Virus i can't get rid of... HELP PLEASE

[lloyd]

I have got my mates computer in front of me because he has got a virus on it. He said when he got it, it came up as the bloodhound virus Well, ive gone into safe mode, deleted a hell of alot of useless programs like seach engines and toolbars, deleted all cookies, and temporary files, done a disk check, run ad-aware. It wont let me run norton so i cant do much there... IS there anything i can do to get it off..

The computer is useless in its normal state, it has a black screen, sometimes switches itself off, and no programs can be opened. Its only in safe mode where i can actually do anything.

ANy help would be much appreciated!!

Lloyd

 

[Lorand]

Try these steps for manual removal of that virus: http://securityresponse.symantec.com/avcenter/venc/data/bloodhound.html

 

[Byteman]

Can you download and install programs on the machine? If so, download Kaspersky, install it, update it, and run a scan in safemode (it works in safemode). If you can't, post back.

ftp://d-eu-2f.kaspersky-labs.com/tr...4BGYH4CDHP89NZ/kav5.0trial_personalpro_en.exe

 

[lloyd]

rite...i restored it to two months ago, and i can get into the actuall user name on normal windows now, but it is really slow, and takes forever to open programs. But when i check on running processes in task manager, and say i have tried to open internet explorer twice, there will be two ''IEXPLORE.EXE'' but no visible programs. Whats wrong with it??

 

[Byteman]

if you can get online, then try going through the sticky steps, (especially the online scanners), then post a Hijackthis log.

 

[lloyd]

cant get online :S now what..

 

[Buzz1927]

Instead of safemode, select "safemode with networking", only go to the links below.
http://download.mozilla.org/?product=firefox-1.0.6&os=win&lang=en-US
Install Firefox and use it to go to this link
http://download.ewido.net/ewido-setup.exe
And then this link
ftp://d-eu-2f.kaspersky-labs.com/tr...4BGYH4CDHP89NZ/kav5.0trial_personalpro_en.exe
Update both Ewido and Kaspersky and run full scans with both, then reboot to normal mode and see how things are.

 

[lloyd]

i know how to get onto safemode with networking, but what's the difference?

 

[Buzz1927]

With safemode with networking, you can get online, which you can't in safemode, but only go to the sites I mentioned, as your firewall and antivirus won't be up.

 

[lloyd]

ok thanks..im performing the first scan now, but its taking ages. If its still slow after both of these scans, what are my next options?

 

[Buzz1927]

Let's have a look after the scans,and take it from there. Also, download Hijackthis, install it and run it. Hit "scan and save logfile", post the log here.

 

[lloyd]

ok, will do mate..it's still on the first scan :S

 

[lloyd]

could be here all night .. lol

 

[Buzz1927]

It's a long scan because it's thorough, well worth it, tho, how much has it found so far?

 

[lloyd]

186, 70.2%

 

[lloyd]

he has only got 18gb memory aswell..this could be why it is slow, he has got 3gb left

 

[lloyd]

205 89.2%

 

[Buzz1927]

186 is quite a lot, which is good, when it gets to something like 98.2% it takes a while as well, you being online is gonna slow it down as well. The kaspersky scan is a lot quicker.

 

[lloyd]

kaspersky isn't working..check the link :S

 

[lloyd]

im not on the computer that im scanning either, i got me mates. And im doing it for no money what so ever...must be mad