virus detected !!!!
Thread Starter
|
Fleet Mechanic
Joined: Jul 2004
Posts: 1,552
Likes: 0
From: va
virus detected !!!!
I got a virus called Downloader Agent and bad file names are sdkhp***** and d3li*****. I have the free version of AVG virus scan and it always keeps asking for my to delete files, which I do. Is there a way to remove these bad files, i tried a regular delete, but didn't work. I get these listed on virus scan and try to put them in the vault and it still list them on the next scan. HELPPP
mike
mike
Posting Guru
Joined: Oct 2003
Posts: 1,570
Likes: 1
From: Appling, GA
When I get something I can't get rid of, I always do a search on it. Found this for you.
http://www.bullguard.com/forum/10/He...Age_12047.html
BTW, pfogle is right. Hackers don't program as many viruses for Firefox. Keep IE for a backup b/c Firefox doesn't work on all sites
http://www.bullguard.com/forum/10/He...Age_12047.html
BTW, pfogle is right. Hackers don't program as many viruses for Firefox. Keep IE for a backup b/c Firefox doesn't work on all sites
Last edited by Smaug; Apr 19, 2005 at 01:05 PM.
Fleet Owner
Joined: Aug 2001
Posts: 29,941
Likes: 46
From: Drummonds, TN USA
It might be a file builder bug - they create files that are passworded and so cannot be accessed or deleted. You might need to do a complete RUB on your hardrive to lose it - unconditional reformat. And it still might not allow itself to be re-written...
When those bugs get in, they are in there!
Worst of all are bugs that lodge a short piece of code in the BIOS chip.
I'd be mega paranoid at this point.
RE-STRIP, and RELOAD the drive. If it still comes up - pull the BIOS battery and leave the machine off for at least a week. Meanwhile, pull the hardrive and replace it outright. I hope you are so fortunate that you have a backup PC.
~Wolf sends (from experience. BAD experiences)
When those bugs get in, they are in there!
Worst of all are bugs that lodge a short piece of code in the BIOS chip.
I'd be mega paranoid at this point.
RE-STRIP, and RELOAD the drive. If it still comes up - pull the BIOS battery and leave the machine off for at least a week. Meanwhile, pull the hardrive and replace it outright. I hope you are so fortunate that you have a backup PC.
~Wolf sends (from experience. BAD experiences)
Posting Guru
Joined: Dec 2003
Posts: 1,097
Likes: 0
Another thing to look at is where it says the files are. If you are running XP and have system restore turned on, it may be in your "system volume information" directory. If so, turn off system recovery temporarily and the files will be cleared out. Then you can turn back on the system recovery featrure.
If the virii are not in the "system volume information" directory, you may have to go to Symantec and see if they have a specific removal tool for that specific virus.
If the virii are not in the "system volume information" directory, you may have to go to Symantec and see if they have a specific removal tool for that specific virus.
Posting Guru
Joined: Dec 2003
Posts: 1,097
Likes: 0
I would still go out to the Symantec web site and look for that particular virus. Sometimes there is a special process for getting rid of particular virii. May be a special program that removes just that type of virus.
Trending Topics
Senior User
Joined: Nov 2004
Posts: 162
Likes: 0
From: Benton, La.
good luck with it.. i got the DyFuCa virus on my home machine and in the process, it enabled my machine to be bombarded with all kinds of nasty little bothers...
after AVG did nothing but inform me it was there, i got fed up and traced down the files.. i just started deleting thing... in the middle of this, something happened and i smoked my ide stuff.. so now, even though my computer sees the 3 cd drives, it thinks there is something wrong with them. and i still cant get the crap off my machine.. so i am going to have to replace it... when i get some cash for that..
until then, i just keep on using it.. and avg dutifully informs me daily of my machine being infected..
i had a computer geek come out and look at it, he told me that MacAfee could fix my problem.. so could symantec... but the ide smokage would only be fixed with a new motherboard.. a new machine is only 200 more..
my advice, buy a good anti-virus and keep your fingers crossed.
after AVG did nothing but inform me it was there, i got fed up and traced down the files.. i just started deleting thing... in the middle of this, something happened and i smoked my ide stuff.. so now, even though my computer sees the 3 cd drives, it thinks there is something wrong with them. and i still cant get the crap off my machine.. so i am going to have to replace it... when i get some cash for that..
until then, i just keep on using it.. and avg dutifully informs me daily of my machine being infected..
i had a computer geek come out and look at it, he told me that MacAfee could fix my problem.. so could symantec... but the ide smokage would only be fixed with a new motherboard.. a new machine is only 200 more..
my advice, buy a good anti-virus and keep your fingers crossed.
FTE Stories
Ford Trucks for Ford Truck Enthusiasts
Top 10 Fords at 2026 Carlisle Ford Nationals
Joe Kucinski
3 Best / 3 Worst Parts of Modern Ford Ownership
Brett Foote
10 Amazing Upgrades That Solve Common Ford Truck Owner Headaches
Pouria Savadkouei
Every 2026 Ford Engine Explained
Brett Foote
10 Ugly Ford Trucks That We Still Kinda Love
Joe Kucinski
10 Things Every Truck Owner NEEDS (2026 Edition)
Michael S. Palmer
Rezvani's Latest Post-Apocalyptic Monster Is a Ford F-150 Raptor Underneath
Verdad Gallardo
Top 10 Most Expensive Ford Trucks Ever Sold on Bring a Trailer
Joe Kucinski
2027 Ford Super Duty Buyer's Guide (Every Model, Engine, & Package)
Brett Foote
Thread Starter
|
Fleet Mechanic
Joined: Jul 2004
Posts: 1,552
Likes: 0
From: va
Originally Posted by kingfish51
I would still go out to the Symantec web site and look for that particular virus. Sometimes there is a special process for getting rid of particular virii. May be a special program that removes just that type of virus.
