Oops they did it again....Plz Help Guys!!

[eggman]

Hello Guys...
Yesterday while I was away , my friends were using my laptop. Now it seems to me that those p0rn-freaks must have downloaded some kind of virus in the quest of their lust.
Here are the problems I am facing:
Whenever I open any folder I am greeted by this msg:
which I am pretty sure is not generated by windows. Clicking OK takes me to: www.ieantiavdownload.com which again tells me to download another file which again I am pretty sure is another virus/trojan. My system is pretty slow but luckily task bar can be opened. I have scanned critical areas with Kaspersky (fully updated) but it didn't find anything. So now I am scanning the whole system however it shows that it will take 2-3 days to complete, which is too much of a time. System has become so slow that even surfing net is a problem.
So do you guys know any patch/soln to remove this virus, if you are familiar with it. Help will be greatly appreciated.
As for my friends, I know how to take care of them

THIS WAS SOLVED, HOWEVER A NEW PROBLEM ARISE POSTED ON POST NO. 21

[gxsaurav]

check in task manager, how many instances of rundll32.exe are running?

[eggman]

^^None....

And I'm pretty sure that the annoying creatures came from this two files:
Cause they were not here the day before....now they are

[Pathik]

http://www.xp-vista.com/spyware-remo...l-instructions

http://www.xp-vista.com/spyware-remo...l-instructions

[eggman]

Thanks pathik for the link , but the software in that page didn't remove the intended virus/spyware. And for the manual removal, the search is unable to find where those .dll s are located.

[the.kaushik]

seems to be a spyware and not a virus.. can you use spydoctor http://www.pctools.com/spyware-doctor/ and do a full scan!

[legolas]

use hijack this and spybot
You will have to do it in Safe Mode.

[dheeraj_kumar]

offtopic, but where do you live eggman, you seem to have some movies i wouldnt mind watching...

[legolas]

^ ^ "into the wild" was a torrent file i suppose

[eggman]

Originally Posted by dheeraj_kumar

offtopic, but where do you live eggman, you seem to have some movies i wouldnt mind watching...

bangalore

Originally Posted by legolas

^ ^ "into the wild" was a torrent file i suppose

nah, full philm.
A TALE OF TWO SISTERS was a torrent file, which is what now I'm Getting

[legolas]

^ the one on the screenshot is 63.4 KB
ahhh I din't notice the second link!! my bad.

[Kaushal Hiwarkar]

The same problem I was facing. I has just installed quick Heal antivirus and all virus /trojens get deleted. Now I doesn't get such Errors

[eggman]

Originally Posted by the.kaushik

seems to be a spyware and not a virus.. can you use spydoctor http://www.pctools.com/spyware-doctor/ and do a full scan!

wow........It did the trick............thanks...........
You'll get unlimited omelette supply

[sreevirus]

I think I've seen that before. Try these tools:

http://securityresponse.symantec.com...r/FixVundo.exe
http://securityresponse.symantec.com...r/FxVMonde.exe
Got these via SwatKat's site

You could also try these:
http://vundofix.atribune.org/
http://www.f-secure.com/sw-desc/virtumonde.shtml

[eggman]

Thanks sreevirus, but its solved
You can lock the thread now

[Pathik]

BTW Into the Wild is a good movie. It will set you thinking for a while.

[MetalheadGautham]

no offence meant, but only the biggest idiot will give his laptop, mobile phone, PSP or PMP to his friends

[praka123]

well,then can you show me how can you live in a hostel without sharing your articles(even if you hate to do so) atleast things like laptop?it will be extremely tough;I will say .it is human nature rre!

[eggman]

Originally Posted by MetalheadGautham

no offence meant, but only the biggest idiot will give his laptop, mobile phone, PSP or PMP to his friends

Oh ho, I think you never lived in hostel , did you?
There's lots of sharing in there..........

[kumarmohit]

You know, before posting the screenshot, you should have blurred the bg! Your warez collection is on public display now!

In any case never give admin access to anyone on your computer. No one and absolutely no one.

[eggman]

Although spyware is now removed, but my system still is not as fast as it used to be. I've removed all spywares with the help of Spyware doctor. However still another similar msg pops out every few hours which tells me to download another stupid thing(similar to prev one). On startup I found these four new items:
I suspect these are the reasons for the slowness of my system and popup of the msg,because even after I disable them they automatically enables themselves. So please anyone enlighten me to remove these from system. 'Search' couldnt find any file with that name.

Originally Posted by kumarmohit

You know, before posting the screenshot, you should have blurred the bg! Your warez collection is on public display now!

