Help! Trojans, Backdoors etc.

[Extensa]

One of the computers in our house has contracted a serious illness. We have tried NOD32, Kaspersky, Spyware Doctor, Bitdefender. Spyware Doctor found approx 15 Trojans, several backdoors and other miscellaneous junk. Unfortunately to get rid of them, you must pay 40 dollars!

What can I try to get rid of them oh mighty Security Team??

 

[Barman58]

Hello Extensa,

First give spybot S&D a Try

The home of Spybot-S&D!

Then run a full scan with Malwarebytes

Malwarebytes.org

 

[Extensa]

I am currently trying Spybot S&D and it is finding several counts of virtumonde trojans. Spyware doctor found over 300 infectious files.

I will try malwarebytes next

By the way, this computer is running XP Home Edition!

 

[Dwarf]

Hi Extensa,

Sorry to hear about your problem. Spyware Doctor by PCTools is good at its job, unfortunately, as you have discovered, you have to pay for the product to be fully activated so as to remove any malware it finds.

I recommend Spybot Search & Destroy, available here: The home of Spybot-S&D!

 

[Extensa]

Quick Question: Does Malwarebytes remove the files or do you have to pay to do that like Spyware Doctor?

 

[Barman58]

Hello Extensa

Due to the finding of virtumonde I would also suggest you have a look at Malwrebytes, rouge Remover also available at their site

AFAIK all the relevant Malwarebytes applications are free for personal use

 

[Extensa]

Thanks for your help!!

Once Spybot Search and Destroy is done I will use malwarebytes. Funny how going to one bad website can cause such a chaos!

 

[Barman58]

Hello Extensa,

The fact is that these days you don't have to even click anything on these sites virtumonde is a nasty one but hopefully it will be removable, it may be worthwhile backing up anything irreplaceable, while you can, just in case

 

[Extensa]

The RougeRemover Tool found nothing but within the first minute of starting the antimalware, it found 20 infected files... maybe this one will clear everything out.

Once again thanks for the help!

 

[Airbot]

You might also try running Vundofix and MSRT as well. MSRT is for XP as well.

VundoFix by Atribune
http://www.vistax64.com/tutorials/173861-malicious-software-removal-tool.html?ltr=M

 

[Extensa]

Just an update: Even after using different scanners, the virus has taken over more than it is worth saving. Our Bitdefender (Basic Antivirus) has been taken over and nothing is worth saving. We will backup the remaining stuff that we need and wipe the computer.

Thanks for you help everyone, and hopefully this will help me in future incidents.

Extensa

P.S. - Everyone who replied recieved reputation points

 

[Airbot]

Yes, Extensa,

Vundo/Virtumonde is really bad, I've seen it wipe out computers. It keeps replicating itself. Best bet would be to never get it! Thanks

 

[Barman58]

Hi Extensa,

Sorry to hear that the infection is that bad.

One thing I would recommend is that when you are back up and running, is to deep scan your backed up files as soon as possible, (all file types not just executables), just in case there is anything hiding there that may re-infect, should be OK but better safe than sorry.

Also when you do re-install make sure you have a decent anti-virus / malware installed

 

[Extensa]

We thought that Bitdefender was decent, unfortunatley, it didn't go deep enough to see what was really on the computer. We have it on 3 computers in our house, this was the only one that ever had a problem.

I got a trojan once and within seonds Bitdefender picked it up and eradicated it from the computer, but from what spyware doctor showed on this infected computer, it had at least 10 trojans buried.

Hopefully we can avoid this from happening again!

 

[Barman58]

Hi Extensa,

Nothing wrong with Bitdefender as far as I know,

what I would advise these days is a layered approach to malware protection.

From your sig I assume you are a firefox user , in this case make sure you use the NoScript add-on and only allow scripts to run on sites you are sure are safe.

On the PC run your anti-virus in resident mode

In addition run regular sweep with both Spybot S&D and malwarebytes about once a week.

I personally also run the free comodo firewall with Defence+ as this will alert me to anything attempting to access the internet or system files in real time

http://www.personalfirewall.comodo.com/

That should catch most infections before they get a hold :D

 

[dinesh]

www.norton.com/nis09
its a 15 day trial but update it and run a full system scan.
Also click Start>run> MRT and press Enter. It will open MS malicious software removal tool. run a full system scan.
Also scan the system with windows defender.

 

[ripbox]

I would advise to steer clear of using Norton.... has caused nothing but problems for my self and other i know that used it.... never seen so many viruses in my life

 

[dinesh]

Hi ripbox, it seems you had issues with norton earlier but the one i recommended is the latest version and its much better from the previous versions.

 

[Extensa]

We have used norton in the past and found it slow and cumbersome. Luckily everything we backed up was not infected and the computer is not reformated and running like new. Thanks for the suggestion though.