A Virus that my computer has.

Well ever since my uncle went on the comptuer he did somethin and its been messing up. Going slow all the things that come after a virus. It kept saying somehtin about a malware virus or something so i deleted that and a couple other things but now this keeps coming up when i go on internet explorer.
W32.myzor.Fk@yF is a virus that infects files with .exe extensions. It attempts to steal passwords and private info from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems affected: All windows
Technical Details:

  1. Creates files in %Windir%
    directory. By default, this is C:\Windows.
  2. Adds values to registry keys:
    HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    3.Scans the hard drive for .exe files and infects any executable files.
    Searches for passwords/info, which it may send to a remote attacker.
    Recomendations: Click ok to download officially approved security software.
    Can someone help me out please. Thanks

Format. Now.

sounds like he visited some not-so-nice websites…formatting is the best way to go.

If you know what your doing you could remove this with Hijackthis/safemode and some other tricks…

Heres one websites way of removing it (remember there are numerous ways out there, this is one and looks very simple, but I’m not much of a fan of spysweeper)

MANUAL REMOVAL:

  1. Disable System Restore (Windows Me/XP). [how to]

  2. Download Webroot SpySweeper and save it to a desired location.

Note: This is a trial working version. It can clean infections for a given period only. You can also use Free Ewido Anti-Spyware which is a Freeware for home users.)

  1. After downloading, browse where the file was saved and double click to install it.

  2. After installation, connect to internet and download all necessary updates.

  3. Download SmitfraudFix (by S!Ri) and save it to a desired location. This will be in ZIP File.

  4. Extract all the files to your Desktop, it will create a folder SmitfraudFix

Note: When extracting or executing, some files might be detected as Potential Threat or Harmful Script. Please disable AntiVirus or Any Script Blocking Software temporarily. It may harm or make the Fix incomplete.

  1. Reboot your computer in SafeMode [how to]

  2. Run Spysweeper and do a thorough scan. Delete all infected files.

  3. Close SpySweeper and other open Applications.

  4. Browse the folder SmitfraudFix on your Desktop and double-click on smitfraudfix.cmd

  5. “Enter your Choice: (1,2,3,4,L,Q):” Press no. 2 on your keyboard to select Option 2

  6. Wait for the process to finish.

  7. If prompted for: Registry cleaning - Do you want to clean the registry? Press Y, as Yes

  8. It will check if your wininet.dll file is damaged, if so it will ask you to Replace Infected File? Press Y as Yes and hit Enter

  9. If it prompts you to Reboot your computer, Please do so.

  10. Reboot your computer in SafeMode with Networking [how to]

  11. After successful boot in SafeMode with Networking, connect to internet.

  12. In order to make sure that W32.Myzor.Fk is completely eliminated from your computer, carry out a full scan of your computer using Online Virus Scanner. Scan at least on three different scanners.

Removal of stuff for the most part is easy, by the time you get the virus theres already removal programs out there that will snag it easily. It’s just when you start getting a bunch of them that it becomes a pita and just easier to format. Either way… good luck shouldn’t be hard.

Note: W32.Myzor.FK@YF is a fake infection that might be used as a lure to install rogue applications like MalwareWipe.

Install AVG Free and run it. That free program catches more shit for me than Symantic or McFee ever have.

I have IT Help Desk software so if you want, I can remote into it and take a look while you are at the computer.

[quote=“boxxa,post:7,topic:29802"”]

Install AVG Free and run it. That free program catches more shit for me than Symantic or McFee ever have.

I have IT Help Desk software so if you want, I can remote into it and take a look while you are at the computer.

[/quote]

For some reason that sucks. It never finds anything. I used ad-aware and it found everything except this virus.