virus on my computer!!!

[craig r]

i don't know if any of you can help me with this. i ran my virus program because my computer was acting strange. it said i have "js.csspopup.h trojan." even after the files are deleted, when i restart my computer the virus comesback. i am also having trouble running any of my spyware. i don't know if any of you could help me with this, but it would be much appreciated.

thanks,

Craig

p.s. the virus program is "e-z antivirus" it is by computer associates

[MMMMMM]

I am not expert on this, but there is something you may have to do, once you find the proper instructions. There is a way to restart your computer without it booting up everything that it normally does. For windows XP it involves using Run from the Start Menu, then entering msconfig in the box. Then you get a bunch of options for startup and on one tab there is also an option called Safe Mode. The trick is to know which options to select so the virus won't be booted up along with your operating system when you restart. Then you scan and delete the virus. Then you reset your machine to reboot the way it normally does. Maybe, too, you could run anti-spyware in this special mode as well.

Someone with more expertise could be more specific. Also you might find such instructions if you explore the Symantec or McAfee websites.

[TimTimSalabim]

I just did a quick Google check and came up with this, don't know if it will help but it seems to have some info:

http://www3.ca.com/threatinfo/virusinfo/virus.aspx?ID=28193

[craig r]

the virus scan will erase the virus, but once i restart another file is back with the same virus. the virus always goes to "system32." and i don't know if it helps, but i am running winxp pro.

thanks

[craig r]

two new viruses just popped up:

win32.agobot
win32.Omal

i don't know if this will help anybody else help me /images/graemlins/smile.gif.

[MMMMMM]

I think what is happening is the virus isn't being erased entirely and it won't be until you are able to remove it by scanning and removing while in a mode that prevents it from having been loaded at startup. Smart viruses;-) This happened to a friend's computer and he couldn't get rid of the virus until he took these steps--before that it kept reappearing, as yours does.

[craig r]

thanks mmmmmm, i took your advice and started windows in safe mode. i scanned for viruses and none were found. i then restarted in regular mode, and the viruses came back. are there viruses that the virus software can't find?

craig

[MMMMMM]

Thing is, it isn't just starting in Safe Mode that matters...there are other options on another tab you have to adjust, IF I recall correctly (it was like 6 months ago and I'm no expert).

I'd suggest researching it on Symantec site or maybe MCAfee...or waiting until someone more knowledgeable than I picks up on this thread. There are viruses that can hide all kinds of places, and some are set to restore themselves on startup--that's why knowing what to allow to boot and what not to allow to boot can matter. I don't know about the product you mentioned, or the company, but have you researched their site for anything to do with this problem? They might have specific instructions to help.

[adios]

Did you have a firewall? Because if you did I DON'T WANT THE ONE YOU USED. Hope Dynasty's reading this, Windows has security problems. I use Windows but definitely thinking of abandoning it. Personally I'd take it somewhere if you know of a good vendor.

[MMMMMM]

I've thought of switching too, but don't know which the most secure alternate system would be, nor would I know how to use it. That said, I wouldn't mind learning the basics if not too terribly time consuming to do so (assuming one can play poker and surf and run common applications on those other systems without too much hassle;-)).

Any recommendations for best alternate OS, anyone?

[craig r]

thank you guys for all your help. if anybody every gets the js.csspopup virus let me know and i can now help them with it.

craig

[Wake up CALL]

[ QUOTE ]

Did you have a firewall?

[/ QUOTE ]

Most of the virus's you will be infected with will not be stopped by a firewall. Normally you open an infected e-mail attachment which has been "spoofed" to appear as if or may even really be from one of your address book contacts.

[pretender2k]

I always go to www.symantec.com. (http://www.symantec.com.) They are the makers of norton antivirus, which if I may say, I think is worth every penny. Even if you do not have norton antivirus, you can go to their website and search it and get great info on what it does, how you get it, and how to get rid of it.

[ACPlayer]

Almost though not quite correct.

The porn sites leave ActiveX/VB/javascript programs that can cause malicious behaviours (like pop-up new windows) and have been known to muck around with very lowlevel code that is used during the bootup process, like registry entries. This is not usually a problem if you use Netscape or Opera (both are superior programs but not part of MS offerings).

Without a good firewall, your always on the net computer (cable modem or dsl) is subject to trojan programs. Hackers often use poorly protected computers to launch their denial of service attacks for example.

A very good anti-virus program (symantec, mcafee are the two best ones) with a update subscription and a properly configured firewall (the Symantec package is a good choice) should be mandatory for anyone with a permanent connection to the internet -- otherwise you may unwittingly assist a cyber terrorist. A firewall is not as critical if you are still using dial-up.

[jodd]

I am not sure of this, but if the virus keep on coming back, it might be that you have to disable the system restore function of windows. When system restore is enabled it will keep some data from bein altered, even by the virus scanner.

To un-enable right-click your computer, select properties and select system restore.

When you do this you cannot restore computer to a earlier state though...

[adios]

Right I thought of that after I posted. I never use Outlook, Outlook Express, or any other program like that to read my email.

[TylerD]

Do you think the Firewall that comes with Windows XP is sufficient for broadband, if not what would you recommend?

[paland]

No, Windows firewall isn't very efficient. Symantec has a decent one. And if you want a free one, try Zone Lab's, "Zone Alarm". They have a pay one too but I haven't tried it. I know there are a couple of other good ones out there but their names escape me right now.

[ACPlayer]

No, windows XP firewall is not enough.

Get Zone Alarm Pro or a firewall from Symantec. I use Zone Alarm Pro (it has a good popup blocker built in).