Former Member
inherit
guest@proboards.com
171777
0
Apr 18, 2024 18:35:58 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Mar 23, 2009 23:09:48 GMT -8
I do not know how I got this, but I first noticed it on my 1GB Flash Drive It's called "dideli_papai" I can delete it, but it comes back. I can format the flash drive, but it stays. It says it's a screen saver. So I checked my screen saver settings I saw something that said VGHD so I clicked on it, and clicked preview, nothing came up. It is now on my Magic Jack, and now I am afraid to insert my U3 Sandisk 2Gb with all my important files on it. How can I remove this? I tried looking on google, but the pages were all in a different language other then English.... I had it translated my google, and it said it was some type of virus that infects flash drives. I scan with Malwarebyts' Anti-malware, and COMODO Firewall's defense+ but they both say it's fine. but it copies it's self to every flash drive, and I cannot delete it, it jsut comes back. I rename it, and a second one comes up. Ive scanned my computer, and there are no virus's at all. So I am confused yet scarred. UPDATE: So I just install bunch of AV's from download.com, and only tried 1 out, and has found 4 infections! It's called Trojan.Dropper/Gen research.sunbelt-software.com/threatdisplay.aspx?name=Trojan-Dropper.Gen&threatid=175052Which it says it's hostile, an downloads other types of trojans, spyware, etc. So needing extra protection is very wise. I'm thinking about putting Norton back onto my computer as that has helped keep me safe from stuff like this. edit: Well I think I found it. It was in the startup manager. I opened Glary Utilities, clicked on the start up manager. and found that it said "Services3" and from the Appdata Roaming folder. which I went through that in Ubuntu and deleted everything in that folder... EDIT 2:
Yep it's completely GONE!!!! ;D
I have to thank SUPERAntiSpyware Free Edition from Download.com for this!! I had an option to scan all my drives, so I scanned my 2GB, 1Gb flash drive, MagicJack. DVD drive, C drive. and it found 4 virus's. 1 on the 1GB flash drive, 1 on the MajicJack, and 2 on my C Drive.
|
|
inherit
94979
0
Aug 15, 2017 6:17:28 GMT -8
Jackaroo
1,663
December 2006
socalledemo
|
Post by Jackaroo on Mar 23, 2009 23:13:08 GMT -8
o.o Now that's really odd.
|
|
Former Member
inherit
guest@proboards.com
171777
0
Apr 18, 2024 18:35:58 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Mar 23, 2009 23:15:20 GMT -8
Yeah I know.. ive used my flash drive earlier today on the same computer, and it did not have that at all.
|
|
inherit
94979
0
Aug 15, 2017 6:17:28 GMT -8
Jackaroo
1,663
December 2006
socalledemo
|
Post by Jackaroo on Mar 23, 2009 23:17:36 GMT -8
Yeah I know.. ive used my flash drive earlier today on the same computer, and it did not have that at all. I know that some schools/colleges have programs which wipe USB things if there's a virus on it, along with .avi and .exe files, so move all your stuff onto a computer, all the stuff you want to keep, then take it into school/college and see if they have that program.
|
|
inherit
Dalai Llama Of Proboards
22766
0
Aug 6, 2012 16:35:06 GMT -8
MarvinRules
Be Yourself, Everybody else is taken.
29,805
April 2004
marvinrules
|
Post by MarvinRules on Mar 23, 2009 23:19:34 GMT -8
I do not know how I got this, but I first noticed it on my 1GB Flash Drive It's called "dideli_papai" I can delete it, but it comes back. I can format the flash drive, but it stays. It says it's a screen saver. So I checked my screen saver settings I saw something that said VGHD so I clicked on it, and clicked preview, nothing came up. It is now on my Magic Jack, and now I am afraid to insert my U3 Sandisk 2Gb with all my important files on it. How can I remove this? I tried looking on google, but the pages were all in a different language other then English.... I had it translated my google, and it said it was some type of virus that infects flash drives. I scan with Malwarebyts' Anti-malware, and COMODO Firewall's defense+ but they both say it's fine. but it copies it's self to every flash drive, and I cannot delete it, it jsut comes back. I rename it, and a second one comes up. Ive scanned my computer, and there are no virus's at all. So I am confused yet scarred. That behavior seems like a worm or virus. The fact that a "Screen Saver" file returns on a flashdrive after a format, tells me that your computer has an infection of some kind. The fact that it appears on ALL of your flash drives is even more evidance that it is an infection. As for removal... I have no idea, and can not find anything in English, (Or translated to English). You could try posting on a site that specializes in spyware and adware removal help. As a last resort, you could do a full format and re-install of your OS. Then delete all copies of this "Screen Saver" off of all flash drives, and external drives.
