Cannot get rid of Ceres

wizard eyes

my pc has been infected with this really annoying bug and no matter what i do i cant seem to get rid of it. i have tried online scans, ad-aware, spybot and mcafee virus scan but nothing works.

Can anybody help me out?

wizard eyes

pretty please??

kleefarr

Try Housecall cwshredder and maybe cache cleaner .

Don't know if they help.

wizard eyes

yep iv run them and the dam thing still wont go away.

kleefarr

Have a look in Add/Remove Programs, uninstall Wild Tangent if listed.

Reconfigure Windows Explorer to show Hidden Files:
Open the Windows Explorer | Tools | Folder Options - View [tab]:

Scroll down to the "Files and Folders" section.
Select: "Display the contents of system folders".

Scroll down to the "Hidden Files and Folders" section.
Select: "Show hidden files and folders", Ok the prompt
Uncheck: "Hide file extensions for known file types"
Uncheck: "Hide protected operating system files" Ok the Prompt, click Apply

Run Hijack This and fix all of the following if they are there, by placing a check in the appropriate boxes and hitting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.

F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe

O2 - BHO: (no name) - {0F9561D0-03B2-44a3-89A6-E95E417CBA25} - C:\WINDOWS\cerbmod.dll (file missing)
O2 - BHO: BolgerObj Class - {302A3240-4805-4a34-97D7-1645A0B08410} - C:\WINDOWS\Bolger.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {A0269420-A638-4509-889C-8FC3CC85DA7E} - C:\WINDOWS\drexinit.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKLM\..\Run: [Windows Service] C:\WINDOWS\system32\prvdi.exe
O4 - HKLM\..\Run: [dvpmson] c:\windows\system32\cfqonr.exe
O4 - HKCU\..\Run: [Windows Service] C:\WINDOWS\system32\prvdi.exe

O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe

Reboot and delete

files
C:\WINDOWS\Nail.exe
C:\WINDOWS\system32\prvdi.exe
c:\windows\system32\cfqonr.exe
C:\WINDOWS\svcproc.exe


If that doesn't work,make a copy of your Hijack this log and post it HERE in a new post, not someone elses.


This should sort it.


Kevin

wizard eyes

thanks for your response, nothing you specified was there on the log file but i posted it on in that forum under malware removal.
thanks for your help.

kleefarr

Your welcome.

I had Ceres for a long time and it was actually Microsoft AntiSpyware that got rid of it for me. Have you tried that?

wizard eyes

no i havnt tried that one. can i just get it from the microsoft page?

wizard eyes

wizard eyes wrote:

no i havnt tried that one. can i just get it from the microsoft page?

Indeed

DirtyHarry

hey has it worked? i have a friend whos gf has this prob!

errr actually could be you! lol

wizard eyes

i am that gf!!
iv bin trying since yday but still not much luck. i think i have 6 scanners now!

DirtyHarry

well good luck, im stumped as to what to do now to get rid of it, so if its such a pain in the arse, back up all your important files / vids / music / etc and do a fresh reinstall of XP!

or else get michael to do it all!

wizard eyes

no im never letting him touch anything technical belonging to me ever again, it was him who downloaded this dam thing!

wizard eyes

ok microsoft antispyware didnt work either. but thanks.

Fenster

http://www.windowsbbs.com/showthread.php?t=43110

http://www.freeimagebrowser.com/instant/

http://www.mozilla.org/products/firefox/

SpooN_9k

lol Griff been downloading all that porn again eh..?

that kind of thing has happened to me before and the only solution i ever found was to reinstall Windows

stuey

i feel a "i told ya so " coming on

DirtyHarry

SpooN_9k wrote:

lol Griff been downloading all that porn again eh..?

that kind of thing has happened to me before and the only solution i ever found was to reinstall Windows

i knew you were the porn king spoonz! Griff is a wannabe pornstar, pity he cant level a reflector! loser!

wizard eyes

ok it seems i may have solved the prob in the end! no more stupid pop ups in the last hour n still counting!

thanks for all your help.