gotta virus

Meggie · Post by **Meggie** » Thu Feb 19, 2009 7:54 pm

Its a trojan (says google)

msansspc.dll virus

can anyone help me remove it?!

PLEEEEESE

Sava700 · Post by **Sava700** » Thu Feb 19, 2009 8:05 pm

my steps at spyware/malware/virus removal

First is to run through your add/remove programs list and trash anything that looks like junk (just helps to clean the comp up) I remove all toolbars I find as I've seen some of the vundo variants attach to them for some reason. You can always install them again later so don't worry about it.

2nd thing is to TURN OFF System Restore!!!

3rd go to Start,Run, and type in msconfig and uncheck anything that looks funny from the Startup Tab including IM's for the time being as you will want to restart the computer fast and keep the variants from starting as well.

Load CCleaner (no need to install this, its portable!) and select everything to clean! - http://www.majorgeeks.com/CCleaner_Portable_d5735.html
Load/update Avast Home - http://www.avast.com
Load/update superantispyware - http://www.superantispyware.com
Load/update Malwarebytes - MalwareBytes
Load/update spybot Search & Destroy 1.6 - spybot
Download - msautoruns ms Autoruns

Boot into safemode and set Avast for a bootscan upon restart- preselect it to delete anything it finds etc but don't reboot the computer.

Run ccleaner to remove all junk and crap from your temp files etc.. you will still need to set hidden files/folders to show up in the folder options and browse to your Local folder within your user account and select all files in Temp and temp internet files folder and delete EVERYTHING!

Next run superantispyware full scan..if it finds major things mostly whats found in memory it will require reboot..thats fine reboot and then let avast run its scan and boot into windows normally.

Run MalwareBytes and remove whatever it finds.

Next run msautoruns and again check for anything odd usually not showing a publisher or a looks like this "jaleiwa.exe" etc you get the idea. Just right click on them and delete thats it. Close auto runs and then run spybot to finish up that last ditch scan clean up using it.

Run ccleaner once more then reboot and see where you stand after this point. Keep in mind this may take at least 4hours to complete but it should remove everything if you've done it right!

Good Luck!

YARDofSTUF · Post by **YARDofSTUF** » Thu Feb 19, 2009 8:21 pm

Antivir should pick it up.

Do like Sava said, make sure system restore is off.

Run your virus scanner.

Post by **YeOldeStonecat** » Thu Feb 19, 2009 8:22 pm

Buy a bag of some McDonalds...call Alan, he'll drive down and clean it for some chow.

YARDofSTUF · Post by **YARDofSTUF** » Thu Feb 19, 2009 8:27 pm

McDonalds? Good god...

Post by **YeOldeStonecat** » Thu Feb 19, 2009 8:43 pm

YARDofSTUF wrote:McDonalds? Good god...

Fortune Cookie III?

Meggie · Post by **Meggie** » Thu Feb 19, 2009 8:55 pm

i say i have a virus and everyone tells me to run a virus scan?

YARDofSTUF · Post by **YARDofSTUF** » Thu Feb 19, 2009 8:59 pm

Meggie wrote:i say i have a virus and everyone tells me to run a virus scan?

Yes we assumed you had a scanner or could get to one since you ddint tell us otherwise.

Would you prefer the manual instructions on hunting down the files?

Sava700 · Post by **Sava700** » Thu Feb 19, 2009 9:01 pm

Meggie wrote:i say i have a virus and everyone tells me to run a virus scan?

A avast boot scan will not only find them but remove it if you set the settings to do so... I use it daily and hasn't failed me yet..but sounds more like malware than anything.. use the steps I gave you...will take a while but you will be clean afterward.

BMED · Post by **BMED** » Thu Feb 19, 2009 10:14 pm

Meggie wrote:Its a trojan (says google)

msansspc.dll virus

can anyone help me remove it?!

PLEEEEESE

I have used Google Trojans, didn't get a virus...but I do have a two year old daughter!

Sava's fix should work, if not...sue'em!

Humboldt · Post by **Humboldt** » Thu Feb 19, 2009 10:38 pm

Meggie wrote:i say i have a virus and everyone tells me to run a virus scan?

??

I don't understand your confusion Meggie.

blebs · Post by **blebs** » Fri Feb 20, 2009 7:43 am

MSANSSPC.DLL remove instruction

1. Temporarily Disable System Restore, Reboot computer in SafeMode;

2. Locate MSANSSPC.DLL virus files and uninstall MSANSSPC.DLL files program. Follow the screen step-by-step screen instructions to complete uninstallation of MSANSSPC.DLL.