Posting Guru
Joined: Sep 2002
Posts: 2,420
Likes: 3
From: Langhorne, PA
I tried very hard for three weeks to get rid of a nasty known as "TV Media Display". There are 30 websites that tell you how to get rid of the bug but they were all wrong.
I gave up and took it to a pro, he got it off, but had to pull my harddrive out and install it into a clean PC to delete the bug.
Do not format your hard drive, do not delete any programs!!!!!!! That is always the last resort, the pros have software that costs them 1000's of dollars to detect and remove all known pests.
If you can't get it yourself, then it may be worth spending the 50 bucks to clean your PC. All the common Anti-virus, anti-bug stuff does not get all bugs all the time. So it isn't a bad idea to let a pro check you PC once in a while.
If you owned a 1000 dollar car you wouldn't rule out paying a mechanic 150.00 bucks to repair your air conditioning, so why not spend 50 bucks and keep your PC working well.
I am not a PC repair person, or even know any. I just found them to be useful one time. I have been using a PC on the internet since 1990 and only needed a pro once.
I gave up and took it to a pro, he got it off, but had to pull my harddrive out and install it into a clean PC to delete the bug.
Do not format your hard drive, do not delete any programs!!!!!!! That is always the last resort, the pros have software that costs them 1000's of dollars to detect and remove all known pests.
If you can't get it yourself, then it may be worth spending the 50 bucks to clean your PC. All the common Anti-virus, anti-bug stuff does not get all bugs all the time. So it isn't a bad idea to let a pro check you PC once in a while.
If you owned a 1000 dollar car you wouldn't rule out paying a mechanic 150.00 bucks to repair your air conditioning, so why not spend 50 bucks and keep your PC working well.
I am not a PC repair person, or even know any. I just found them to be useful one time. I have been using a PC on the internet since 1990 and only needed a pro once.
Posting Guru
Joined: Dec 2003
Posts: 1,097
Likes: 0
Originally Posted by mike L
i found three items at Symantec but the internet keeps getting disconnect before it can finish scanning. Is there a setting to keep me connected for a longer period of time when not on the net surfing?
Greywolf, I believe this one is a trojan from what I saw at Symantec, also he is running from memory loaded from Symantec, not his harddrive. He should be okay doing it this way.
Posting Guru
Joined: Dec 2003
Posts: 1,157
Likes: 0
From: Wichita, KS
Originally Posted by Redneck'n
... but the ide smokage would only be fixed with a new motherboard.. a new machine is only 200 more..
my advice, buy a good anti-virus and keep your fingers crossed.
my advice, buy a good anti-virus and keep your fingers crossed.
Elder User
Joined: Nov 2002
Posts: 543
Likes: 1
From: South East Texas
I did a search for this downloader agent and it seems to be a real nasty one. It comes in around 50 different versions all doing something a little different to your pc. According to what I read about it, it changes out some Windows System files with it's own files with the same name. This is probably why they can't be removed. Anti-virus programs can't remove files that it see's as system files even if it knows that it's a virus. It's job is to constantly send everything you do on your computer to a web site that collects all your actions and information. You could first try running AVG in safe mode, and if that doesn't work, hopefully you have made the AVG Rescue floppies and kept them up to date. Try starting the computer with them. They will look for the trojan or virus in Dos mode before the Windows system files come up. Also download AdAware SE free version and see if it can help with the problem. Also it seems to also put stuff in the registry as well. If all else fails, reboot into DOS mode and delete those files you mentioned. Either the trojan or virus will rewrite them again from the registry or not let Windows come up at all. If you still can't get rid of it, put in ZoneAlarm fire wall and tell it not to let that program connect to the internet untill you can get rid of it.
Last edited by nightowl_52; Apr 20, 2005 at 07:11 PM.
Posting Guru
Joined: Dec 2003
Posts: 1,010
Likes: 0
From: SW Arizona
Go here for a list of Security Help Tools from SupportTechGuy forums. Then use the Hijack This Log and post the results in their "Security" forums. I had a similar problem a few months back with my Win98se and was helped there quickly.
What you have is a trojan and only recently have the Symantec/McAfee anti virus programs have started detected them. I also have AVG Free and it has caught a couple to quarantine in the "Vault" but have found a couple it didnt. Some "worms" are not detected and can deposit backdoor trojans. The ones I found, I had to go through Safe Mode to find, rename and delete them.
What you have is a trojan and only recently have the Symantec/McAfee anti virus programs have started detected them. I also have AVG Free and it has caught a couple to quarantine in the "Vault" but have found a couple it didnt. Some "worms" are not detected and can deposit backdoor trojans. The ones I found, I had to go through Safe Mode to find, rename and delete them.