Please help. Is this a new virus?

Soldato
Joined
30 Jul 2004
Posts
10,564
Location
East Sussex, United Kingdom
Howzit Guys,

I'm at work at the moment and one of our machine has a strange virus type thing on it. I really am struggeling to remove it. Not too sure what it's called so I can't find a removel tool for it. Also it stops your internet connection on Internet Explorer. So I had to load Fire Fox on there and use that. I'm not on the machine now. But since it's our main machine here, it needs to be done urgent. This is the screen shot I took. Might help...?


http://i41.photobucket.com/albums/e282/RobBob3/untitled.jpg

I've tried AVG, Ad Aware, Spybot. And still no joy. It's really messing the system up. And that pop up comes up every five seconds! :mad:

Any help?
I know my Dad had this virus on his pc at work and he got tools to remove it. I know you're not meant to click on the pop up as its a trick to download another virus. How do I remove this? please help it's urgent!

Many thanks!

Robert.
 
Is it an Active Desktop wallpaper? Try turning that off for a start, then see what's booting with Windows (msconfig) and turn of unusual/suspicious items. Try Avast or the NOD32 trial and Windows Defender to remove or at least identify what it is too.
 
Start> Control Panel> Adminstrative tools > Services


There is a thing called "Messenger" and the description is

Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start.

Which allows adverts to be sent to you via windows or something. I disable this. Not sure if it is this but worth a shot
 
Noto said:
Start> Control Panel> Adminstrative tools > Services


There is a thing called "Messenger" and the description is



Which allows adverts to be sent to you via windows or something. I disable this. Not sure if it is this but worth a shot

What? It's got nothing to do with that?

Looks like it's putting an icon in the system tray, so it might be an application that's running. I'd close all programs, fire up the task manager, and then start to kill the tasks that are run under your username individually until that icon goes away. Once you've done that, you know what process is causing it to do that.
 
Thanks a lot for the help guys. I appericate it!

I tried what growse told me to try. And it worked. It's now gone. However I forgot the name it was that removed it. So I now have to resrtart and do it again. But as long as it just get it off this system I don't care.

Thanks guys! :)
 
If you have already tried anti virus and spyware and this is still happening then there is a chance the virus is hiding in your system restore. Windows wont allow access so you will have to close down system restore carry out anti virus and spyware, then switch system restore back on.

You could also try an online free scan, I like kaspersky myself, just google for kaspersky free scan.

good luck.
 
Thanks will try now. having a real problem with it. I think I found the two processes that belong to it.
Osaupd.exe
wupdmgr.exe

But every time I remove it from the list it comes back. I went into safe mode and removed the Osaupd.exe and when I came back to the normal XP it came back,.
 
my dad got something similer to this, it puts an icon on the tray their and keeps popping up, you click it and it takes you to a spyware removal site :(

its quite anoying
 
Howzit Bru,

I booted the PC up in safe mode. (Press F8 a couple of times before the Windows boot screen appears then select Safe Mode). Then I manualy removed wupdmgr.exe and Osaupd.exe from the C: Windows folder. Rebooted and it was gone. Make sure System restore is turned off. I hasn't come back since. :)

Thanks for the tool pal.! :)
 
Back
Top Bottom