Forum Settings
       
This Forum is Read Only

Trojar virus pop up?Follow

#1 Oct 09 2010 at 8:47 AM Rating: Good
Scholar
***
2,230 posts
I dunno if this had been brought up, but myself and my brother (we live in 2 diff areas) both had a trojan pop up yesterday, seems like the same one, and the only thing we were running was final 14. I was able to supress and possibly remove it with my anti virus and spyware i had on my comp and a system restore, he was not so lucky, anything he tries to do, causes the virus pop up to come up. He can't open internet to download spy/virus ware, he can't do a system restore, and aside from pretty much wiping everything out he is kinda stuck.

Has anyone else encountered this, or heard of it yet?
We both got hit with it yesterday, and again, the only link we have it that we were both on 14.

Thanks for any suggestions/help

And sorry if this is in the wrong place.
____________________________
Chocobo Status: Retired Green, Black, Red, Yellow

Dmhlucky Tarutaru
Whm/Blm/Rdm/Mnk/Thf/Pld/Blu/Smn/Dnc/Pup/Bst/Drg 99, War 91, Brd/Sch/Sam/Nin/Cor/Drk/Rng/Geo/Run 60

Alch 72+1, Cook 66, CC 61+1, Wood 61, Synergy 56, Bone 54, Leather 51, Gold 49, Smithing 45, Fish 15

http://ffxi.allakhazam.com/profile.xml?143946

#2 Oct 09 2010 at 8:54 AM Rating: Good
*
105 posts
Is it from ffxiv, no.

He does not need to wipe his hard drive. Here is what you do...

Reboot your pc, or log out and back in. Start mashing ctrl+shift+esc, this will open the task manager before the spyware gets a chance to load up and disable opening it. At this point scroll through your processes and find the spyware, it's usually pretty obvious with a zxydkc.exe or some random junk like that. End the process and keep your task manager open in case it restarts once or twice.

At this point go to start>run, type msconfig, hit enter. Go under the startup tab, find the spyware listed and uncheck it. Also look at the path, this will show you where it resides, usually under your documents and setting > user > local.

Now open a browser, if you can't get to a website go to Tools, Internet Options, Connections tab, LAN settings at the bottom, make sure nothing in "Proxy Server" area is checked.

Download http://superantispyware.com

Turn off system restore points by right clicking My Computer > Properties, System Restore Tab, put a checkmark in the box. This can be turned back on later, but spyware likes to hide in restore points and it will just re-infect you.

Now install and run a full scan, remove everything it finds, reboot. Run another full scan, make sure it is gone.

These instructions are for xp using internet explorer, if you run windows 7 they are pretty much the same, if you run Vista die in a fire.
#3CunningLinguist, Posted: Oct 09 2010 at 8:56 AM, Rating: Sub-Default, (Expand Post) Blizzard propaganda. Suck it WoW! Just like 99.2% of the hater posts.
#4 Oct 09 2010 at 9:01 AM Rating: Good
Scholar
***
2,230 posts
Thanks a lot for the reply, i'll let him know to do that.
____________________________
Chocobo Status: Retired Green, Black, Red, Yellow

Dmhlucky Tarutaru
Whm/Blm/Rdm/Mnk/Thf/Pld/Blu/Smn/Dnc/Pup/Bst/Drg 99, War 91, Brd/Sch/Sam/Nin/Cor/Drk/Rng/Geo/Run 60

Alch 72+1, Cook 66, CC 61+1, Wood 61, Synergy 56, Bone 54, Leather 51, Gold 49, Smithing 45, Fish 15

http://ffxi.allakhazam.com/profile.xml?143946

#5CunningLinguist, Posted: Oct 09 2010 at 9:05 AM, Rating: Sub-Default, (Expand Post) You do that.
#6 Oct 09 2010 at 9:24 AM Rating: Decent
17 posts
my father had a fun one like that where it wouldn't even let explorer for windows start, he just got a black screen and an advertisement for the spyware. Let me know if this is what you are experiencing and i will help you around it so you can follow the above directions.
This forum is read only
This Forum is Read Only!
Recent Visitors: 20 All times are in CST
Anonymous Guests (20)