change help: Need help with a virus!

I_Still_Bit

Need help with a virus!

My brother hooked up his external hard drive to format it because his laptop had crashed (I believe) and while I was on the internet (a site I haven’t had problems with before) an error report message came up. It didn’t look familiar so I pressed “don’t send”. Soon after a bunch of pop ups came up and then my wallpaper was changed to this:
http://i372.photobucket.com/albums/oo...
And we couldn’t change it.
PC-cillin popped up and told us what it thought the virus might be (something about “Possible_Nucrp-6″ and “C:\WINDOWS\system32\sysrest32.exe”) so we researched it a little and then I came here to look it up when I found this post:
http://help.com/post/123352-my-computer-has-just-been-infected#reply-335299 0
We turned system restore off, put it in safe mode, and ran a virus cleaner and scan.
After we had done a final scan no viruses were found and we were able to change the background.
When we logged back on later it turned back to the “Spyware Detected” background. We still haven’t been able to get rid of it yet. Avast constantly pops up and says “Virus detected” and we do what it recommends and we ‘move to chest’.
Here is a screen shot of it:
http://i372.photobucket.com/albums/oo164/AshleyxBrittany/desktopscreenshot .jpg

So far the virus doesn’t seem to have a major affect on our laptop besides the god ugly background. We’re still afraid that something may happen and we’d really like to rid our laptop of this virus.

+In the beginning (before we turned system restore off and such) when we tried to do a virus scan the laptop would restart just before it finished.
+The virus has apparently been found on all of the profiles on the laptop.
+We can change the background, but if we log off and then go back on it changes back to the “Spyware Detected” background.

If you need anymore info feel free to ask.
Thanks in advance.

This open post was written 1 year, 3 months ago | V/U/S: 879, 24, 6 | Edit Post | Leave a reply | Report Post

Reciprocity (0)

Since writing this post I_Still_Bit may have helped people, but has not within the last 4 days. I_Still_Bit is a verified member, has been around for 1 year, 4 months and has 2 posts and 21 replies to their name.

Post Tags (12)

spyware, virus, laptop, system, change, system restore, Scan, Pop, Log, background, C:\WINDOWS\system32\sysrest32.exe, Possible_Nucrp-6 (How Tags Affect Reciprocity)

Replies (24)

Where were you?

Click and drag to move the map around. FAQ: How we place people on this map »
You can also watch events on Help.com as they happen

Mouse over the map for 2 seconds to see an expanded, interactive view

heather* 1 #
An Unknown Location | 1 year, 3 months ago (14 minutes after post)

Oh no. I have the same thing. But it change my wallpaper to a blue screen saying something about a virus being detected. Avast detects like hundreds of Trojen horse viruses and tons of spyware. I can’t get rid of it either.

Help me with: Does anyone else know how it feels to be troubled about this every day and every night?

heather* 1 #
An Unknown Location | 1 year, 3 months ago (15 minutes after post)

What site was it by the way? It may be important.

Help me with: Does anyone else know how it feels to be troubled about this every day and every night?

I_Still_Bit 2 #
An Unknown Location | 1 year, 3 months ago (17 minutes after post)

It was gamespot.com
I’ve never had a problem with that site, I always go there if I need help with a game.

heather* 1 #
An Unknown Location | 1 year, 3 months ago (19 minutes after post)

That’s odd. I might have been there before, but I got this virus so long ago I can’t remember. Do you have MSN?

Help me with: Does anyone else know how it feels to be troubled about this every day and every night?

I_Still_Bit 2 #
An Unknown Location | 1 year, 3 months ago (23 minutes after post)

Nope. I don’t have any Instant messengers anymore :(
I have a yahoo email address though :/
wait, I still have YIM, but that’s all.

jcd 1 #
An Unknown Location | 1 year, 3 months ago (55 minutes after post)

Try this program:

http://www.download.com/Malwarebytes-…

I’ve used it to clean similar viruses before.

Help me with: Umm..

I_Still_Bit 2 #
An Unknown Location | 1 year, 3 months ago (57 minutes after post)

If I click on it, it won’t immediately start the download, right?

jcd 1 #
An Unknown Location | 1 year, 3 months ago (58 minutes after post)

It should just take you to the download page.

Help me with: Umm..

I_Still_Bit 2 #
An Unknown Location | 1 year, 3 months ago (1 hour, 3 minutes after post)

Well, I might do that later, but I prefer a method where I don’t have to download something else.

jcd 1 #
An Unknown Location | 1 year, 3 months ago (1 hour, 5 minutes after post)

Well, if you don’t already have something that will take care of it, you might not have a choice. I assume you’ve already tried whatever AV and antispyware software you have installed. It’s up to you, though.

Help me with: Umm..

