Welcome! Register for a free account (or login) > How does it work?
|
|


Oct 16 2009, 04:35 PM
Post
#1
|
|
|
Authentic Member ![]() ![]() Group: Authentic Member Posts: 31 Joined: 16-October 09 Member No.: 88,408 Operating System: windows xp |
Hello,
I've been infected 3 times in 2 years by the same or very similar virus. It is one that self downloads, the only way to stop it is to shut down cold and not go back online. First I let my Norton 360 scan, which just finds trackign cookies. then I let Malwarebytes run and that finds nothing. Then last I run Spybot Search & Destroy and that found Microsoft.windows.securitycenter virus along with some cookies. Now my computer is acting ok except that when I start up it gives me a window saying that "c:\program files\NOS\bin\getPlus_Helper.dll" can not be located. This worries me, I don't know what it is and if I should have it. In addition Spybot keeps asking to accept or deny registry changes. I deny them all. Do you think I should try Combofix or am I in the good already? |
|
|
|
![]() |
Nov 2 2009, 02:39 PM
Post
#2
|
|
![]() Classroom Administrator Group: Classroom Admin Posts: 9,632 Joined: 18-November 04 From: Canada Member No.: 18,614 Operating System: xp sp3 |
Due to inactivity this topic will be closed.
If you need help please start a new thread. |
|
|
|
reynolds.ma [Closed] I am new and need a advice on weather i have a virus Oct 16 2009, 04:35 PM
reynolds.ma Hello,
after reading some posts here and asking a ... Oct 17 2009, 09:13 AM
CatByte Hi,
Please do the following:
Please download DDS... Oct 21 2009, 05:07 AM
reynolds.ma Thank you for your help. I just have one question... Oct 21 2009, 05:57 AM
CatByte If you have it, it would be included with your AV ... Oct 21 2009, 07:07 AM
reynolds.ma I downloaded it (it goes directly to a download o... Oct 21 2009, 07:34 AM
CatByte hi,
What you are seeing is the actual DDS program... Oct 21 2009, 10:01 AM
reynolds.ma Ok thanks, here is the DDS.txt first:
DDS (Ver_0... Oct 21 2009, 02:53 PM
CatByte Hi,
Any luck with the GMER scan? Oct 21 2009, 04:51 PM
reynolds.ma that is still running...... Oct 21 2009, 05:58 PM
CatByte RE: [Closed] I am new and need a advice on weather i have a virus Oct 21 2009, 06:00 PM
reynolds.ma I walked away form the scan and returned to it res... Oct 21 2009, 06:11 PM
reynolds.ma I also have an X over my internet connection, sayi... Oct 21 2009, 06:13 PM
CatByte Hi,
try running it in safe mode Oct 21 2009, 06:14 PM
reynolds.ma can u explain how to do that please? Oct 21 2009, 06:15 PM
CatByte Sure, no problem
To Enter Safemode
Go to Start... Oct 21 2009, 06:19 PM
reynolds.ma Gmer is scanning now.... Oct 21 2009, 06:53 PM
reynolds.ma Ok here are the Gmer results:
GMER 1.0.15.15163 -... Oct 21 2009, 08:31 PM
CatByte Hi,
Please do the following:
Please download Mal... Oct 21 2009, 08:47 PM
reynolds.ma Having troulble with Kaspersky. After it initaill... Oct 21 2009, 09:50 PM
CatByte Kaspersly can be a little finicky,
try this scan ... Oct 22 2009, 03:04 AM
reynolds.ma Malwarebytes log:
Malwarebytes' Anti-Malware ... Oct 23 2009, 07:19 AM
CatByte Hi,
Please do the following:
Go Start > Run a... Oct 23 2009, 07:23 AM
reynolds.ma DDS (Ver_09-10-13.01) - NTFSx86
Run by Melissa R... Oct 23 2009, 09:11 AM
CatByte Hi,
The message is from the Adobe get Plus downlo... Oct 23 2009, 05:29 PM
reynolds.ma in my "add or remove programs" I do not ... Oct 23 2009, 06:29 PM
reynolds.ma I did everything but remove any programs and i sti... Oct 23 2009, 06:42 PM
CatByte Hi,
Please do the following:
Very Important... Oct 23 2009, 07:25 PM
reynolds.ma Ok, where do i download combofix from? Oct 23 2009, 07:56 PM
CatByte My sincere apologies...I forgot I didn't use t... Oct 23 2009, 08:08 PM
reynolds.ma All processes killed
========== PROCESSES ========... Oct 23 2009, 08:20 PM
reynolds.ma I restarted, after i rebooted and posted the above... Oct 23 2009, 08:29 PM
CatByte Download Trendmicro's Hijackthis to your deskt... Oct 23 2009, 08:39 PM
reynolds.ma Logfile of Trend Micro HijackThis v2.0.2
Scan save... Oct 23 2009, 08:46 PM
CatByte Hi,
Please do the following:
Open HiJackThisClic... Oct 23 2009, 09:06 PM
reynolds.ma Restarted, and got the error message. Did another... Oct 23 2009, 10:05 PM
CatByte Do you still have the error?
did you get any aler... Oct 23 2009, 11:30 PM
reynolds.ma Yes i still get the error. Teatimer? Is that Spy... Oct 24 2009, 07:55 AM
CatByte Hi,
Try this
Download and install the Revo Unins... Oct 24 2009, 08:32 AM
reynolds.ma 4 adobe programs show
Adobe AIR
Adoobe Flash Playe... Oct 24 2009, 08:43 AM
reynolds.ma and Acrobat.com
So I should uninstall all the Ado... Oct 24 2009, 08:56 AM
CatByte Him
The Adobe Download Manager is not a bad progr... Oct 24 2009, 09:15 AM
reynolds.ma ok, it took some time.
I followed yoru recommendat... Oct 24 2009, 04:40 PM
CatByte That's great. It shouldn't have been a pro... Oct 24 2009, 05:14 PM
reynolds.ma After your first step it rebooted as you ssid, but... Oct 24 2009, 05:55 PM
CatByte Did you follow my instructions from post 25?
QUOTE... Oct 24 2009, 06:37 PM
reynolds.ma Under plug-ins i have disabled
Adobe Acrobat 9.1.... Oct 24 2009, 06:54 PM
CatByte Hi,
re-enable those ones, they should be enabled.... Oct 24 2009, 06:57 PM
reynolds.ma I tried to do a copy and paste but I couldn't ... Oct 24 2009, 07:17 PM
CatByte Hi,
Perhaps allowing the changes isn't enough... Oct 24 2009, 07:59 PM
reynolds.ma Before seeing your post i had went ahead and unist... Oct 24 2009, 08:30 PM
reynolds.ma OK, spybot is GONE and Adobe has been reinstalled.... Oct 24 2009, 08:57 PM
CatByte Yes, carry on with everything in post 44.
You rea... Oct 24 2009, 09:03 PM![]() ![]() |
Similar Topics
| Topic Title | Replies | Topic Starter | Views | Last Action | |||
|---|---|---|---|---|---|---|---|
![]() |
4 | ZeroMovement | 37 | Today, 09:53 AM Last post by: ZeroMovement |
|||
![]() |
7 | Jimbo1 | 118 | Today, 09:07 AM Last post by: Jimbo1 |
|||
![]() |
0 | Azzy221 | 9 | Today, 06:18 AM Last post by: Azzy221 |
|||
![]() |
7 | Helpless Oldie | 143 | Today, 03:09 AM Last post by: CatByte |
|||
|
Time is now: 19th March 2010 - 11:01 AM |