* Home Help Search Login Register  

Welcome, Guest. Please login or register.
December 12, 2009, 04:37:48 AM

Login with username, password and session length

341806 Posts
37769 Topics
85782 Members
Latest Member: Fenin

more news...
Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products
| |-+  Comodo Internet Security - CIS
| | |-+  Virus/Malware Removal Assistance
| | | |-+  Prolific Goldfish Removal		 « previous next »
Pages: [1] Go Down Print
Author Topic: Prolific Goldfish Removal  (Read 863 times)
SFSecurity
Newbie
*
Offline Offline

Posts: 18
« on: August 08, 2009, 08:50:48 PM »
Hi,

I'm having trouble locating where prolific goldfish - wpglefsh.sci - has hidden itself so I can remove it from my mother's computer. She's 88 so can't really follow what I'm saying all that well so I remote in and still can't find it.

Clues?

Thanks
Logged
Security is lot like democracy - everyone's for it but
few understand that you have to work at it constantly.
OmeletGuy
Good gamer, Omelet Chef, Rogue AV hater!
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 1569


The only thing i ask for are eggs.


WWW
« Reply #1 on: August 08, 2009, 10:31:23 PM »
You could try following this guide.:
http://forums.comodo.com/virusmalware_removal_assistance/what_to_do_if_youre_infected_experience_rev3-t41380.0.html

Also whats the directory of wpglefsh.sci?
Logged
What you see isn’t what you always get!
JamesFrance
Comodo's Hero
*****
Offline Offline

Posts: 656
« Reply #2 on: August 09, 2009, 02:47:31 AM »
Can you not just change the screensaver using Control Panel?
Logged
James
SFSecurity
Newbie
*
Offline Offline

Posts: 18
« Reply #3 on: August 09, 2009, 05:33:11 AM »
Quote from: OmeletGuy on August 08, 2009, 10:31:23 PM

[snip]

Also whats the directory of wpglefsh.sci?

No clue. A scan doe not find it and yet it pops up a window.
Logged
Security is lot like democracy - everyone's for it but
few understand that you have to work at it constantly.
SFSecurity
Newbie
*
Offline Offline

Posts: 18
« Reply #4 on: August 09, 2009, 05:35:32 AM »
Quote from: JamesFrance on August 09, 2009, 02:47:31 AM
Can you not just change the screensaver using Control Panel?

Doesn't show up on the list. Searching for *.sci does not find it. Searching for wpglefsh does not find it.
Logged
Security is lot like democracy - everyone's for it but
few understand that you have to work at it constantly.
OmeletGuy
Good gamer, Omelet Chef, Rogue AV hater!
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 1569


The only thing i ask for are eggs.


WWW
« Reply #5 on: August 09, 2009, 02:31:57 PM »
From the sound of it you may have a Rootkit try using the porgram below to scan for it.

http://www.gmer.net/
Logged
What you see isn’t what you always get!
EricJH
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 4159
« Reply #6 on: August 15, 2009, 05:45:50 PM »
Quote from: SFSecurity on August 09, 2009, 05:35:32 AM
Doesn't show up on the list. Searching for *.sci does not find it. Searching for wpglefsh does not find it.
Please make sure that Explorer will show all hidden and system files. Go to Control Panel --> Folder options and let it show and unhide hidden and system files and folders.If it is a legit Microsoft file it may be a false positive.
Logged
Triple boot: XP SP3, Vista Ultimate 32 SP2 and Win7 RTM (default) , Always the latest CIS or CIS Beta (too lazy to update my sig) Athlon XP 2600 1 GB RAM. Opera Browser always using the latest snapshots; Opera 10.10 as of now
Tags: malware  *.sci file  location 
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.038 seconds with 17 queries.
Powered by SMF 1.1.11 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks 		Design by 7dana.com