Computer Virus - Off Topic Chat

Off Topic Chat

Computer Virus

Posted by John Thomson on August 18, 2008 at 7:51 pm

Well I have spent the day trying to remove a virus from Marcellas computer…….with no luck

It got past Zone Alarm Pro which has never given any problems before. It picked it up but cannot remove/quarantine or delete it…….I can see the file but cannot delete it even after putting in force delete.

The trojan is win32.monderb.fus and is sitting in the Windows system32 folder filename ssqqpjbc.dll (created at 09.09am this morning)

Symptoms are no icons or taskbar ( Win XP Pro SP3) which I can get around using ctrl+alt+del and running explorer.exe manually………..everything works but is slow.

Any suggestions?

John

Neil Speirs replied 15 years, 8 months ago 7 Members · 14 Replies
14 Replies

Ian Pople

Member
August 18, 2008 at 8:12 pm

have you tried the on-line virus checkers
Ian Pople

Member
August 18, 2008 at 8:16 pm

and log on in safe mode with network support
John Thomson

Member
August 18, 2008 at 8:18 pm

Did a search.one forum said Avira would get it…downloaded it and running it now…….2 infections picked up in the first 2% of the scan…….hope it can remove it!

john
John Thomson

Member
August 18, 2008 at 8:19 pm

safe mode didn’t work………

John
Ian Pople

Member
August 18, 2008 at 8:32 pm

try running the online ones in safe mode with network support may help
John Thomson

Member
August 18, 2008 at 8:47 pm

Thanks for the advice Ian, much appreciated…..I’ll keep you informed of my progres.

john
David Rogers

Member
August 18, 2008 at 8:57 pm

http://forum.zonelabs.org/zonelabs/boar … Discussion

Zonelabs forum.

Has a couple of similar trojans & potential remedies.

Or start a new thread.

I’ve seen me booting into ‘command line’ (pretend DOS) and deleting stuff that way in the past. Isn’t successful all the time, but can get rid of some of the less deeply embedded items…or whipping out the HDD and working on the files as a slave drive in another machine.
Ian Pople

Member
August 18, 2008 at 9:02 pm

booting from a clean hdd with windows on it and then scanning the infected hdd as a slave does help.
Ian Bingham

Member
August 18, 2008 at 9:12 pm

I had a bad one the other day,, antivirus xp2008
its a crafty little one!

Ian
Edward Morton

Member
August 18, 2008 at 9:46 pm

Hi John
download and install this it,s free
has helped me a few times

Cheers Ed

http://www.brothersoft.com/trojan-kille … 70469.html
Neil Speirs

Member
August 19, 2008 at 9:17 am

Anyone else getting virus sent to them under the pretense of courier invoices, delivery notes etc? I’m getting about 2 a week at the moment 🙄

The Latest one:
Unfortunately we were not able to deliver postal package you sent on August the 1st in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office

Your FEDEX.com
David Rowland

Member
August 19, 2008 at 9:19 am

yes the UPS ones… spamfighter is catching it
John Thomson

Member
August 19, 2008 at 10:17 am

The offending file could not be deleted because it was in use…….I removed the drive and hooked it up to my PC as a slave……..my Zone Alarm picked up the trojan before I even ran a scan and deleted it……

So the PC is back to full health.

Thanks everyone for your advice.

John
Neil Speirs

Member
August 19, 2008 at 10:24 am

quote John Thomson:

The offending file could not be deleted because it was in use…….I removed the drive and hooked it up to my PC as a slave……..my Zone Alarm picked up the trojan before I even ran a scan and deleted it……

So the PC is back to full health.

Thanks everyone for your advice.

John

(bully) Take that win32.monderb.fus 😀