OT - Mirar Virus

download this:
http://www.stevengould.org/index.php?Itemid=69&id=15&option=com_content&task=view

then run it (make sure your actually running it, not just the practice “clean up”)

run this:
http://www.kaspersky.com/virusscanner

download in windows, open and update but dont run yet. a2 free
a2 – removes trojans/worms/dialers
spybot s&d
ad-aware

download the 2 programs in blockquotes, then print off this stuff (or save it to a txt doc on your desktop if your not around a printer)

boot to safe mode

Download ATF Cleaner by Atribune:
http://www.atribune.org/ccount/click.php?id=1
Do not run it just yet.

Download\install ‘SuperAntiSpyware Home Edition Free Version’ from here:
http://www.superantispyware.com/downloadfi…ANTISPYWAREFREE

Launch SuperAntiSpyware and click on ‘Check for updates’.
Once the updates have been installed,exit SuperAntiSpyware.
Do not run it just yet.

Now double-click ATF-Cleaner.exe to run the program.
Click ‘Select All’ found at the bottom of the list.
Click the ‘Empty Selected’ button.

If you use Firefox browser, do this also:
Click Firefox at the top and choose ‘Select All’ from the list.
Click the ‘Empty Selected’ button.
NOTE:
If you would like to keep your saved passwords,please click ‘No’ at the prompt.

If you use Opera browser,do this also:
Click Opera at the top and choose ‘Select All’ from the list.
Click the ‘Empty Selected’ button.
NOTE:
If you would like to keep your saved passwords,please click ‘No’ at the prompt.
Click ‘Exit’ on the Main menu to close the program.

Now Start SuperAntiSpyware.
On the main screen click on ‘Scan your computer’.
Check: ‘Perform Complete Scan’.
Click ‘Next’ to start the scan.

Superantispyware will now scan your computer,when it’s finished it will list all/any infections found.
Make sure everything found has a checkmark next to it,then press ‘Next’.
Click on ‘Finish’ when you’ve done.

It’s possible that the program will ask you to reboot in order to delete some files.

if it asks your to reboot, reboot then go boot back to safe mode

still in safe mode do this:
a2 free – run and scan
spybot s&d – run and scan
ad-aware – run and scan

restart

download/run/update in regular windows:
ie-spyad – A registry file that adds a long list of known malware domains to your restricted sites section of Internet Explorer.

spyware blaster – A program that locks your browser from running known malware or downloading programs from known malware sites.

is your friend.

…there’s an extension that integrates AVG into the browser. I’d recommend getting that after you get your problem straightened out.

once a systems been compromised the best defense is a re-install assuming recent backups were made.
also many cases you have to remove regkeys etc in safemode and even then the damn thing sometimes still comes back.

and the odds of manually getting rid of it on the first pass are slim to none (from personal experience with ppl while workin in IT)

don’t do anything else after the scan. Don’t put a checkmark next to anything, don’t fix anything.

list anything under O2

Most of my infections have been from downloading music…