I have a damn Virus!

Discussion in 'Off Topic' started by n99hockey, Feb 22, 2009.

  1. n99hockey

    n99hockey Moderator Staff Member

    Joined:
    Feb 7, 2007
    Messages:
    57,525
    Likes Received:
    15
    I have a damn Virus!

    i dont recall installing anything new lately but yesterday i started having some PC issues...

    i kept seeing mozubolu and tisuleto in my startup (start-run-msconfig)
    and i cant seem to get rid of these damn things!

    i ran AVG 3 times and it hasnt picked it up yet...
    i also went through the registry searching for mozubolu and tisuleto...i think i managed to get rid of mozubolu but the other one keeps poping up in the startup screen (msconfig) and i cant get rid of the damn thing

    these files seem to attack explorer.exe and iexplorer.exe

    its extremely annoying
    any thoughts?
  2. dafoxs

    dafoxs New Member

    Joined:
    May 4, 2008
    Messages:
    13,994
    Likes Received:
    0
    Can you system restore to a clean day?
  3. n99hockey

    n99hockey Moderator Staff Member

    Joined:
    Feb 7, 2007
    Messages:
    57,525
    Likes Received:
    15
    just tried that
    tried to restore to last sunday and it told me i couldnt after it went through its whole restore thing
  4. EQBob

    EQBob New Member

    Joined:
    Sep 24, 2007
    Messages:
    3,416
    Likes Received:
    0
    Have you checked your file systems for DLL's of same name and deleted them? If you can do that, and prevent them from loading, then something like CCLEANER will likely find and remove any other registry stubs calling them.

    Also, I assume you are experienced enough to run with system restore off, clean temp files under \docs and settings\user\local settings\temp etc., windows temp, jar files, clear perftech cache, etc. I presume you run with a good firewall, like ZoneAlarm? Do you have windows Defender installed and set to run on a nightly basis?

    You may want to do this stuff in safe mode or you can simply endtask all the non-essential crap, er um components Windows runs as part of the background.
  5. EQBob

    EQBob New Member

    Joined:
    Sep 24, 2007
    Messages:
    3,416
    Likes Received:
    0
    System restore is useless, takes space and basically just provides a hiding spot for virii and other malware to continually reinfect you, *IF* you back up your data routinely to something like an external drive.
  6. n99hockey

    n99hockey Moderator Staff Member

    Joined:
    Feb 7, 2007
    Messages:
    57,525
    Likes Received:
    15
    99% of my data is on external drives (which i have detached for the time being)
    itunes files being that 1% thats on the HD but all my songs are on my iPod soooo
  7. EQBob

    EQBob New Member

    Joined:
    Sep 24, 2007
    Messages:
    3,416
    Likes Received:
    0
    Well, these shouldn't be bad enough that you can't get rid of them. they came into the wild circa late December 08...steps to get rid of them seem pretty basica, keyed by finding the DLL's they're spawning from (of same name)
  8. n99hockey

    n99hockey Moderator Staff Member

    Joined:
    Feb 7, 2007
    Messages:
    57,525
    Likes Received:
    15
    i havent found them yet
    windows is still searching

    i thought it was c:/windows/system32
    but they arent there
  9. EQBob

    EQBob New Member

    Joined:
    Sep 24, 2007
    Messages:
    3,416
    Likes Received:
    0
    It may be that the file is gone or moved elsewhere?, but still being called from registry. Have you ever used ccleaner?
  10. EQBob

    EQBob New Member

    Joined:
    Sep 24, 2007
    Messages:
    3,416
    Likes Received:
    0
    Also looks like these are updates to trojan.vundo

    Look for LEZAWINO.DLL and delete.
  11. dafoxs

    dafoxs New Member

    Joined:
    May 4, 2008
    Messages:
    13,994
    Likes Received:
    0
    I bet you cant get into ctrl alt delete, either. that's what I had way back. Nothing detected it. I had to reformat.
  12. n99hockey

    n99hockey Moderator Staff Member

    Joined:
    Feb 7, 2007
    Messages:
    57,525
    Likes Received:
    15
    ctrl alt del does show anything
    windows search didnt find anything

    just downloaded zonealarm

    lets see if that can find what AVG didnt
  13. EQBob

    EQBob New Member

    Joined:
    Sep 24, 2007
    Messages:
    3,416
    Likes Received:
    0
    Well, ZA won't find a virus, it's a firewall. It'll sure help you stop from getting them however.

    Download CCLeaner and do an iterative scan / fix of registry issues to see if that fixes anything.
  14. brandon.roeder

    brandon.roeder New Member

    Joined:
    Jul 3, 2008
    Messages:
    3,122
    Likes Received:
    0
    Download malware anti bytes or anti malmare byes (one of those, i cant remember) it will get rid of your virus pretty easily.

    I use it whenever i get a virus and it gets rid of it everytime :)
  15. sherri

    sherri Active Member

    Joined:
    Jun 29, 2007
    Messages:
    10,117
    Likes Received:
    0
  16. brandon.roeder

    brandon.roeder New Member

    Joined:
    Jul 3, 2008
    Messages:
    3,122
    Likes Received:
    0
  17. sherri

    sherri Active Member

    Joined:
    Jun 29, 2007
    Messages:
    10,117
    Likes Received:
    0

    No problem. Are you back in Texas, or still enjoying the frigid NY temperatures?
  18. brandon.roeder

    brandon.roeder New Member

    Joined:
    Jul 3, 2008
    Messages:
    3,122
    Likes Received:
    0
    Still in NY. im actually standing in times square :)
  19. EQBob

    EQBob New Member

    Joined:
    Sep 24, 2007
    Messages:
    3,416
    Likes Received:
    0
    Yep...that is supposed to be pretty good.

    I don't have a PC that I don't run ZA and some antivirus on, be it Norton, AVG, etc. System restore is not allowed to run, data is backed up nightly (and automatically) to an external drive using SyncToy. Windows Defender is on with nightly scans and I periodically run CCLeaner and check the appropriate registry keys where things try to insert themselves. Also, eveything runs behind a hardware firewall in my router. Save for the Antivirus, all of that is free (and highly effective).
  20. n99hockey

    n99hockey Moderator Staff Member

    Joined:
    Feb 7, 2007
    Messages:
    57,525
    Likes Received:
    15
    ok so CCleaner is running
    cleaned up a bunch a reg files..

    now its scanning a bunch of other things

    while its doing that ill be searching for LEZAWINO.DLL and if i cant find that then ill try the OTHER virus software that brandon suggested...

    this is super annoying

Share This Page