|
|
|
|
![]() ![]() |
Feb 18 2005, 09:22 PM
Post
#1
|
|
|
Advanced Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 131 Joined: 23-October 04 Member No.: 1,900 |
Holy *BLEEP*... I have these 2 indestructable viruses on my computer. My antivirus CAN NOT delete them, and I have downloaded and used every single reccomended antivirus in the official downloads and links thread... They WILL NOT *BLEEP*ing die...
They both came from the same place, and their names follow: aim95.exe virus name= adware.weatherbug.a wxbug.exe virus name= adware.weatherbug.a (same) The file locations are both in my AIM folder: aim95.exe location= AIM\aim95.exe wxbug.exe location= AIM\Sysfiles\wxbug.exe Argh, I am dying... Does anyone have any idea on how I could possibly remove these viruses? I was considering trying to do it through MSDos before windows starts... Maybe... First I will see if you guys dig anything up... THEY WILL NOT DIE. I CAN NOT DELETE, RENAME, MOVE.... DO ANYTHING TO THEM. Forgive the caps, they were ideal at the moment... Gibe me teh help? |
|
|
|
Feb 18 2005, 10:44 PM
Post
#2
|
|
|
Privileged Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 773 Joined: 4-November 04 Member No.: 2,118 |
how do you know those are the virus or spyware files? aim95 and wxbug are both files that are NOT viruses or spyware (unless it is infected). I am assuming that you know what the virus is because a virus scanner told you. anyway, a quick google search...
http://securityresponse.symantec.com/avcen...weatherbug.html for more info. |
|
|
|
Feb 18 2005, 10:59 PM
Post
#3
|
|
|
Super Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 380 Joined: 22-December 04 From: usa Member No.: 2,873 |
Final)arkJon,
Ok, here goes- It looks like you'r dealing with a new variant of the "weatherbug.A" virus. Relax- the good news (according to Symantec) is that it's only an adware bug & usually doesn't cause you puter to die (unless it's been modified). First if you are using Win XP or ME turn OFF the Restore function. Next, you'll probably have to edit the registry keys to disable it before you can delete it (ie. thru Windows or DOS). GoTo www.symantec.com & type in "Weatherbug" into their search engine to find the page for manual registry editing. MAKE SURE you backup the registry first!!! Then, you should be able to delete it using Windows explorer. If you can't delete it using Windows OR if it deletes & then comes back after you re-boot -THEN it's a "memory resident" type bug (ie. a nasty one). If it's still there after you re-boot, then you'll have to do the registry edit AGAIN & re-delete the bug again. If you can't delete it at all using Windows- then edit the registry first & then GoTo DOS (without re-booting) & get into the directory it's in & then delete the file & path to the bug. If THat fails- then boot into DOS using safe mode & delete the bug first, then delete the path, & then the DIRectory (ONLY if it's completely empty & doesn't contain any of "your stuff" eg. programs etc.). If all else fails- get back to me- there are some Linux tools that will wipe out anything!! Hope this helps RGPHNX PS-IF YOU BACKED UP THE REGISTRY & then YOU SUCCESSFULLY DELETED THE BUG-THEN BE SURE TO DESTROY THE BACKUP as this still contains the key for the bug and is an invalid registry |
|
|
|
Feb 19 2005, 12:34 AM
Post
#4
|
|
|
Member [Level 1] ![]() ![]() ![]() ![]() Group: Members Posts: 57 Joined: 29-January 05 From: US Member No.: 3,484 |
Ouch! It seems that your Computer has b33n PWN31) by the 1337 ones in AOL.
I recommend trashin that computer in getting a Mac. J 2 the MB |
|
|
|
Feb 19 2005, 12:36 AM
Post
#5
|
|
|
Member [Level 2] ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 85 Joined: 27-December 04 Member No.: 2,976 |
What virus scanner you have? Some are stupid and say that some stuff is a virus. Use McAfee it kicks butt or look for another one cause yours must suck!
|
|
|
|
Feb 19 2005, 01:04 AM
Post
#6
|
|
|
Privileged Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 618 Joined: 30-October 04 From: Philippines Member No.: 2,049 |
Use PC-Cillin Internet Security 2005. For the serial number, just PM me. Enjoy! Or use Lavasfot Ad-Aware Professional Second Edition... To know where to get it, just PM me.
|
|
|
|
Feb 21 2005, 01:40 AM
Post
#7
|
|
|
Member [Level 1] ![]() ![]() ![]() ![]() Group: Members Posts: 56 Joined: 10-February 05 From: California Member No.: 3,685 |
go to my-etrust.com and download the antivirus trial. i'm using the non-trial of the full version, but lemme tell you, E-Trust is the best damn piece of anti-virus software to ever be coded. DL it, install it, run it, problem solved
|
|
|
|
Feb 21 2005, 06:57 PM
Post
#8
|
|
|
Ancient Enigma ![]() Group: [MODERATOR] Posts: 1,706 Joined: 11-July 04 From: under the stars Member No.: 76 |
if nothing else works, reformat [backup important files first, of course].
though if you're adept and comfortable in editing your system registry [which can be risky if you do not know what you are doing], you can easily stop those pesky executables/adwares/malwares/virii. try REG ORGANIZER (search google), and from the Startup Processes tab, you can unload those files from even loading from the very startup of windows. at least that's what i did to get rid of similar stuff in my PC. |
|
|
|
Apr 21 2008, 03:08 AM
Post
#9
|
|
|
Guest Feedbacks ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 2,360 Joined: 21-September 07 Member No.: 50,369 |
Replying to Final)arkJon
Listen, they are not viruses. Viruses and Adware are totaly different things. It is just adware. Adware is a potentionally unwanted program that displays numerous pop-ups that sometimes cannot be closed. Adware can be removed with a simple program but in this case, weatherbug is very hard to remove. This is because it is the only program to not be detected on most anti-virus/spyware programs. It is not a virus. Viruses and Adware are two totaly different things. Get it right. -reply by shannon |
|
|
|