Advice on virus clean-up

Nemi

About a week ago, my daughter clicked on one of those ‘your computer has a virus’ type messages, and several viruses got into the machine as a result. Our PC is a Dell Dimension 3000, running XP home. We use Eircom broadband. Up to this, we’ve had a pretty virus-free existence.

I’ve run all the protective software that I’ve been using. These are McAfee Anti-virus, Windows Defender, Spybot Search and Destroy and Malwarebytes Anti-Malware. All found at least one virus/Trojan/dodgy registry entry. All dodgy entries have been cleaned/quarantined by the relevant product. I’ve run all the products again a couple of times, getting updates for Search and Destroy and Malwarebytes, and nothing is now showing up. The PC is showing no obvious signs of harm – speed is OK, and there are no problems with pop-ups.

The only obvious legacy of the event is that Internet Explorer can’t browse – which isn’t a practical problem, as I also have Firefox. However, clearly I’ve a bit of concern about why exactly IE isn’t working. The immediate reason seems to related to the ‘proxy server’ box being ticked in the Tools/Internet Options/LAN settings button window. I know this as it also obstructs Malwarebytes from updating – so what I’m doing at present is unchecking this box, downloading the update, and then re-checking the box as I’m unsure about what the long-term effect of unchecking the box is. (I found instructions about the proxy server setting when I Googled for solutions to the Malwarebytes error code - Error 732(12029,0)

I‘ve really two questions that I’d be glad of any help with.

Are there any other useful checks I might perform on my PC before reverting to normal use? For example, I haven’t logged on to any email accounts or entered any credit card details on the PC since this event, as I just don’t feel confident yet. ( I’m typing this on my laptop.)

Also, am I running any risks by leaving the proxy server box in IE unchecked? Can anyone explain what this is box is for? Is it likely (because I just don’t know) that the box was unchecked up to this, and that the setting might have been changed by all the malware that got in? (I have Googled the topic, but I haven’t found any clear explanations.)

pretty-in-pink

Hi OP,

That happened to me the other day. It took ages (and several different attempts at downloading anti viruses, viruse removers etc) before I got rid of it.

Check the name of the virus, and then from a safe computer read up on the programs that will override it. The one I had ate all my windows things as well. Once you know what to download to clean your computer, then download it on the infected one through firefox. I wouldn't be using IE or putting any personal information like bank details etc on the infected one though untill you get a confirmed clean bill of health for it.

Best of luck!

mp22

Leave the proxy box unchecked you dont need it

Nemi

Thanks for your replies and advice.

iamskippy

Nemi wrote: »

About a week ago, my daughter clicked on one of those ‘your computer has a virus’ type messages, and several viruses got into the machine as a result. Our PC is a Dell Dimension 3000, running XP home. We use Eircom broadband. Up to this, we’ve had a pretty virus-free existence.

I’ve run all the protective software that I’ve been using. These are McAfee Anti-virus, Windows Defender, Spybot Search and Destroy and Malwarebytes Anti-Malware. All found at least one virus/Trojan/dodgy registry entry. All dodgy entries have been cleaned/quarantined by the relevant product. I’ve run all the products again a couple of times, getting updates for Search and Destroy and Malwarebytes, and nothing is now showing up. The PC is showing no obvious signs of harm – speed is OK, and there are no problems with pop-ups.

The only obvious legacy of the event is that Internet Explorer can’t browse – which isn’t a practical problem, as I also have Firefox. However, clearly I’ve a bit of concern about why exactly IE isn’t working. The immediate reason seems to related to the ‘proxy server’ box being ticked in the Tools/Internet Options/LAN settings button window. I know this as it also obstructs Malwarebytes from updating – so what I’m doing at present is unchecking this box, downloading the update, and then re-checking the box as I’m unsure about what the long-term effect of unchecking the box is. (I found instructions about the proxy server setting when I Googled for solutions to the Malwarebytes error code - Error 732(12029,0)

I‘ve really two questions that I’d be glad of any help with.

Are there any other useful checks I might perform on my PC before reverting to normal use? For example, I haven’t logged on to any email accounts or entered any credit card details on the PC since this event, as I just don’t feel confident yet. ( I’m typing this on my laptop.)

Also, am I running any risks by leaving the proxy server box in IE unchecked? Can anyone explain what this is box is for? Is it likely (because I just don’t know) that the box was unchecked up to this, and that the setting might have been changed by all the malware that got in? (I have Googled the topic, but I haven’t found any clear explanations.)

Do an online scan. Also they used to say that before removing a virus you should disable system restore as this would back up the virus as well as the windows files. Then when clean re enable it. Be aware that if anything goes wrong when it is disabled you won't have the ability to restore. i only did it many years ago when i got hit by the blaster virus. There is also an email claiming to be from UPS which has a very dangerous trojan. It says

Hello!
We were not able to deliver your postal package sent on the 25th of December in time
because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.
United Parcel Service of America.

Do not open the attachment a rar file with an exe

You might consider creating a limited account for your daughter though I am not sure if it would have prevented what happened

si_guru

If you have problems downloading a checker... it is probably the Malware that is stopping it.

Start your pc in "safe mode with network" and try again..