Fix my computer please

Urizen · Post by **Urizen** » Tue Oct 24, 2006 10:49 pm

I've got this trojan that just won't let go of my system. when i first got it, it wanted to get through my firewall, but i didn't let it, so no biggie. but now i get this error message every time i start the comp, cuz it's banging at the wall, trying to get through:

this shows up three times at boot.

i keep running ad-aware, and i keep removing this "windows" entry, but every time i run it, it's back:

i think it's lodged itself in my scvhost-process. this is what my firewall tells me:

Please help!

Thor Kaufman · Post by **Thor Kaufman** » Tue Oct 24, 2006 10:55 pm

nigga, plz

First off, stop using ZoneAlarm or any other wannabe "firewall" program.
Secondly, start using your brain, which is the center of any firewall solution.
Thirdly, better reinstall Windows totally fresh without the bullshit, then use the hints on http://www.ntsvcfg.de/ntsvcfg_eng.html
and never get any malware on your system again

Be all that you can be, start being a patriot

Urizen · Post by **Urizen** » Tue Oct 24, 2006 11:10 pm

that's swell, but it's not actually "helping"

Thor Kaufman · Post by **Thor Kaufman** » Tue Oct 24, 2006 11:15 pm

What are you expecting, congoid? No bullshit advice from me, better reinstall Windows.
It's obvious your system is setup extremely faulty and also got infested, most probably some of your system files are already corrupted beyond repair and damage control will be more than likely more annoying than just reinstalling windows in like 2-3 hrs then, do the routine from the website I suggested

whatever, I'm not going to throw pearls before swines

Urizen · Post by **Urizen** » Tue Oct 24, 2006 11:18 pm

no need to be like that, mang

POOPERSCOOPER · Post by **POOPERSCOOPER** » Tue Oct 24, 2006 11:37 pm

I would go to zonealarms site and see if anyone else has the same problem. Also do you have a virus scanner? A firewall and spyware killer do not actually combat viruses.

Urizen · Post by **Urizen** » Tue Oct 24, 2006 11:43 pm

i know, and i do. thanks, though

Jesus Christ · Post by **Jesus Christ** » Wed Oct 25, 2006 12:01 am

Download hijackthis and post the log at bleeping computer dot com.

Franz Schubert · Post by **Franz Schubert** » Wed Oct 25, 2006 12:23 am

Before you folow the advice of the poster above me, download Spybot - Search and Destroy. (get it from download.com)

Spybot has a section where you can set what processes run when you boot up your system. Find the process that is causing your runtime error and disable it.

If you can't figure it out, or don't want to mess with the startup variables, then try hijackthis, as foretold by my lord and savior.

Dreadnought · Post by **Dreadnought** » Wed Oct 25, 2006 12:46 am

Or take a hammer and a bucket of water and solve the problem with good old VIOLENCE AGAINST ELECTRONICS.

Kashluk · Post by **Kashluk** » Wed Oct 25, 2006 10:46 am

Step 1

Download Spybot Seek & Destroy ( http://www.spybot.org )
Download all updates (built-in updater)
Search for malicious crap & proceed to remove them
Browse through your start-up settings with Spybot's tools (advanced mode)

Step 2

Get rid of ZoneAlarm
Download Sygate Personal Firewall ( http://www.download.fi/verkko_ohjelmat/ ... rewall.cfm )

Step 3

Get rid of whatever anti-virus software you're using

a) buy yourself F-Secure internet security 2006 ( http://www.f-secure.com )

b) download AVG anti-virus ( http://www.grisoft.com/doc/downloads-re ... 01?prd=avw )

If these steps won't help you, then I have to agree with Thor Kaufman: reinstall Windows ASAP.

Koki · Post by **Koki** » Wed Oct 25, 2006 4:36 pm

Firstly, stop listening to Thor.

Second, format

Icabod · Post by **Icabod** » Wed Oct 25, 2006 10:14 pm

Sorry man, I don't know PCs well enough to help, if you had a Mac I could.

Redeye · Post by **Redeye** » Thu Oct 26, 2006 2:00 am

disable system restore

killbox on the self-resurrecting bugger
(multiple attempts may be necessary)

then run every cleaner program you have

Plan B:
Put all of your important shit on cds and start the fuck over.

But you know that.

Doggedmeat · Post by **Doggedmeat** » Thu Oct 26, 2006 2:56 am

My understanding is SCVHost is the w32.gaobot worm. It will try to dial out to an IRC server that will send instructions to your pc.

This has been an known worm for some time and here is removal tool from Symantec that can take care of it.

http://www.symantec.com/security_respon ... 16-4140-99

Hope it works.

Jesus Christ · Post by **Jesus Christ** » Thu Oct 26, 2006 2:19 pm

I reiterate:

Download hijackthis and post the log at bleeping computer dot com.

It shall not fail you.

Koki · Post by **Koki** » Thu Oct 26, 2006 4:22 pm

Icabod wrote:Sorry man, I don't know PCs well enough to help, if you had a Mac I could.

Ya but if he had a Mac he'd get banned from DAC. Wow, it rhymes.

Urizen · Post by **Urizen** » Thu Oct 26, 2006 4:57 pm

Jesus Christ wrote:I reiterate:

Download hijackthis and post the log at bleeping computer dot com.

It shall not fail you.

thanks jesus, you're a godsend

Jesus Christ · Post by **Jesus Christ** » Thu Oct 26, 2006 7:34 pm

Urizen wrote:thanks, jesus, you're a godsend

vendetta · Post by **vendetta** » Thu Oct 26, 2006 9:44 pm

Koki wrote:Ya but if he had a Mac he'd get banned from DAC. Wow, it rhymes.

No, it does not, fucktard.