ATAVUS DEI'S PROFILE
Search
Filter
IDle past and future
Spyware Removal
author=Ephiam link=topic=3389.msg67798#msg67798 date=1237930866
Okay. SO I went and exicuted ComboFix and it went and did all of the thins I suppose it should have been doing, and then it created its log. So...does that mean it's done? Did it really get rid of anything, or is this log supposed to be used for something (thought it was mentioned somewhere)?
If Vundo no longer pops up, then you're in the clear. The log is just for reference, history, etc. so you know what was changed.
Do one more scan with another tool to verify, and if you want to be safe run ComboFix one more time. I think you're OK though if you haven't noticed anything. :)
Spyware Removal
author=GreatRedSpirit link=topic=3389.msg67696#msg67696 date=1237865023
If you push F8(?) before you get the Windows booting screen you can start Windows in a variety of special modes, one of which is Safe Mode. I don't know the specifics but it only loads what Windows needs to run. Graphics drivers? Networking? Nah. To start it mash F8 (or my favorite method: Reset the computer while windows is loading ) and Windows will give you a list of how you want to boot Windows. (Please correct me Atavus Dei)
Doesn't matter in the case of real nasty viruses because they don't give a shit if you're in safe mode or not.
Well there are three safe modes, one which does not include networking, one which includes networking, and one which is just a command prompt. The graphics driver is actually that default driver Windows uses when your video card's own driver isn't installed. Completely sucks for anything beyond word processing, and even then... :P
F8 is the right key though. Starting spamming it when your BIOS screen disappears, and before the Windows loading bar shows up. Any of the safe modes should work, but to be safe choose the one without networking, as some viruses constantly redownload themselves from distribution points.
Spyware Removal
author=Ephiam link=topic=3389.msg67672#msg67672 date=1237857035
Hrm. Well, it instructs you on the ComboFix website to post a log on one of the forums they supply and let someone help you with it. Is this advised? Or did anyone here who used ComboFix do this?
If you want to do it, that's fine...but generally it's OK to just run ComboFix on your own. We just usually download it to the user's desktop and run it from there.
As a reminder, don't forget to rename the file.
Spyware Removal
An interesting note about Virtumonde: Leaving one part of it alive after a cleanup can give it the opportunity to just respawn itself all over your hard drive on a restart. You may need to do more than one or two passes with whatever program you choose.
Spyware Removal
Spybot and Malwarebytes have absolutely sucked recently at my workplace for removing Virtumonde, so they may be a good start, but don't depend too highly on them. I'd suggest downloading ComboFix and renaming the .exe, since the latest variants usually try to shut down ComboFix through the name only. Make it like "LOLfix.exe" or something. :P
If the above link doesn't work (which may be likely) Virtumonde is blocking access to the website. If so, tell me so I can upload it to rapidshare or some such. When you download it, boot into safe mode and run the executable with administrative priveleges. The process could take somewhere between a half-hour to an hour depending on your computer, so expect that.
This is, perhaps, your best bet aside from nuking your disk from orbit.
Here are direct download links in case the website doesn't work:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe
If the above link doesn't work (which may be likely) Virtumonde is blocking access to the website. If so, tell me so I can upload it to rapidshare or some such. When you download it, boot into safe mode and run the executable with administrative priveleges. The process could take somewhere between a half-hour to an hour depending on your computer, so expect that.
This is, perhaps, your best bet aside from nuking your disk from orbit.
Here are direct download links in case the website doesn't work:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe
News Flash with Kermit the Frog [7 Reasons the 21st Century is Making You Miserable]
Wild Kings cultural explosion set to destroy 2009 and replace it with explosion sound effects!
Once again, I'm looking for work.
I must complement you on your speed. Within an hour, you composed, sequenced, and produced a quality battle theme that fit pretty much the setting I had in mind, AND worked well with RMXP's synthesizer.
What program do you use for sequencing, out of curiosity?
What program do you use for sequencing, out of curiosity?