What to do if you're infected - eXPerience Rev.2

Learn about Computer Security Virus/Malware Removal Assistance
1

  1. Back-up all your files and folders using a back-up program, for example Comodo Back-up

  2. Download following programs and install them

[u]Superantispyware
Direct downloadlink from publisher
External downloadlink
External downloadlink 2

Malwarebytes Antimalware
Direct downloadlink from publisher
External downloadlink
External downloadlink 2

Bitdefender Free (32 bit only !)
Direct downloadlink from publisher
External downloadlink
External downloadlink 2

  1. Check for definition Updates (Important!).

http://i39.tinypic.com/2cfqqs6.png

http://i39.tinypic.com/zix5b7.png

http://i42.tinypic.com/8yt5w0.png

  1. Allow each program to scan. Scan one at a time.

http://i43.tinypic.com/20hxd9j.png

http://i40.tinypic.com/2yzhced.png

http://i40.tinypic.com/2q8x17m.png

  1. Let the programs clean the infections.

http://i39.tinypic.com/2wdc278.png

http://i42.tinypic.com/jua2dl.png

  1. Reboot into normal mode and see if you find any remains of the virus

  2. Download and install Hijackthis. Afterwards, do a system scan and save a log file. A text file will open in notepad, save this one and later upload it together with your post. DO NOT FIX ANYTHING YET !!! .

http://i40.tinypic.com/2nbblon.png

  1. Open a new topic. In that topic, please include :
  • If you followed this sticky
  • The hijackthis log
  • the name of the malware the programs said

It’s important that you make a new topic, this way we can verify that the infection is indeed gone !

Xan

2

bit defender link currently states the site is under attack, and my settings prevent me from visiting site.

can anyone else verify this at this time?

3

Works fine this end.

4

Same here. No probs

5

Yes, I can confirm this.

6

Yes, I also confirm this

7

Yeah, happens to me, too. Using Firefox 3.

Here’s the report for the link.

8

Could it be a google problem ?

if you did a Google search between 6:30 a.m. PST and 7:25 a.m. PST yesterday morning, you likely saw that the message "This site may harm your computer" accompanied each and every search result. This was clearly an error, and we are very sorry for the inconvenience caused to our users.

What happened? Very simply, human error. Google flags search results with the message “This site may harm your computer” if the site is known to install malicious software in the background or otherwise surreptitiously. We do this to protect our users against visiting sites that could harm their computers. We maintain a list of such sites through both manual and automated methods. We work with a non-profit called StopBadware.org to come up with criteria for maintaining this list, and to provide simple processes for webmasters to remove their site from the list.

We periodically update that list and released one such update to the site this morning. Unfortunately (and here’s the human error), the URL of ‘/’ was mistakenly checked in as a value to the file and ‘/’ expands to all URLs. Fortunately, our on-call site reliability team found the problem quickly and reverted the file. Since we push these updates in a staggered and rolling fashion, the errors began appearing between 6:27 a.m. and 6:40 a.m. and began disappearing between 7:10 and 7:25 a.m., so the duration of the problem for any particular user was approximately 40 minutes.

Thanks to our team for their quick work in finding this. And again, our apologies to any of you who were inconvenienced this morning, and to site owners whose pages were incorrectly labelled. We will carefully investigate this incident and put more robust file checks in place to prevent it from happening again.

Thanks for your understanding.

That link is a direct link to the bitdefender download site ? Could you guys check it again ? I’ll add some back-up downloadlinks :slight_smile:

thanks ,

Xan

9

I now added a back-up link, can you guys please check if these work and are correct ? (they should be :))

Thanks,

Xan

10

Well, external downloadlinks 2 don’t work for me. I’m getting the following 404 Not Found errors:

The requested URL /sd/Yb_pMGNZMVTNGDgDTPVypWCvDTy7HnDIXOExj5Ehym_LTFZGnskZlZkxuw_TDYbnmV_w7kKqexNf-VbHjVHCemgkD3V6UnaW/software/10994751/10523889/3/SUPERAntiSpyware.exe was not found on this server.

The requested URL /sd/kVenwZWdEDltp0D9jcPJff3sdxBDPIg6InJFktfc2tYFFrE9EhcGZXj8VOrqcl7cbuf6se3Wri7wRzOMS1KhyZVaeBCXQ9H-/software/10997763/10804572/3/mbam-setup.exe was not found on this server.

The requested URL /sd/SO467Y5jmpuNu5E1wuSMuf0ZbD7wH2j0TLvrs4jn4ToKYORSjZUyqz8joS-zUdlYMbi214DrkoWNZB0-PssIYo-C49xYvCmx/software/10322484/10322483/3/bitdefender_free_v8.exe was not found on this server.

11

Can you recheck please, it could be because I was editing the post …

Thanks,

Xan

EDIT : I just rechecked, it works here ???

12

They still aren’t working. Direct downloadlinks from publishers are fine.

13

I’ll add some other External links also then (:LGH)

Xan

14

Great!

15

More have been added, at least one should work now (:LGH)

Can you check the new ones ?

Thanks,

Xan

16

External download link 2 for bitdefender isn’t working; nothing is popping up, even a 404 Not Found error.
Other External download links 2 are fine.

17

Links updated

Thanks for your help,

Xan

18

You’re more than welcome, mate.

19

wow do i get bit defender to run? comodo blocks it as “unspecified malware”

win xp sp3 fully patched, CIS ,

20

Mark it as Trusted.
Mine runs fine.