Heeeeeeeeeellllllllllllppppppp!

[wannabgeek]

Sorry for the title dramatics but i am sure i have this new 'EXPLOIT VIRUS' It all started on the 28th when my AV (Norton) could no longer Auto protect my PC! ( I have since changed my AV Prog to Ez (etrust) so at least i am now protected,abeit to late!) And to top it all i have now got another security zone called 'your computer' in Internet options which ive never seen before Now I have ran all of my AV/ad/spy/Malaware progs & online scans but the ony things found, was by 'Spysweeper' & Ez AV and they were ; 2 Rootkit masked Karaoke files! And a prog called 'Rootkitreveal' also found another 3 different missmatched items! Since then i cannot even get into my XP Security center or even the Win update site!So can aybody tell me what this virus actually does as my PC is not freezing or slow! Theres no Pop ups etc! So what do i do,shall i install the patch or is that too late? And am i able to go on my Bank sites or Paypal or is that to risky Pls help i am very confused as i have only ever had 2 minor viruses in over 3 yrs so this is wierd

My Progs which have tried to find the Virus :

Ez AntiVirus
Kerio Firewall
Hardware Firewall (DG834 Router)
Spysweeper
Ewido
Adaware se
Spybot
Spyblaster
Cwshredder
CCleaner
Rootkitreveal
...& online scans: Housecall/Bitdefender/Symantec

[Moby-Dick]

Sounds like one of the trickier to remove ones , from experiance removal requires more than just running a cleaning program.

Try running Spybot when you are in safe mode.

[wannabgeek]

Cheers MD but tried that!

[Flibb]

I have used avast on peoples computers to remove trojans. Download, update, then tell it to do a full scan on next boot, it scans the PC before windows loads (think its similar to scanning in safemode)

[wannabgeek]

Is that the free AV?

[Moby-Dick]

it has a 30 day trial

[RedPutty]

I wouldnt use it for anything senstive.

If I were you I would do a full reinstall of windows - it would be quicker than trying to use all these other tools to clean up your pc.

[wannabgeek]

If I were you I would do a full reinstall of windows - it would be quicker than trying to use all these other tools to clean up your pc.

If i reinstall now i will probally get infected again straight away! How long will it take for MS to fix this new exploit do you think

[Grey M@a]

This is the info MS updated as of this morning

http://www.microsoft.com/technet/sec...ry/912840.mspx

there is no patch but apparently the link on their knowledge base post at the link above links you to the MS live checker which will tell you there and then if you have anything that shouldn't be there. Double check first in case you are trying to diagnose the wrong issue.

[RedPutty]

If i reinstall now i will probally get infected again straight away!

Not if you take precautions this time. I personally wouldn't be satisfied without a clean reinstall but its up to you and depends on how confident you are about reinstalling - Since its a mesh PC i'm guessing they gave you a "restore" cd.

[peterb]

Have any of the programs you have run (listed in the first thread) actually detected the exploit?

[wannabgeek]

Have any of the programs you have run (listed in the first thread) actually detected the exploit?

No nothing at all about exploit only the winsock problems! But i still have no security center and what is the 5th icon in internet options via security called 'YOUR COMPUTER' the pictures of ie with 2 keys How did that get there i keep asking but nobody is telling me

[TheAnimus]

A very important question, is why?

why did u catch it, what were you surfing on?

With 'new' threats its probably easyest to reload, because i'm guessing you where running as administrator when you got compramised, ergo, its got the whole of your PC near as makes no odds?

[wannabgeek]

Hi Thanks for the help! As you guessed i am rather naive when it comes to security but i always am usually fully protected! It all started when i purchased spysweepr (before i'd used all free progs) what a mistake that was! I was advised on CCleaners forum to uninstal MSantispy, A2 & also disable teatimer as i had too many progs at start up and all i neede was 1 prog guard to protect all (Spysweeper) oh and he told me to DL'd Ewido as it was the best! ......"Dont say it" i know i should of stuck with what i had but all i wanted to do was be more secure...Doh! Anyway it looks as if somewhere along the line whilst i was uninstalling something must of got in! Oh by the way i also installed a prog called xpsafe of which i put on the recommended settings but when trouble started i switch back!

By the way i have XP home so i am always admin!