Viruses...*sigh*

  • Star_Splitter87
  • Newbie
  • Newbie
  • Star_Splitter87
  • Posts: 11
  • Loc: Indiana

Post 3+ Months Ago

OK, here is the stupidity of me...

I was looking for lyrics (mistake #1) and suddenly my daily updated McAffee Virus Protection Program screams "VIRUSES! RUN!"

Mistake #2

I try to handle it myself, however had to step away from the computer for a second.

Mistake #3

Left it online.....

Mistake #4

Was born.

These are the viruses that keep showing up in my Temp file that i KEEP deleting...however reappear once i get online. This means there is a backdoor somewhere that lets these back on that my Macaffee that isn't detecting.

temp\THI5146.tmp\LOCALNRD.CAB
temp\THI58B.tmp\LOCALNRD.CAB
temp\THI58B.tmp\LOCALNRD.CAB.VIR

I have deleted these folders and viruses SEVERAL times. However, the back door is still there. I've dumped my temp files AND my temperary internet files. I've restarted. McAffee can detect, however the 'delete' and 'move' buttons are not working. "Clean" has already been activated and did not work even though it is set to delete first and ask questions later. McAffee can update, and has been able to yesterday, however it does not affect deletion cababilities.

Please Help

Also there is a mysterious new search bar on the Explorer below my Google toolbar, which has been there quite a while, called Begin2Search. This MAY be the problem, however i can find no suspicious programs installed nor any files related to the like.
  • Anonymous
  • Bot
  • No Avatar
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post 3+ Months Ago

  • lucassix
  • Mastermind
  • Mastermind
  • User avatar
  • Posts: 2350
  • Loc: Indiana

Post 3+ Months Ago

Looks like some sort of malware or adware.

Try:
http://www.lavasoftusa.com/software/adaware/
  • shatter2day
  • Graduate
  • Graduate
  • User avatar
  • Posts: 185
  • Loc: N.Y.

Post 3+ Months Ago

it also sounds like adware to me as well. Try running Spybot- Search and destroy 1.3 i think it is now. Adaware SE should work also if it is adaware. http://www.download.com will have these in "downloads"
  • mas77
  • Proficient
  • Proficient
  • User avatar
  • Posts: 258

Post 3+ Months Ago

Star_Splitter87 wrote:
Also there is a mysterious new search bar on the Explorer below my Google toolbar, which has been there quite a while, called Begin2Search. This MAY be the problem, however i can find no suspicious programs installed nor any files related to the like.


go to control panel and remove it from there
  • WoRd Of WiSdOm
  • Proficient
  • Proficient
  • User avatar
  • Posts: 284
  • Loc: Riverside,California

Post 3+ Months Ago

Have you ran hijack this, if so have these come up.
If you havent ran hijack this run it. if you have the begin to search these might come up and you should delete them if they do

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.begin2search.com/googlesidesearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.begin2search.com/googlesidesearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.begin2search.com/googlesidesearch.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.begin2search.com/googlesidesearch.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.begin2search.com/googlesidesearch.html
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

C'mon guys -- let's use a little thought here -- or at least try Google:

http://www.trendmicro.com/vinfo/virusen ... =ADW_NRD.A

As perhaps a second best choice let's try OZZU when offering spyware removal suggestions:

http://www.ozzu.com/mswindows-forum/highjackthis-and-spyware-removal-resources-and-tips-t31034.html

Post Information

  • Total Posts in this topic: 6 posts
  • Users browsing this forum: No registered users and 46 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
cron
 

© 1998-2014. Ozzu® is a registered trademark of Unmelted, LLC.