Help - I can't get rid of a virus

[DocFrankenstein]

I have a worm or a virus of some kind in the computer.

What happens is the process explorer.exe takes up 70-100 mb of the memory and 95% of resources. The computer then works very slowly which is extremely annoying.

I've tried different antiviruses, and can't get rid of the thing.

Can you recommend something?

[etaf]

hope i dont cause offense here, but i have found this forum http://forums.techguy.org/ to be very effective in removing virus and spyware, secruity section - saved my PC/Laptops a few times.
however, some more information would be required
what version of windows do you have?
what anti-virus have you tried? and are they upto date

you could try some online versions


run a virus scan with your own scanner
If you have a Virus Scnner of your own - first make sure your scanner is fully up-to-date with the latest definitions
or
you can Run an online scan from here
http://housecall.antivirus.com/pc_housecall
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

http://security.symantec.com/default.asp?
http://housecall.trendmicro.com/
http://www.pandasoftware.com/activescan/
http://www.ravantivirus.com/scan/
http://www3.ca.com/virusinfo/
http://www.bitdefender.com/scan/licence.php
http://www.commandondemand.com/eval/index.cfm
http://www.freedom.net/viruscenter/...viruscheck.html
http://info.ahnlab.com/english/
http://www.pcpitstop.com/pcpitstop/AntiVirusCntr.asp

System Restore:-
Remember to turn off system restore in WinME and XP http://service1.symantec.com/SUPPORT/nav.nsf/d4578f66d8f00a0188256d4e006aaa94/5766df37140aed3b8825696500726d13?OpenDocument&src=bar_sch_nam

SAFEMODE:-
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406?OpenDocument&src=sec_doc_nam
http://support.microsoft.com/default.aspx?kbid=315222


you may need to run some spyware
Ad-Aware
and
Spybot
and CWShedder

B]CWShedder:[/B]
it would be worth running CWShredder first -
download from these sites
http://tinyurl.com/mn7e
http://www.majorgeeks.com/download4086.html
http://209.133.47.200/~merijn/downloads.html
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
http://www.thespykiller.co.uk/
http://downloads.subratam.org/CWShredder.exe
http://www.thewhities.com/

Run the program and let it do it's thing. Make sure to click on "Fix" and not scan only.

B]AD-AWARE:[/B]
If required A TutorIal IS HERE http://www.bleepingcomputer.com/forums/index.php?showtutorial=48


download, update and run ad-aware
http://www.tomcoyote.org/hjt/
http://209.133.47.200/~merijn/downloads.html
http://www.thespykiller.co.uk/
http://www.majorgeeks.com/download3155.html
http://aumha.org/downloads/hijackthis.exe
http://www.thewhities.com/
http://www.lurkhere.com/~nicefiles/

SPYBOT:
If required A TutorIal IS HERE http://www.bleepingcomputer.com/forums/index.php?showtutorial=43


download, update and run spybot
http://spybot.safer-networking.de/
http://tomcoyote.org/SPYBOThttp://www.download.com/3000-8022-10122137.html
http://www.spybot.us/spybotsd13.exe
http://www.safer-networking.org/
http://www.thewhities.com/

[mojos]

if you know the virus... search on symantec (http://security.symantec.com/default.asp?) on how to remove that virus

[DocFrankenstein]

Thank you guys so much. I'm currently updating my windows and then will go through that too.

damn computer students invent viruses for no reason :evil:

[DocFrankenstein]

what version of windows do you have?
what anti-virus have you tried? and are they upto date

Win XP pro
McAffee with recent definitions

[EricKonieczny]

Win XP pro
McAffee with recent definitions


I use to use MacAffe unitil two weeks ago, when I got infected with a vorus that totally detroyed on Windows XP operating system. I had everything installed the entire MCaffee security center- Virus Scan, Firwewall, adware etc,


i have sinced Switched to Symantic.The MCAffee team is missing something major and costing people major problems.


You can see what everyone else has recommdend doing from my previous thread

http://photography-on-the.net/forum/showthread.php?t=85342

Good Luck.


GO buy a backup External HD now and switch Anti Virus software.

[Andy_T]

What happens is the process explorer.exe takes up 70-100 mb of the memory and 95% of resources. The computer then works very slowly which is extremely annoying.


Haha, doesn't sound too uncommon to me (for standard Windows XP):D

Keep us updated if it was a virus and which scan program got rid of it.

Best regards,
Andy

[Jaymz]

[QUOTE=DocFrankenstein]What happens is the process explorer.exe takes up 70-100 mb of the memory and 95% of resources. The computer then works very slowly which is extremely annoying.[QUOTE]

This can also be caused by trying to run corrupt data, I had a system file unreadable by windows due to HD failure. It would spend a very long time trying to process the file, to the point where windows would just crash (BSOD)


Any rate, let us know what you determine to be the problem.