Virus sysWOW64

[TotalWarriorWC3]

Ive been searching everywhere for answers i have vista home premium with
windows live care anti virus in perfect condition and it detected
something trying to connect to the internet.
This monster devil thing icon beside it told me right away...trouble
and also the random numbers...By looking in the settings of my anti
virus i found that i blocked 4 of them so far ive scanned with my anti
virus 2 times and 3 times with spybot search and destroy AND ran a
ccleaner.It's still there...
[image: http://img14.imageshack.us/img14/7124/helprqt.jpg]
[image: http://img9.imageshack.us/img9/5223/helpplz.jpg]
I just want to get rid of this once and for all but what in God's name
is it!?
Need help ASAP!


--
TotalWarriorWC3

[Malke]

Well, you definitely are still infected. At this point you need guided help.
Choose one of the specialty forums below, register, and read its posting
FAQ.

PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.net/viewtopic.php?t=4075 - Posting FAQ
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://www.malwarebytes.org/forums/i...hp?showforum=7
http://gladiator-antivirus.com/forum...?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/
http://www.thespykiller.co.uk/index.php?board=3.0
http://forums.subratam.org/index.php?showforum=7

[TotalWarriorWC3]

Many thanks i have not checked them out yet but i found like 8 of
things random number .exe and only 4 have the monster icon should i
delete the files?

[Malke]

It's not going to help. The malware is just going to respawn. Get the guided
help or do a clean install. It's always your choice how much time you want
to spend on this.

[apocalypticgirl]

The best anti-virus software in my opinion is Cyberdefender - I've never
had anything but good luck with them!


--
apocalypticgirl

[rive0108]

To see the posted images and links copy/past this url into address bar:
*http://www.vistax64.com/vista-securi...l#post1041294*


That is so not true. I do not advise using cyberdefender.

*_CYBERDEFENDER_(malware)_*
CyberDefender has a 3% detection rate (this product has never been
entered in any certified comparative lab testing- and in fact has been
marked as *Malware*. Use at your own Risk!!)
'Malware-Test Lab: Antispyware Comparison Report (January 3, 2007)'
(http://malware-test-lab.blogspot.com...january-3.html)

Note on Cyber Defender
'Beware CyberDefender - Tech Support Forum'
(http://www.techsupportforum.com/secu...rdefender.html)
*-Note on CyberDefender:-* We originally listed CyberDefender on this
page out of concerns that the vendor behind the product was the same
company that previously released Spyblocs/eBlocs, an application with a
bad history of aggressive, deceptive advertising and illegal
force-installs. Although we found no major problems in our initial
testing with CyberDefender beyond false positives that were quickly
cleaned up, and while the vendor itself halted the sales of Spyblocs and
vowed not to repeat the same mistakes with CyberDefender, we decided out
of caution to impose a three month probation period before we would
consider re-testing and, if warranted, de-listing the the product from
the Rogue/Suspect list. During that three month probation period we
monitored the behavior of the company. When we encountered a spurt of
advertising for the product through adware, we refused to de-list the
product and imposed a second three month probation period. At the end of
the second three month probation period we re-tested CyberDefender,
again finding no problems serious enough to justify listing the program
on this page. As we have observed no advertising of the product through
adware for many months, and as the program itself exhibits no problems
serious enough to warrant listing on this page, we have decided to
de-list CyberDefender from the Rogue/Suspect list and can no longer
regard the program to be \"rogue/suspect.

*CyberDefender AntiSpyware*'
'
(http://www.2-spyware.com/review-cybe...06.html#)*2006
review*
We DO NOT recommend purchasing and using this program!
'http://www.2-spyware.com/review-cybe...ware-2006.html'
(http://www.2-spyware.com/review-cybe...ware-2006.html)
CyberDefender AntiSpyware 2006 produces false positives. We have tested
this program on uninfected machine that were never exposed to viruses or
any other parasites. However, the tested Spyware remover managed to
detect 30 spyware items (using the Full Scan mode) and 16 spyware items
during the Quick Scan. In the first case malicious object were related
to 8 different parasites, while in the latter case items were associated
with only 4 pests.

Further analysis revealed that none of detected items are actually
related to any kind of Malware. Furthermore, some found parasites
actually are not even parasites at all. For instance, neither C-Dilla
software protection tool or Engima SpyHunter Antspyware are real
threats. In our case C-Dilla was installed and used by Autodesk Inventor
6, professional drawing and graphics software. Removing C-Dilla would
corrupt this program. Other "malicious" objects that CyberDefender
AntiSpyware 2006 found were actually related to the following programs:
the WinRAR archiver (the rar.exe file, identified as Perfect Keylogger),
Creative sound card drivers (stprov.ini, identified as FreshBar), K-Lite
Codecs Pack (lame.exe, identified as HideExec), simple self-made
C++/OpenGL application (6.exe, identified as shopathomeselect), Adobe
Photoshop CS (several registry keys describing the .sta file extension,
identified as istbar). See screenshots provided below.

The Full Scan mode is too slow. Several regular modern Computers were
fully checked in a little more than one hour. An effecive anti-spyware
program should scan the system much faster. Quick Scan is also not too
quick. It usually takes about 5 minutes to complete.

CyberDefender AntiSpyware 2006 is made by the same company, as
SpyBlocs, which is a corrupt spyware remover producing false positives.
Both programs have very similar interfaces, although the vendor claims
to have implemented new technologies in CyberDefender AntiSpyware 2006.

Domains associated with the product are cyberdefender.com and
cyber-defender.com.

[rive0108]

To see the posted images and links copy/past this url into address bar:
*http://www.vistax64.com/vista-securi...l#post1041294*



The best Antivirus on the market (by certified lab testing is Eset
NOD32). This is what I recommend:

Run Malwarebytes [this is a specialty antimalware that is specifically
targeted at polymorphic malware (trojans)].

Download and update, then run full scan with NOD32 4
Antivirus/Antispware. I would also create an inspection log with
SysInspector as this will give you a specifc color coded diagnostic
(green good/red bad) for all the files on your system. Version 4 of
NOD32 also has self defense to prevent any malware from corrupting it.
Its a free 30 day trial, so download it, clean your system, then remove
if you want.

Last do a full scan with Windows Defender.

NOD32: 'Best Free Antivirus: ESET! Try free antivirus programs for 30
days.' (http://www.eset.com/download/free_trial_download.php)
Standalone diagnostic: 'ESET SysInspector'
(http://www.eset.com/download/sysinspector.php)
Malwarebytes: 'Malwarebytes.org' (http://www.malwarebytes.org/)

Free Antivirus (2 and 3 star certification)
'Avira Antivir' (http://www.free-av.com/)
'Avast!' (http://www.avast.com/eng/download-avast-home.html)



[image:
http://www.vistax64.com/attachments/...-capture7.gif]

[image:
http://www.vistax64.com/attachments/...-capture5.gif]