HALP! VIRUSES!

Killavodka · Post by **Killavodka** » October 11th, 2010, 18:25

c:\Windows\sysWow64\y4RHB.exe is eating 50% of my CPU. Last night virus scanner did fack all, today it noticed the file and sent it for anal-ysis along with my msconfig. Been trying to find out how to annihilate it for ages now thought I would see if you guys could help. Assuming that its a fairly new threat given that my virus scanner hasn't annihilated it for me yet.

What I've tried so far:

Disabling all non-microsoft services/startup programs in msconfig, couldn't see anything odd there.
Managed to delete the .exe in safe mode but as soon as i boot normally it reappears.
Tried Windows malicious software removal tool, didn't do anything.
Virus scanned with Bitdefender and a few other online ones.
Looked up the exe in registry, nothing there.

Please help, will give sexual services on demand! Thanks

Post by **Roman Totale** » October 11th, 2010, 18:27

I believe Kaspersky[?] is a good scanner, as it will also scan your existing anti-virus.

That said, I could be talking complete and utter horse shit.

Shada · Post by **Shada** » October 11th, 2010, 18:29

format and start over

friznit · Post by **friznit** » October 11th, 2010, 18:34

Form an ongoing relationship with it and live together in harmony, sharing your hardware safe in the knowledge that your CPU will never again feel under used.

Post by **Dr. kitteny berk** » October 11th, 2010, 18:36

*point*

*laugh*

Killavodka · Post by **Killavodka** » October 11th, 2010, 18:37

Trying Kaspersky now, hopefully won't get to format times...

Post by **deject** » October 11th, 2010, 18:45

We have great success using Malwarebytes to remove viruses and such at work. We use it at least one computer a day. I'd give it a try.

Stoat · Post by **Stoat** » October 11th, 2010, 19:36

AutoRuns will tell you what's running at startup and Process Explorer has a Verify function for running processes.

Post by **Dog Pants** » October 11th, 2010, 19:41

Sounds like it's pretty well hidden. In theory it should be as simple as deleting the files and registry settings, but unless you know what you're looking for you're unlikely to root everything out. A quick google doesn't reveal much on what it might be, but if you can identify it you stand a decent chance of being able to dig it out.

Try McAfee's Stinger. Might find something, might not.

What AV were you using, out of interest?

Killavodka · Post by **Killavodka** » October 11th, 2010, 21:12

Was using Bitdefender which seemed to be pretty good. Just formatted again only took an hour and I didn't have any data to loose so all is well again.

cheeseandham · Post by **cheeseandham** » October 24th, 2010, 18:17

MBAM and/or Hitman Pro can usually do the job

Guybrush · Post by **Guybrush** » October 24th, 2010, 19:23

Also try spybot - http://www.safer-networking.org/en/index.html

Post by **Grimmie** » October 24th, 2010, 19:28

Thread resurrect fail, guys :p

Guybrush · Post by **Guybrush** » October 24th, 2010, 19:32

lol - never noticed when it started. I'll go and stand in the corner facing the wall

Baliame · Post by **Baliame** » October 24th, 2010, 19:39

Killavodka wrote:Was using Bitdefender which seemed to be pretty good. Just formatted again only took an hour and I didn't have any data to lose so all is well again.

/latenazi.

detrimental78 · Post by **detrimental78** » December 3rd, 2010, 9:36

Fuckin virus dans ma maison!!!!

voddi came in to my domane to let me know, but i have been using avg and to be honest - aside of one nasty virus i had a while back, its been the dogs bollox for me, and though it was on the lan, i didnt get it.

So, a word to the wise, if you dont want a nasty virus then my advice to you is ;

1. get avg internet security, and above all,
2. dont live with voddi!

Post by **Dog Pants** » December 3rd, 2010, 10:13

Honestly, that is only half good advice. You get what you pay for, although AVG is better than nothing (as is the also free Windows Defender). The fact that you haven't seen any malware might only mean that it hasn't been detected. I'd recommend Kaspersky personally, although I use NOD32 which is also a top runner.

However, the best way to not get a virus is to avoid dodgy internets. Don't go to shady download or porn sites, be very careful about stuff you torrent, don't go opening or following links from spam. Have your firewall turned on and configured on your router. If you're savvy then your AV should really be just a goalkeeper to watch out for unexpected Javascript exploits and stuff. And you can be safe in the knowledge that 90% of people out there are softer targets than you.

But the bit about living with Voddy has got to be sound advice.

Post by **Dr. kitteny berk** » December 3rd, 2010, 10:39

AVG? don't bother, has a history of dodgy updates fucking shit up.

http://www.theregister.co.uk/2010/12/02 ... ne_update/

microspaz security essentials, nod32, sophos, kaspersky.

Use one of them, live happy.

Post by **Grimmie** » December 3rd, 2010, 17:20

Dog Pants wrote:Don't go to... porn sites

I don't get it

Post by **deject** » December 3rd, 2010, 17:25

Microsoft Security Essentials is easily the absolute best free Anti-Virus software out there. NOD32 is the best for pay Anti-Virus software. The others that Berk mentioned are good too, but you won't go wrong with either of those two.