It turns out it was quite easy to to once I knew to turn the virus off before trying to delete.

Deliverance

Did a bit of research on the above and it is indeed the 'osguard' virus which points to the 'Antivirus system pro link'. So the above advice could very well work for you OP. I did something similar with a virus awhile back using the registry, the little bugger was in there (by name) and I simply deleted it and it never came back.

Signpost

This was all caused from watchin Liverpool... I'd recommend switching to a proper soccer team :P

Not too sure of the virus but if you want a site thats ace for all soccer games let me know. They stream directly through the browser so no downloads etc

scubagit

So is the virus gone or what???