pretty bad virus/spyware that i can't remove

[purplebear]

ok so here's the deal, i have this virus or whatever that does a number of things to my pc :

desktop icons have coloured box around them(as if they are highlighted) and are jagged around the edges

random clicking noise that minimises my programs ( particularly annoying when in a firefight!)

pop-ups

plants game cracks in folders which if i remove later come back


i have a spyware remover that finds it but it says it cannot remove it. I can give you its name however, Cmdservice

If anyone has any suggestions i would be extremely greatful as this is very very irritating!

thanks for reading

[Eternal-Souljah]

Re: pretty bad virus/spyware that i can't remove

Probly a stupid adware trojan.

Scan with Hijack this and post log here.
Scan with adaware
scan with spybot search and destroy
scan with spyware doctor
scan with housecall micro (type in google)

Do that and see what comes up and delete. Really if your having so much trouble with it and its not going away, to save you manually doing everything deleting registry entries, booting in safe mode to delete files etc. System restore usually helps, depending on how long you have had this problem for that is, if for 2 days or something, then do the last restore point from a week or so ago.

If all else fails formating does the trick no problem.

Oh yeah sounds like you have either been going on bad sites, commercial warez sites, bad pr0n sites rofl or other stuff like that.

Or you have been using P2P or something like that and downloading crap. My comp is pretty tight for security but I know what ports need to be opened for games and programs etc, but for instance if a website tries to execute some bull onto my PC my browser will block it or ask me. I sugges you use Mozilla Firefox as a web browser, fast, efficient and security tight. Your computer is no doubt lacking security or your downloading crap.

[purplebear]

Re: pretty bad virus/spyware that i can't remove

nah i only download legit stuff, usually from games sites, but yeah i used IE all the time so that may explain it...

its buggered system restore too lol, i can only pick dates when ive had the virus... ill try some spyware removers now, thanks

[[H2H]Haggis]

Re: pretty bad virus/spyware that i can't remove

If you continue to have probs i would recommend you to go to www.techmonkeys.co.uk this sort of stuff is their bread and butter and they will be more than happy to help you out

[imported_HIV]

Re: pretty bad virus/spyware that i can't remove

Go to www.ewido.net and use the online scan (which will remove the detected items) for spyware and trojan

As for viruses go to www.eset.com and download nod32 antivirus ( that will have full functions till one month) pretty recommended and good luck

[imported_Rumple9]

Re: pretty bad virus/spyware that i can't remove

run your anti virus / spyware in safe mode

[ConscriptVirus]

Re: pretty bad virus/spyware that i can't remove

if those ^ dont help...then google it and sometimes they have programs meant for fixing certan viruses
remeber...
i think it is very important that u do the scans in safe mode because if ur not in safe mode, i think the virus may be able to regenerate itself, but safemode wont allow it to do that i believe...good luck

[purplebear]

Re: pretty bad virus/spyware that i can't remove

ok im doing that ewido scan, but hell its taking a while! its been going for nearly half an hour but i have a good feeling, its taking longest in :

c/system volume information/_restore

c is the longest one right?

[BPCrusher01]

Re: pretty bad virus/spyware that i can't remove

Also, you can download a trial of webroot spy sweeper. I think the demo is 7 days, and the full program at least is REALLY good.

[purplebear]

Re: pretty bad virus/spyware that i can't remove

I probably will if this doesn't do the job!

thanks for all the help so far guys

ok ewido is having the same problem i think, in that it is regenerating, so safe mode it is.

wish me luck

EDIT - HOW DO I BOOT IN SAFE MODE? HITTING F8 CONFUSED ME LOL

safe mode isnt even goin properly, it is fine for a few seconds then everything disappears except for the safe mode things around the edge of the screen

i don't know what to do now...

i doubt any antivirus will work as it just keeps regenerating, which is a shame as i have a free copy of norton coming on friday with my new broadband!

[Eternal-Souljah]

Re: pretty bad virus/spyware that i can't remove

....Do yourself a favour.

Hit start>Run type "msconfig" without the quotations.

In general use Diagnostic setup, select that. The 3rd option is for an more advanced user, and judging from this thread use the 2nd one. Or if you want go to the boot.ini tab and select /safemode. But for now use the 2nd option of diagnostic. That will basically give you safemode.

Once you startup in safemode you won't have anything really, your desktop will most likely be black, crappy looking if you like. But then if you know where the file is of the virus or whatever that you can't delete find it and delete it.

Also on msconfig go to the end tab of "startup", remove uneeded services and services that are suspicious, make sure you know what you are doing though.

[iburnasses]

Re: pretty bad virus/spyware that i can't remove

I am no tech guy,so I dont mess with deleting files that I am questionable about.My luck I would delete the wrong thing...So I use STOP SIGN..Its by Eacceleration.It works wonders,and isnt a system hog and doesnt try to control your system.I have full confidence in it,and have never gotten something it didnt get rid of.I dont have any second thought about going to any site on the net.(Although I dont anyway,lol)

[purplebear]

Re: pretty bad virus/spyware that i can't remove

but i said that safe mode wasn't working properly as everything disappeared. I know that the backround is meant to but i dont think the start menu etc is also meant to go.

anyway thanks for the replies

[ConscriptVirus]

Re: pretty bad virus/spyware that i can't remove

one more thing...if u can...while removing hte viruses, disconnect ur computer from the internet cuz sometimes viruses themselves download more viruses