Help: New AIM virus

[Hodge]

Ok, so there's this new AIM virus out. It says something about looking at pictures on facebook. Anyway, a couple of my friends clicked on the link, and well, it's pretty ugly. I got the first one cleaned up, but I think this one made it a few more days and it's not cleaning up completely. I've got 90% of the stuff but can't seem to get the rest. I've used (in order of use and finding the most stuff wrong) Ad-aware, Spybot, MS Anti-spyware, Norton Antivirus, and Ewido. (And a lil HJT)

Anyway, stuff just keeps regenerating on me. Here are some symptoms:
- The antispyware scans are being blocked from running on startup
- Popups with the final document being /yyy65.html
- Rundll errors on startup

Any help would be greatly appreciated.

 

[BrutusMaximus]

Sounds like a bad one.

I would try hijack this.......and also spy sweeper (just the free trial of course).......have had some luck with spysweeper getting rid of the nasty ones.

Have you tried maybe going into msconfig, see if you can find some of the virus stuff in startup, and disable it? Also can you get the name of the virus?

Oh and tell them to stop using AIM, it's a POS to begin with just because it's made by GayOHell

 

[tedginn05]

I also have some sort of virus on my computer. Its pretty bad. I have to restart the CPU everytime I want to use it or it runs REAL sluggish. But once I start using it, you can't really notice it. Its just when you leave it alone and come back later that it goes into that sluggish thing.

I don't know where it came from. Looks like my dad will have to restore my CPU.

 

[Hodge]

Sounds like a bad one.

Definitely

I would try hijack this.......and also spy sweeper (just the free trial of course).......have had some luck with spysweeper getting rid of the nasty ones.

HJT stuff I remove keeps coming back. I'm running webroot spy sweeper and it's got 54 more so far.

Have you tried maybe going into msconfig, see if you can find some of the virus stuff in startup, and disable it? Also can you get the name of the virus?

I'm getting denied the same as in HJT when I remove stuff it comes back (not much there that I see anyway).

Oh and tell them to stop using AIM, it's a POS to begin with just because it's made by GayOHell

Yeah, I use GAIM a lot. The funny thing on this one is that they don't use AIM. One of their "friends" used it over the weekend.


Ok, so I found some help site that suggested running a program called l2mfix. We'll see how that goes with Spy Sweeper.

 

[illinoisbuckeye]

I also have some sort of virus on my computer. Its pretty bad. I have to restart the CPU everytime I want to use it or it runs REAL sluggish. But once I start using it, you can't really notice it. Its just when you leave it alone and come back later that it goes into that sluggish thing.

I don't know where it came from. Looks like my dad will have to restore my CPU.

Don't BS us Teddy. We all know it came from porn

 

[tedginn05]

Definitely

HJT stuff I remove keeps coming back. I'm running webroot spy sweeper and it's got 54 more so far.

I'm getting denied the same as in HJT when I remove stuff it comes back (not much there that I see anyway).

Yeah, I use GAIM a lot. The funny thing on this one is that they don't use AIM. One of their "friends" used it over the weekend.


Ok, so I found some help site that suggested running a program called l2mfix. We'll see how that goes with Spy Sweeper.

For some reason, that sounds like another virus.


The one I have on my computer is called the "Trojan" virus. God Damnit Petey!

 

[tedginn05]

Don't BS us Teddy. We all know it came from porn

Actually I don't. Completely honest on that one.

 

[Hodge]

For some reason, that sounds like another virus.

Gotta consider the source, not just the name.


Well, I think I'm done, at least for tonight. It *appears* that Spy Sweeper and l2mfix did the job (I hope).

Thanks to all for the help.

 

[JXC]

Actually I don't. Completely honest on that one.

You are a strange kid.

 

[coastalbuck]

You are a strange kid.