I_Still_Bit 2 #
An Unknown Location | 1 year, 3 months ago (1 hour, 6 minutes after post)

I’ve mainly been using Avast and it has been recommending me to ‘move to chest’.
Should I just click ‘delete’ instead?

jcd 1 #
An Unknown Location | 1 year, 3 months ago (1 hour, 9 minutes after post)

You can, but it probably won’t matter. There is something else there that Avast isn’t detecting that is reinfecting your files, or recreating the infected files.

Help me with: Umm..

I_Still_Bit 2 #
An Unknown Location | 1 year, 3 months ago (1 hour, 15 minutes after post)

Do you think that program would take care of it?

I_Still_Bit 2 #
An Unknown Location | 1 year, 3 months ago (5 hours, 31 minutes after post)

I left, but I’m back on.
The background hasn’t changed yet and Avast hasn’t popped up yet, so hopefully the virus is gone.

heather* 1 #
An Unknown Location | 1 year, 3 months ago (7 hours, 35 minutes after post)

Sorry, my computer froze up. Well, the reason I asked about MSN is because the pop ups seem connected to my inbox.

Help me with: Does anyone else know how it feels to be troubled about this every day and every night?

The Clue 19 #
Minot, ND, US | 1 year, 3 months ago (12 hours, 11 minutes after post)

If your PC seems like its slowing down or having a hard time surfing the web or just doesn’t seem right.
You should go to http://download.com and get these programs.
AD-Aware: http://www.download.com/3120-20_4.htm…
Spybot search and destroy: http://www.download.com/Spybot-Search…
CCleaner: http://www.download.com/CCleaner/3000…
and and if you dont have an Antivirus program you can use
Avast: http://www.download.com/Avast-Home-Ed…
or AVG: http://www.download.com/AVG-Anti-Viru…
and for your firewall a good program is
Zone Alarm: http://www.download.com/ZoneAlarm-Fir…
Install these programs and run them regulary. This will keep your system clean and running properly. These programs are free and Download.com is a part of CNET (the site that your posting on right now). Hope this helps :-)

Help me with: Heres a little something that might save you a few headaches!

I_Still_Bit 2 #
An Unknown Location | 1 year, 3 months ago (19 hours, 56 minutes after post)

Nope, it’s fine surfing the web.

I_Still_Bit 2 #
An Unknown Location | 1 year, 3 months ago (2 days, 1 hour after post)

The virus isn’t gone, but it doesn’t seem to be doing anything…

The Clue 19 #
Minot, ND, US | 1 year, 3 months ago (2 days, 2 hours after post)

AD-Aware, Spybot seardh and destroy and CClener are Adware and tracker removers and should be used (If you use the Internet often) need to be run at least once every two weeks. Just to keep your pc clean. The others are Virus protection and a good firewall. Hope this helps :-)

Help me with: Heres a little something that might save you a few headaches!

phika 0 #
An Unknown Location | 1 year, 3 months ago (2 days, 4 hours after post)

I think you are in trouble now. EASY~,Let me help you. PLS send the file[C:\WINDOWS\system32\sysrest32.exe] to my email address-> i> small>(email removed) /small> /i>
I will give you a solution about how to cleanup this virus. I almost forgot
: “I am a VirusAnalyser”

phika 0 #
An Unknown Location | 1 year, 3 months ago (2 days, 4 hours after post)

****!!!!

phika 0 #
An Unknown Location | 1 year, 3 months ago (2 days, 4 hours after post)

okay,you could give me a USL to download the virus.

The Clue 19 #
Minot, ND, US | 1 year, 3 months ago (2 days, 4 hours after post)

phika wrote:
I will give you a solution about how to cleanup this virus. I almost forgot: “I am a VirusAnalyser”

That is an easy virus to remove, its been posted out on the net on how to remove it for a while.

Help me with: Heres a little something that might save you a few headaches!

super_ritchiebaby 9 #
Greenock, V4, GB | 1 year, 3 months ago (2 days, 14 hours after post)

Clue is right the Vundo virus is a easy one to get rid of , its not doing anything cos its already running in background. Press CTRL ALT DEL choose task list and you will find (if its vundo) that you have 2-4 iexplore.exe tasks running this is vundo sitting in background waiting to trigger pop ups …. to get rid of it for good use ……the vundo removal tool lol :-) here :-

http://www.symantec.com/business/secu…

though I get more success using this one :-

http://vundofix.atribune.org/

follow instructions and to be sure I do the same checks from safe mode (press f8 when starting xp or vista up )

Help me with: I love helping folk with pc/computer problems and want to start a list of things to ask to get a full picture before I can help any ideas?

Invite Others to Help

A logged in and verified Help.com member has the ability to setup a Friends List and invite others to help with posts.

change help: Need help with a virus! - Help.com

Need help with a virus!

Reciprocity (0)

Post Tags (12)

Replies (24)

Invite Others to Help

Help.com Homepage