Results 1 to 14 of 14
  1. #1
    Plazan Merchant Neil's Avatar
    Join Date
    February 25th, 2005
    Location
    cyprus
    Posts
    1,764
    I need help with a virus.. please.
    why do these wankers do this .

    can anyone tell me how to get this of my pc.
    it keeps re-starting itself , then tries to attach to emails
    that i send out.
    it is starting to piss me right off..
    any help would be great.

    its called W32/Busan-C
    Find us at shareasale.com 12% commission
    Shareasale Merchant 7191
    PLAZAN SKIN CARE As seen on TV . Used by Jennifer Lopez

  2. #2
    Internet Cowboy
    Join Date
    January 18th, 2005
    Posts
    4,662
    See this link. http://www.sophos.com/virusinfo/analyses/w32busanc.html
    If you have anti-spyware software you might want to reboot in safe mode and run it first from safe mode.


  3. #3
    Plazan Merchant Neil's Avatar
    Join Date
    February 25th, 2005
    Location
    cyprus
    Posts
    1,764
    hello mate.

    yes i have been there, it says.

    Typically an unaltered registry entry will be set to

    HKCR\exefile\shell\open\command\(default) = "%1" %*

    the altered registry entry will be

    HKCR\exefile\shell\open\command\(default) = <path to worm> "%1" %*

    my registry looks like this.

    (default) REG_SZ "%1" %*


    i cant figure it out ?
    Find us at shareasale.com 12% commission
    Shareasale Merchant 7191
    PLAZAN SKIN CARE As seen on TV . Used by Jennifer Lopez

  4. #4
    Plazan Merchant Neil's Avatar
    Join Date
    February 25th, 2005
    Location
    cyprus
    Posts
    1,764
    I am still stuck ..
    is anyone got any ideas ?
    Find us at shareasale.com 12% commission
    Shareasale Merchant 7191
    PLAZAN SKIN CARE As seen on TV . Used by Jennifer Lopez

  5. #5
    Moderator BurgerBoy's Avatar
    Join Date
    January 18th, 2005
    Location
    jacked by sylon www.sylonddos.weebly.com
    Posts
    9,618
    Talking
    Neil

    Go to http://www.lavasoft.com/

    On the left side of the page under products click on Ad-Aware Personal.

    It is a free download and it has found and gotten rid of items on my computer that Microsoft Anti syp and ad ware has missed.

    Maybe it will fix your problem.

    It won't hurt to try it and see.

    It is a good program.

    Vietnam Veteran 1966-1970 USASA
    ABW Forum Rules - Advertise At ABW

  6. #6
    Plazan Merchant Neil's Avatar
    Join Date
    February 25th, 2005
    Location
    cyprus
    Posts
    1,764
    thanks BurgerBoy .
    but already have that ,
    and it finds the virus no problem.
    its when i re-start the pc it just comes back again.
    and the my documents page loads on start-up.

    it must be set to re-load itself on start-up . ???/

    bloody frustrating
    Find us at shareasale.com 12% commission
    Shareasale Merchant 7191
    PLAZAN SKIN CARE As seen on TV . Used by Jennifer Lopez

  7. #7
    Moderator BurgerBoy's Avatar
    Join Date
    January 18th, 2005
    Location
    jacked by sylon www.sylonddos.weebly.com
    Posts
    9,618
    Talking
    norton has a set of virus removal tools.

    Have you tried them yet ???

    http://norton.com/avcenter/global/tools.list.html

    Vietnam Veteran 1966-1970 USASA
    ABW Forum Rules - Advertise At ABW

  8. #8
    Internet Cowboy
    Join Date
    January 18th, 2005
    Posts
    4,662
    Neil,
    Boot your computer up in safe mode and run the removal tool while the computer is in safe mode. That should eliminate it.

  9. #9
    Lite On The Do, Heavy On The Nuts Donuts's Avatar
    Join Date
    January 18th, 2005
    Location
    Winter Park, FL
    Posts
    6,930
    Once you've recovered (or now if you have a second PC), go change all your passwords.