|
|
Former Member
inherit
guest@proboards.com
171777
0
Apr 18, 2024 18:35:58 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Mar 23, 2009 23:29:21 GMT -8
I do not know how I got this, but I first noticed it on my 1GB Flash Drive It's called "dideli_papai" I can delete it, but it comes back. I can format the flash drive, but it stays. It says it's a screen saver. So I checked my screen saver settings I saw something that said VGHD so I clicked on it, and clicked preview, nothing came up. It is now on my Magic Jack, and now I am afraid to insert my U3 Sandisk 2Gb with all my important files on it. How can I remove this? I tried looking on google, but the pages were all in a different language other then English.... I had it translated my google, and it said it was some type of virus that infects flash drives. I scan with Malwarebyts' Anti-malware, and COMODO Firewall's defense+ but they both say it's fine. but it copies it's self to every flash drive, and I cannot delete it, it jsut comes back. I rename it, and a second one comes up. Ive scanned my computer, and there are no virus's at all. So I am confused yet scarred. That behavior seems like a worm or virus. The fact that a "Screen Saver" file returns on a flashdrive after a format, tells me that your computer has an infection of some kind. The fact that it appears on ALL of your flash drives is even more evidance that it is an infection. As for removal... I have no idea, and can not find anything in English, (Or translated to English). You could try posting on a site that specializes in spyware and adware removal help. As a last resort, you could do a full format and re-install of your OS. Then delete all copies of this "Screen Saver" off of all flash drives, and external drives. Skype!? I have not used that in a very long time, I don't even have it installed on my computer anymore Though I booted up into Ubuntu, and deleted it off of my flash drive, but for my MagicJack, I can't even access it. I am trying to get VMware to work on Ubuntu. (Got it partly but it wont recognize my .VMX file of WinXP.) It has not copied it's self back onto the flash drive. So it is obviously gone. I'm going to look through the Vista drive in Ubuntu to check and see if I can find the worm.
|
|
inherit
Dalai Llama Of Proboards
22766
0
Aug 6, 2012 16:35:06 GMT -8
MarvinRules
Be Yourself, Everybody else is taken.
29,805
April 2004
marvinrules
|
Post by MarvinRules on Mar 23, 2009 23:32:55 GMT -8
Skype!? I have not used that in a very long time, I don't even have it installed on my computer anymore Though I booted up into Ubuntu, and deleted it off of my flash drive, but for my MagicJack, I can't even access it. I am trying to get VMware to work on Ubuntu. (Got it partly but it wont recognize my .VMX file of WinXP.) It has not copied it's self back onto the flash drive. So it is obviously gone. I'm going to look through the Vista drive in Ubuntu to check and see if I can find the worm. Manually removing it from another OS is another good idea. Have you booted back into Windows after removing it from the flashdrive via Linux? If not, than that is why it has not come back... If so and it has not come back, than the infection may not have noticed that you removed it. Good luck and happy hunting!
|
|
Former Member
inherit
guest@proboards.com
171777
0
Apr 18, 2024 18:35:58 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Mar 23, 2009 23:33:48 GMT -8
Skype!? I have not used that in a very long time, I don't even have it installed on my computer anymore Though I booted up into Ubuntu, and deleted it off of my flash drive, but for my MagicJack, I can't even access it. I am trying to get VMware to work on Ubuntu. (Got it partly but it wont recognize my .VMX file of WinXP.) It has not copied it's self back onto the flash drive. So it is obviously gone. I'm going to look through the Vista drive in Ubuntu to check and see if I can find the worm. Manually removing it from another OS is another good idea. Have you booted back into Windows after removing it from the flashdrive via Linux? If not, than that is why it has not come back... If so and it has not come back, than the infection may not have noticed that you removed it. Good luck and happy hunting! No not yet. I'm about to do that now.
|
|
Former Member
inherit
guest@proboards.com
171777
0
Apr 18, 2024 18:35:58 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Mar 24, 2009 0:10:08 GMT -8
I forgot that I had SpyBot search and Destroy so I am scanning with that. and yeah it came back onto the flash drive. Now I'm having problems booting in Ubuntu, it wants me to do a chkdsk /r and restart (Which I have not yet) and let it fix what ever problem it is having. But I hope SpyBot will find this infection, that these other's did not find.. >_>
|
|
inherit
5116
0
Jun 1, 2012 11:13:33 GMT -8
Ben Woodruff
23,954
August 2002
bwoodruff
|
Post by Ben Woodruff on Mar 24, 2009 4:36:12 GMT -8
Sounds like you've been owned. The only way to ensure that you're clean is to backup anything really important (scan it from a secure computer [like one that has DeepFreeze on it] after doing so) and format your hard drives and flash drive.
|
|
Sir Random
New Member
Knight of random lore
Posts: 163
inherit
138700
0
Mar 31, 2009 20:50:26 GMT -8
Sir Random
Knight of random lore
163
March 2009
sirrandom
|
Post by Sir Random on Mar 24, 2009 5:02:59 GMT -8
ouch...viruses ya can't find, never fun. we had one on our home desktop and it would just shut down after a few minuets, it got bad enouhg that it fried out CPU...
|
|
Former Member
inherit
guest@proboards.com
171777
0
Apr 18, 2024 18:35:58 GMT -8
Former Member
0
January 1970
Former Member
|
Post by Former Member on Mar 24, 2009 9:09:24 GMT -8
ouch...viruses ya can't find, never fun. we had one on our home desktop and it would just shut down after a few minuets, it got bad enouhg that it fried out CPU... That's what happened to me 10 months ago, bad Trojan I ran into. call WinXP anti-spy 2007...
|
|