Got a virus through AIM...need help

03silvers · 03-28-2006, 04:28 PM

anyone with aol IM might know...someone on your buddy list will send you an im with a link, however it is not really them who sent the link, when you click it it downlaods a file somewhere to your computer, now on my c: i have a file i can not delete. When i use a shredder program the file renames itself or has a diferent extension but still sits on my C; drive.

Also it randomly opens IE and trys to install something else....and ideas?

Oni · 03-28-2006, 04:36 PM

If you know the name of the file and a little DOS I'd boot to the command prompt and delete the file that way. It's likely not that simple in your case though. Need more info such as the name/names of the file.

Hagios · 03-28-2006, 04:59 PM

http://www.clamwin.com << Free antivirus
http://free.grisoft.com << Free antivirus

mikem317 · 03-28-2006, 07:48 PM

Quote:

Originally Posted by Oni

If you know the name of the file and a little DOS I'd boot to the command prompt and delete the file that way. It's likely not that simple in your case though. Need more info such as the name/names of the file.

+1.

Restart the computer using Safe Mode with Command Prompt. Or something to that effect.

Code:

DEL C:\filename.exe /p /f

Krazy Hawaiian · 03-28-2006, 11:15 PM

^ partially right. What you got isnt technically a virus and I doubt any virus prog will do it. You got a adware pos. Google the name of the file and get info on removal that way. Tom Coyote forum is a good place to go for help.

If you simple delete the file it will come back because it has a hidden .dll somewhere else on the drive that is in windows system folder. It has a "run once" command that will keep reinstalling it on every restart.

The problem is that since it renames itself and it may have several files connected to it. Go to www.tomcoyote.com for help.

nsbrider · 03-29-2006, 07:26 AM

Reboot in Safe Mode, then: http://www.jayloden.com/aimfix.htm