  10. #10
    Outsourced Program Manager Jorge - SHOPiMAR's Avatar
    Join Date
    January 18th, 2005
    Location
    Florida
    Posts
    3,550
    Neil,

    More info for you

    http://www.trendmicro.com.au/smb/vin...t=WORM_BUSAN.C

    you can also try free houscall virus scanner http://housecall.trendmicro.com been using it for years, with latest patch always available with the online scan

  11. #11
    Affiliate Network Rep Amanda_A's Avatar
    Join Date
    October 20th, 2005
    Location
    Montreal
    Posts
    43
    Neil, another excellent tool is HijackThis: http://www.spywareinfo.com/~merijn/downloads.html (scroll halfway down the page)

    You run the tool, and then post your resulting log (list of possibly suspicious registry entries) on a spyware forum, such as http://www.tomcoyote.org/. People there will be able to help you out and tell you what you need to manually delete from your registry. Just make sure you back it up first.

    HijackThis has helped me when nothing else could. Good luck!
    [LEFT][FONT=Verdana]Amanda
    Affiliate Manager
    Share Results Affiliate Network

    [URL=http://www.shareresults.com/ai_affiliatesignup1.php]Join the Share Results Affiliate Network today![/URL]

    e-mail: [EMAIL=amanda@shareresults.com]amanda@shareresults.com[/EMAIL]
    [URL=http://www.shareresults.com]www.shareresults.com[/URL]

    [I]"Ginger Rogers did everything Fred Astaire did, only she did it backwards and in
    high heels." [/I] ;)

    [/FONT][/LEFT]

  12. #12
    Plazan Merchant Neil's Avatar
    Join Date
    February 25th, 2005
    Location
    cyprus
    Posts
    1,764
    ok i will try some of these.
    i use avast at the moment , and it keeps finding it and deletes it
    everytime that it tries to start-up .
    but i need to get this of my system.
    Find us at shareasale.com 12% commission
    Shareasale Merchant 7191
    PLAZAN SKIN CARE As seen on TV . Used by Jennifer Lopez

  13. #13
    2005 Linkshare Golden Link Award Winner  ecomcity's Avatar
    Join Date
    January 18th, 2005
    Location
    St Clair Shores MI.
    Posts
    17,328
    Turn off system restore if you have XP. Then go to the safe mode or the commission hijacking buggers just come right back upon a normal boot.
    Webmaster's... Mike and Charlie

    "What have you done today to put real value into a referral click...from a shoppers viewpoint!"

  14. #14
    Plazan Merchant Neil's Avatar
    Join Date
    February 25th, 2005
    Location
    cyprus
    Posts
    1,764
    Quote Originally Posted by ecomcity
    Turn off system restore if you have XP. Then go to the safe mode or the commission hijacking buggers just come right back upon a normal boot.
    yes the bloody thing is !!
    i am at one of the virus forums at the moment
    they are talking me through a system clean ..
    will keep you posted

    thanks ecom
    Find us at shareasale.com 12% commission
    Shareasale Merchant 7191
    PLAZAN SKIN CARE As seen on TV . Used by Jennifer Lopez

  15. Newsletter Signup

+ Reply to Thread

Similar Threads

  1. Need virus help
    By Rhea in forum Virtual Family and Off-Topic
    Replies: 22
    Last Post: March 15th, 2005, 07:00 AM
  2. Virus?
    By Cheesehead in forum Virtual Family and Off-Topic
    Replies: 11
    Last Post: February 10th, 2004, 09:13 PM
  3. Virus
    By dete99 in forum Virtual Family and Off-Topic
    Replies: 6
    Last Post: November 10th, 2002, 08:15 PM
  4. New Virus?
    By Packy in forum Midnight Cafe'
    Replies: 11
    Last Post: January 28th, 2002, 10:02 PM
  5. Another NEW virus
    By Monstrphil in forum Midnight Cafe'
    Replies: 8
    Last Post: December 11th, 2001, 07:33 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •