Malware Removal Forums

Win32/Patched.GB virus! Please help...

lorieoreo · 2011-01-10T20:42:33+00:00

Hello, After searching recipes online and clicking on a random search result in Google, I found myself with a nasty little virus. My AVG Resident Shield popped up with multiple threats from a virus named Win32/Patched.GB. It says it is white-listed as the system files it's attacking (C:\WINDOWS\explorer.exe and C:\WINDOWS\system32\winlogon.exe) are critical/system files that should not be removed. First, I tried rebooting my computer, only to find when it restarted, I had no icons on my desktop. Just the pretty field/cloud Microsoft background. I did a system restore to about an hour before this, and luckily my desktop came back normal. But still with multiple threat detections from AVG's Resident Shield. At the advice of a friend, I uninstalled AVG and downloaded Eset, ran Eset's scan with no luck. Same outcome, Eset detected the bugs, but couldn't remove them. I then uninstalled Eset. Then I downloaded Malwarebytes and ran it safe mode, then again in regular mode. It seemed to have r

97 min read

askey127

January 12, 2011, 7:05 PM UTC

When IE is running, just hit F1 and type "cookies" into the search box.
It will explain how to enable cookies for various scenarios, for the IE version you are running.

You are right that you need to click the little "Options" button (lower right) from NoScript to allow scripts in Firefox.
Using it will show you how often websites try to run their own scripts on your machine without asking.
Some of the scripts could be used to infect your machine, if you are not sure about the integrity of the website.
Because Firefox does not allow ActiveX controls, and because it has add-ons like NoScript, it is somewhat safer for general surfing.

Even when you first posted, you did not have Java on your machine.
You can get it like this:

------------------------------------------------------------
Download and Install the latest version of Java Runtime Environment from here : http://java.sun.com/javase/downloads/index.jsp, and install it to your computer.
In the first section on the page, labeled JDK 6 Update 23 (JDK or JRE), click on the button labeled Download JRE. Do NOT choose the button labeled "Download JDK".
Select the Platform Windows and check the box to agree to the license.
Choose the Windows Offline installation version and click on the link.
Download it, choose Save, and save it to your desktop.
Then doubleclick it on your desktop, and it will install the newest version of Java for you to use.
You can then remove the Installer from your desktop.

After installing Java, your NoScript should allow JavaScript on whatever sites you want.
Let me know how it goes.
askey127

lorieoreo

January 12, 2011, 7:49 PM UTC

Hmmm... ok, well I got Facebook to work on IE by putting it as an Always Allow cookie site.... but can't get it work on Firefox. Which after you said Firefox was generally safer for surfing, I'd much rather get on the social networking site from Firefox. It keeps saying Javascript isn't enabled. I went to the Tools menu, then content, and doubled checked that Javascript was enabled... so I'm a little confused.
This isn't a super huge problem of course, everything is working fine... THANKS TO YOU!!

But if you know of something I might be doing wrong in Firefox, please let me know.

Thanks so much for all your help!

askey127

January 12, 2011, 8:26 PM UTC

Have you seen this page? It summarizes how it's supposed to work.
http://support.mozilla.com/en-US/kb/Javascript

lorieoreo

January 13, 2011, 1:16 AM UTC

Thanks Askey... will take a look. I'm sure I'll figure it out.

And thanks a MILLION again for helping me get rid of that nasty virus! You are a lifesaver! AND my most favorite person of all time now!!!

Take care!

askey127

January 14, 2011, 8:52 PM UTC

As this issue appears to be resolved,