Computer Virus

[chang35baht]

I think that this virus got into my computer during a Limewire download. The only thing that it causes my computer to do is to make limewire open up all the time. After I close it, it opens up again and again.

My AVG virus program detected it during the download so I stopped and deleted the file thru AVG. But now everytime I boot up my laptop AVG detects the virus, Gives me options on what to do; heal it,delete it or stick it in the virus vault. No matter what I do it is always there when I boot up my laptop.

The name of the virus is Trojan horseIRC/BackDoor.SdBot.MYX. As I say it seems to be pretty harmless but I,ve had to uninstall Limewire in the meantime because it`s a pain in the ass

Does anybody know How I can remove this? System restore doesn,t work!

Any info would be appreciated. Thanks.

[johnh101]

I had one recently (a trojan) which my software couldn't deal with. I went to the Network Associates website (MacAfee) and downloaded the stinger and cleared the problem immediately. And its free.

http://vil.nai.com/vil/stinger/

[Tywais]

Look here:

http://www.norbiesworld.co.uk/Forums/viewtopic/t=1276.html

You can find HiJackThis here:

http://forum.tweakxp.com/forum/Topic4303-29-1.aspx

Edited November 11, 2005 by tywais

[stumonster]

detailed removal instructions here

http://www.symantec.com/avcenter/venc/data...door.sdbot.html

if you decide on manual removal - print out the instructions and follow them carefully

[lopburi3]

If you Google the name you will find a lot of information - mostly specific to each computer case. But AVG has general information at the below location that might be useful (basic is to turn off system restore prior to healing or deleting a virus).

http://forum.grisoft.cz/freeforum/read.php...5,backpage=,sv=

[chang35baht]

I had one recently (a trojan) which my software couldn't deal with. I went to the Network Associates website (MacAfee) and downloaded the stinger and cleared the problem immediately. And its free.

http://vil.nai.com/vil/stinger/

<{POST_SNAPBACK}>

Thanx John. I`ve just Downloaded stinger but the scan didn`t find the virus as it wasn`t in the list.

Whilst watching the Stinger program do it`s scan I could see that I have an invisible folder Which seemed to be chock full of zipped sex movies. In amongst my Lime wire folders I have an "incomplete" folder for incompleted downloads. But I saw the Stinger program looking thru the "complete" folder But I cant find this folder at all. It looks like this is the virus doing it`s dirty work

[chang35baht]

If you Google the name you will find a lot of information - mostly specific to each computer case.  But AVG has general information at the below location that might be useful (basic is to turn off system restore prior to healing or deleting a virus).

http://forum.grisoft.cz/freeforum/read.php...5,backpage=,sv=

<{POST_SNAPBACK}>

Did everything asked of me on this website. Now when I scan with AVG it doesn`t detect the virus. But when I reboot AVG does detect it. Looks like I`m stuck with it for now. At least it`s not causing any problems in general, although I`m still a bit worried about the porn being downloaded. And is it still doing it even though I`ve uninstalled limewire? It wouldn`t be so bad but I can`t even access the porn.

[katana]

Do you have System Restore enabled?

Some viruses can be preserved in System Restore files, so you need to temporarily disable it while clearing the virus.

[Buff-horns]

download a copy of ewido that should get it out .

www.ewido.net

[Griffin]

www.download.com

should be a free tool on this great site.

[chang35baht]

download a copy of ewido that should get it out .

www.ewido.net

<{POST_SNAPBACK}>

Thanx Buffy, I downloaded Ewido and it found spyware that my other programs didn`t find. but it still didn`t detect the virus that I mentioned in my original post.

Now I have a different Question for you guys. The virus that I mentioned or some other malicious program. Is downloading zipped sex movies to the folder C:\documents and settings\myname\complete\.

I cant physically see this file as it has no icon. How can I get access to this folder and delete the files inside. Even though the malware may download more in the future, I would still like to be able to delete them on a regular basis. I don,t know how much space these files are taking up. When I ran the Ewido security suite there seemed to be even more sex files than the last time.

[slimdog]

One of the things I would do is:

Go into windows explorer (or My computer)

Click on Tools

Click on view

Ensure that "Show hidden files and Folders" is enabled

Hopefully if you now go back into the folder where the files are being downloaded, you will be able to see everything.

If you can see all the files, then before you delete everything have a look for any file(s) which has a file extension other than .zip, or any files which look different or are a lot smaller than the norm, as this may give a clue as to what the trojan or virus is,and therefore ideas as to how to get rid of it.

Post any additional info you get and someone may be able to help you out.

Hope this helps

[chang35baht]

One of the things I would do is:

Go into windows explorer (or My computer)

Click on Tools

Click on view

Ensure that "Show hidden files and Folders" is enabled

Hopefully if you now go back into the folder where the files are being downloaded, you will be able to see everything.

If you can see all the files, then before you delete everything have a look for any file(s) which has a file extension other than .zip, or any files which look different or are a lot smaller than the norm, as this may give a clue as to what the trojan or virus is,and therefore ideas as to how to get rid of it.

Post any additional info you get and someone may be able to help you out.

Hope this helps

<{POST_SNAPBACK}>

Slim, you a genius. I just did as you said and could see and open the file. All of the files were zip files so I`ve just deleted the whole folder.

I owe you a beer mate.

                                      Cheers.