Not Sure What To Do Next, Antivirus 2008.....

Question

Hello Everyone,

I hope you can give me some advice (in hindsight I wish I would have thought of this forum first). I have my brother's Dimension E510 ,Intel Pentium 4 Processor 630 with HT Technology (3.0 GHz) sitting on my dining room table, my laptop is there also. The Dimension E510 was really messed up with Antivirus 2008 from his ex downloading games and who knows what. I cleaned out all 50+ games.

I had him buy Trend Micro and Spy Sweeper and I loaded them unto the PC. I ran the programs and found various infections too many to list. Anyway I thought after a day working on the PC I solved the problem. After being on the internet the blasted stuff starting taking over the PC and shooting different sites on internet page again, some of which I did not want to see. I did more cleaning and Zlob.Trojan was detected. Well to make a long story short I am exhausted with this I must not be doing the right combination of things to rid the system of the parasites. I also wonder if I am elimanating things that should not be. Everytime I think I have it cleaned up. It seems to come back. This happens when I get on the internet to test it out.

I am thinking about just reinstalling everything and starting out with a clean machine. Another problem is he can not find his orginial disks, so I requested new ones from Dell this morning. What do you people think I should do or try at this point?

Thank you, Roxy

His Dell has this as an orginal configuration:

1 221-9861 Dimension E510 ,Intel Pentium 4 Processor 630 with HT Technology (3.0 GHz)

1 311-5499 512MB DDR2 SDRAM at 533MHz

1 310-5324 Dell USB Keyboard

1 320-4603 17 in (17 in viewable) E176FP Flat Panel Display

1 320-4309 128MB ATI Hyper Memory PCI-Express X16 (DVI/VGA/TV out) Radeon X300 SE

1 341-3292 160GB SATA II Hard Drive (7200RPM)

1 341-2724 3.5in Floppy Drive

1 412-0688 Image Restore

1 412-0721 Dimension Dell Support

1 420-4927 Windows Media Player 10

1 420-5646 Microsoft Windows XP Media Center Edition 2005, English without Media, for Dimension

1 463-2282 Dell Owners Manual installed on your system,click on icon after system set-up to access

1 420-5460 Complimentary courses: Look for EU icon

1 420-5476 Dell Direct Download

1 420-5924 Icon Consolidation Application

1 310-6264 Dell USB 2-button mouse 1 430-0412 Integrated NIC card 1 313-3840 56K PCI Data Fax Modem 1 412-0705 Adobe Acrobat Reader 6.0

1 313-4129 16X DVD-ROM and 16X DVD+/-RW

1 420-5781 Sonic Cineplayer 1 420-5790 Roxio Creator Basic/MyDVD Basic

1 313-2758 Integrated Audio

1 313-2198 No Speaker Requested

1 412-0850 Network Associates McAfee 7.0,English,90-day Trial

1 412-0687 NETZERO ISP 1 420-3224 Broadband Icon for Inspiron 1 412-0787 AOL for Broadband

1 420-5256 Netscape ISP 1 412-0449 Microsoft Office 2003 Basic Edition,Dimension,DHS

1 412-0856 Paint Shop Pro Standard

1 412-0865 Basic digital Music,Photo and Game experience

Bugbatter · Answer

Try running Malwarebytes' Anti-Malware.
Please download to your desktop Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.

Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked
Click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
If you are still having problems and/or would like a follow-up check to be sure the infection as well as vulnerabilities are gone, copy and paste the entire report into a New Message on the HijackThis Board. Also include a fresh HijackThis log. Instructions for downloading HijackThis are at the top of that forum.
1. Just click the New Message button in the HijackThis forum here: http://www.dellcommunity.com/supportforums/board?board.id=si_hijack
to start your own thread requesting assistance for a follow-up check to be sure the malware is gone.
2. In the Message Body window that opens, simply Right-Click and select Paste.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer, please do so immediately.

Roxy K · Answer

:smileyhappy: Thank You Bugbatter for the prompt reply. I did what you requested. We shall see what happens next! I posted the results to HijackThis. Thanks again

BBraxton · Answer

I work as a professional to provide tech support for Dell computers running Windows XP at a graduate school.

On July 30 in the afternoon, one Library staff member reported AV2009 (a scam). I did an internet search and obtained instructions for removing. One thing I noticed is that the folder I deleted was named "AV9" and not "AV2009" as detailed in the instructions. Also, other files ".cpl" and ".dll" do not show up on my system. Currently I am in Safe Mode with networking and running the Trend Micro HouseCalls complete scan.

This is an Optiplex GX-260 with maximum (2 GB) RAM

Bugbatter · Answer

BBraxton, if you need help, please follow the instructions above for posting your MBAM and HijackThis logs.

BBraxton · Answer

This morning I put the PC back into 'production' operation and am running the HouseCall 6.6 'in the background' after doing a long scan (which said it was going to be another four hours or so). No finding so far.

Bugbatter · Answer

On this one, I believe you will be more successful using MBAM and Hijackthis than Housecall.

Virus & Spyware

Not Sure What To Do Next, Antivirus 2008.....

Was this post helpful?