Help with malware/trojan/virus removal (page 2)

asteroid · 2009-06-27T11:40:27+00:00

Hello there - I'm in need of help. Antivirus software shows that my computer is infected with win32/cryptor. This seems to hide as, probably among other things, avast!Antivirus.exe (not the proper avast antivirus software which I don't have). There is also another virusy problem showing up as an active process BN2.tmp (sometimes anything from BN1 to BN6). The problem has been around for at least 3 weeks but since then I've been away. I've tried looking online to see what to delete because obviously deleting the files doesn't work and they just come back - and deleting them or disabling them from the computer startup process or using malwarebytes anti-malware software to remove them doesn't work either. Pages online tell me to delete files and registry entries that aren't on this machine. I assume infection came from P2P software which I've deleted this morning so that won't happen again. Any help would be appreciated in order to get computer speed back, be able to use google again and

Help with malware/trojan/virus removal

46 min read

askey127

July 2, 2009, 9:32 AM UTC

asteroid,
It does look like all the files are present for BITS to work.
But...There are quite a few registry entries that could cause the service to fail.

It would not be a good idea to use System Restore to try and fix this.
We will reset System Restore so there is only one uninfected Restore Point.

I would ask for help at one of these forums, and reference this thread.
Your logs look clean of malware.
---------------------------------------------------------
Good System/Hardware Help Forums
GeekstoGo here: http://www.geekstogo.com/forum/Windows-XP-2000-2003-NT-f5.html
or
Computer Trouble here: http://forum.computertrouble.co.uk/index.php
or
TechSupportGuy here : http://forums.techguy.org/21-windows-nt-2000-xp/

All may require you to register free before posting for help.
-----------------------------------------------------------
Reset System Restore Points

Click Start > Help and Support
Click on ->Undo changes to your computer with System Restore.
Click Create A Restore Point then click Next. Give it a name it and then click Create, then Close.
Close Help and Support Center.
Click Start | Run and type Cleanmgr
Select (C: ) then click OK.
Click the More Options tab.
Click Clean Up in the System Restore Section.

This will remove all previous restore points except the newly created one.
This System Restore sequence is not to be done regularly, but only as a Special Case after the removal of malware.

askey127

asteroid

July 2, 2009, 2:17 PM UTC

Thank you. Thank you. Thank you.

I've followed your advice and signed up at geekstogo.com. Hopefully someone there can get this machine to update properly and we can avoid/reduce anything else nasty showing up on this machine.

A scan with Malwarebytes AntiMalware a moment ago showed zero problems - a wonderful improvement on the 41 issues it found when I first ran it last week, and that included issues that it could only deal with until the next reboot, all of which are now successfully killed.

So many thanks.

Maybe I should learn a bit more about how this/these machines run and then return at some point and learn how to help others out of the computer hell caused by malware.