Righto. Done.

Here is the stupid annoying msg:
I have no idea why spyware doctor is unable to detect this. Its fully updated!

[rhitwick]

Hi Eggman,
From the screenshots u provided it seems u are infected with XPackGen Trojan(I may be wrong).
Before doing anything else install RemoveIT Pro 4.0 from this month's Digit(CD/DVD).
Update it and scan ur system. Its pretty good scanner...........if its XPack.Gen, it may not be able to remove it.
(if its XPack follow this: http://www.bullguard.com/forum/10/HO...n--_48522.html)

I would suggest get a copy of Avira and scan ur system again.

[MetalheadGautham]

Originally Posted by praka123

well,then can you show me how can you live in a hostel without sharing your articles(even if you hate to do so) atleast things like laptop?it will be extremely tough;I will say .it is human nature rre!

Playing the selfish guy helps.
Be helpful occasionally, but not too much so as to let people take you for granted.
And sharing laptops is definitely not what I call light sharing.
Laptop is as personal as a tooth brush.

Originally Posted by eggman

Oh ho, I think you never lived in hostel , did you?
There's lots of sharing in there..........

anyway, the next time, do the following:

Note: All this for the "public" user only and not for your main user, which should be password protected. Any other means of accessing data should be blocked.

1. Assign them a limited account that can run no apps ecept installed and approved ones
2. Use maximum security for firewall and antivirus
3. Disable Cookies
4. Disable Java
5. Disable Popups
6. Use OpenDNS and use its built in Parental Control tools to block out adult content
7. Use only firefox, disable access to Internet Explorer
8. In firefox, use adblock plus with easylist.us
9. Also use flashblock in firefox
10. Disable any changes in configuration of firefox by assigning a password to such an operation
11. Prevent access to those folders you concider personal by using password protection or user locking or encrypting.
12. Disable autorun and other security threats.
13. Once again, make your system as restricting as possible so that only genuine use like browsing sites for projects, playing a song or two, etc can be done.
14. try using norton parental control to auto identify p0rn video and audio and prevent their access, but don't make it so obvious. Try to give them an error message like "Format Not Supported" when ever they try to open p0rn.

[dheeraj_kumar]

^^ dude thats all okay, nice suggestions, but what will eggy boy do when he wants to watch pr0n? all these restrictions will be hard on him too na...

eggy, its YOLKS, not YOLKES.

[MetalheadGautham]

Originally Posted by dheeraj_kumar

^^ dude thats all okay, nice suggestions, but what will eggy boy do when he wants to watch pr0n? all these restrictions will be hard on him too na...

eggy, its YOLKS, not YOLKES.

read what I wrote. There can be more than one accounts in any half decent OS today.
his friends get to use only this restricted user, while he can watch as much p0rn as he wants in his own user.

[dheeraj_kumar]

Hmm, sounds like a good idea, then! you can do something like that eggy!!!

[eggman]

Thanks for the suggestion metalhead. ....and one more thing.........Its not me who is p0rn freak, read again...........my friends are.............Mere p0rn dekhne ke din to gaye

Originally Posted by dheeraj_kumar

eggy, its YOLKS, not YOLKES.

Shukriya

[MetalheadGautham]

Originally Posted by eggman

Thanks for the suggestion metalhead. ....and one more thing.........Its not me who is p0rn freak, read again...........my friends are.............Mere p0rn dekhne ke din to gaye

if its not you who is a p0rn freak, then things only get better.
and once again, http://www.opendns.com/ is an excellent solution for strict website control, because you are able to block sites found and pointed to by several volunteers and users around the world. So weather its the chinese p0rn site or the german s3x site, everything is blocked.

Norton Internet Security 2008 is not a bad thing to try out either, if you pay or pirate.
google for free parental control software.

Free Parental Internet Filter
http://www.dirfile.com/free_parental...net_filter.htm
is a good free one which filters out even words, so they can't type the F word and get away with it

PC Sitter Lite
http://www.dirfile.com/pc_sitter_lite.htm
its a software to time the amount of hours they are allowed to use the comp during a certain day. Useful to prevent ppl from using YOUR laptop without permission at night.

Parental Lock Guard
http://www.dirfile.com/parental_lock_guard.htm
This is the most important, it can prevent everything. And its a blocker. from site block, program block to the best of all, FOLDER BLOCK.

[eggman]

^^thnxx for the help MHG............Thats will restrict others now

[rahul_u_know_me]

why u do all these things.... cant u just do a "restore" thing to a privious date before your friends used the laptop,,,, it will be a perfect solution to the problem.... u can backup ur data after the date///