3. Delete/Modify any values added to the registry related with MSANSSPC.DLL,Exit registry editor and restart the computer;

4.Clean/delete all MSANSSPC.DLLinfected file(s):MSANSSPC.DLL and related,or rename MSANSSPC.DLL virus files;

5.Please delete all your IE temp files with MSANSSPC.DLL manually,run a whole scan with antivirus program ;

This program is free and should get rid of it for you:

http://www.prevx.com/filenames/X1427868 ... 2EDLL.html

mountainman · Post by **mountainman** » Fri Feb 20, 2009 8:14 am

Do what sava posted (his standard form letter -- heh heh) and you'll be good. I've used that fix several times and it's worked.

YARDofSTUF · Post by **YARDofSTUF** » Fri Feb 20, 2009 8:17 am

Sava700 wrote:A avast boot scan will not only find them but remove it if you set the settings to do so... I use it daily and hasn't failed me yet..but sounds more like malware than anything.. use the steps I gave you...will take a while but you will be clean afterward.

Just in case you're wondering where shes at.

She had no virus scanner on her newest lappy, and her browser was hijacked so she couldn't get to a site to download a new scanner.

Then she did, she snagged Avira and last known info was that it was scanning.

Its safe to assume she hasn't run any malware cleaners and may not have any installed even.

And yes I do understand, I sometimes want to shoot myself when helping her too.

Sava700 · Post by **Sava700** » Fri Feb 20, 2009 8:24 am

Some trojans such as the "Downloader-CDV" I think thats what its called will trash the Userinit logon app in which your system will go into a logon/logoff loop..its rather unavoidable for some reason since any AV seems to kill the infection but trash the file along with it. The only way to fix it is to take a Userinit logon app from a good computer's Windows/System32 folder and copy it on to the infected (now clean) computer's Windows/System32 folder and all is well. Of course you will have to slave the drive to do this or use something like EDR or a bootable disk to get into the files.

I was rather surprised to see after searching for a solution to this problem a while back that nobody's really posted about it but after a little work (several hours of headaches) I figured it out and that fixed it.

Brk · Post by **Brk** » Fri Feb 20, 2009 9:22 am

After all this time here, and no antivirus or anti-spyware programs installed? We've failed.

Post by **YeOldeStonecat** » Fri Feb 20, 2009 9:31 am

YARDofSTUF wrote:
She had no virus scanner on her newest lappy,

Oh boy. Did her last several PCs getting trashed by a virus learn her yet?

YARDofSTUF · Post by **YARDofSTUF** » Fri Feb 20, 2009 10:54 am

YeOldeStonecat wrote: Oh boy. Did her last several PCs getting trashed by a virus learn her yet?

Actually I think her last one is still working.

knightmare · Post by **knightmare** » Fri Feb 20, 2009 11:08 am

YARDofSTUF wrote:Just in case you're wondering where shes at.

She had no virus scanner on her newest lappy,

someone wanted to know if it was a Japan/Korea laptop, or a U.S./Canada made laptop...

Meggie · Post by **Meggie** » Fri Feb 20, 2009 4:28 pm

knightmare wrote:someone wanted to know if it was a Japan/Korea laptop, or a U.S./Canada made laptop...

hahaha

SeedOfChaos · Post by **SeedOfChaos** » Fri Feb 20, 2009 5:48 pm

JC · Post by JC » Fri Feb 20, 2009 7:07 pm

Burke wrote:After all this time here, and no antivirus or anti-spyware programs installed? We've failed.

Hmm, I have no antivirus or anti-spyware programs.

Dan · Post by **Dan** » Fri Feb 20, 2009 7:32 pm

JC wrote:Hmm, I have no antivirus or anti-spyware programs.

why not ?

that's just silly to not have software installed.

Mark · Post by **Mark** » Fri Feb 20, 2009 7:35 pm

Dan wrote: why not ?

that's just silly to not have software installed.

Macbook pro

Dan · Post by **Dan** » Fri Feb 20, 2009 7:36 pm

Mark wrote:Macbook pro

ah ! one of "those"

JC · Post by JC » Fri Feb 20, 2009 7:53 pm

Dan wrote:ah ! one of "those"

That's right.