Virus!!! :@

[Hermskii]

Hahaha! Funny I mention it and you got it. The reason mine was so much harder to fix than yours was that I was fixing it remotely from Houstn to San Antonio. I was not bale to tell the PC that was infected to reboot in safe mode since I could not press the button telling it to do so. True!

Yes, I still beat it anyways.

[Blood Asp]

Info for GoPostal:
I Found 68 pieces from that file you sent me, these are what were found: All are Tracking Cookies.

• WebTrends x1
  Advertising.com x2
  DoubleClick x5
  Mediaplex.com x2
  QuestionMarket.com x2
  revsci.net x2
  webtrends.com x1
  atwola.com x1
  e.planning.net x1
  interclick.com x1
  netflame.com x1
  quantserve.com x3
  valuead.com x1
  adbrite.com x1
  apmebf.com x3
  Yieldmanager.com x4
  Ad.Yieldmanager.com x3
  Tacoda cookie x1
  Statcounter x1
  GamesSpy.com x1
  Serving.sys x5
  2o7.net x2
  PointRoll.com x3
  Adtech.de x1
  AtlasDMT.com x5
  BS.Serving.Sys x4
  Com.com x1
  FastClick.com x3
  2o7.net x2
  PointRoll.com x3
  TradeDoubler.com x1
  Weborama x1
  Zedo x1

TO BE SURE TO MAKE SURE NOBODY ATTEMPTS TO FIND/GO TO ANY OF THESE SITES:

THESE ARE A LIST OF VIRUSES/SPYWARE THAT CURRENTLY ARE IN MY SYSTEM!!! DO NOT ATTEMPT TO FIND/USE ANYTHING LISTED ABOVE!! YOU HAVE BEEN WARNED! THESE ARE NOT SITES TO REMOVE SPYWARE/VIRUSES BUT TO **GIVE** SPYWARE/VIRUSES!!

[Hermskii]

Yo Gopo, Send me what you got! I'm curious.

[Blood Asp]

From a file called SUPERAntiSpyware Free Edition, I Found 48 things, It found:
47 of the class: Adware.Tracking Cookies, and 1 class : Trojan.Unclassified/Loader-Suspicious

[Blood Asp]

Now running a file called: SpyBot: Search and Destroy Will tell you the results when it completes.

[Blood Asp]

Spybot S&D Complete:

• Microsoft.Windows.AppFirewallBypass x2
  Microsoft.WindowsSecurityCenter.AntiVirusOverride x1
  Microsoft.WindowsSecurityCenter.FirewallBypass x2
  MyRegistryCleaner x1

[David]

I found a dos program called Rkill. It stops malware from running your computer and then you can run malwarebytes to remove it. note: If you run malwarebytes before running rkill (stopping the malware), malwarebytes does not locate it.

rkill.rar

I discovered this when my wife's cousin asked me to fix his computer. He had the "Security Shield" malware program. http://www.bleepingcomputer.com/virus-r ... ity-shield.

I found this information useful. So I hope it helps out someone else.

[Hermskii]

Thanks. I too have used it before for something. I don't recall what but I still have the program. It had to do with stopping unwanted startup programs if I recall. Also might have been phase one of stopping a root kit virus. I can't recall for sure.

[David]

The rkill program worked as it said it would for the laptop that I was asked to work on. Once I used it, I used malwarebytes and it went smoothly and the laptop is malware free.

I have it saved on my computer for future uses (when my wife's family messes up their computers and then ask for me to come over an fix it ).

[Hermskii]

Congrats! You're the IT guy! I always keep all of the tools I use to fix stuff. I keep it on a jump drive in my pocket and take it everywhere I go because like you, I am my entire family's IT guy.

[Hook]

You guys are REALLY the "IT Guys" - in or out of the family.
I am also (kinda) the IT guy in my family too - not the best or professionally, but I do alright.
I ask YOU guys when it gets to the tough stuff though.
Thanks you guys!