Vista - Infection Resolving Team

**mitchell** · 06-11-2009

Sorry, i have doubled up on my reply and i cant seem to delete one can someone please edit and remove this one. Thank You.

**mitchell** · 06-11-2009

Quote: Originally Posted by ultrin

Quote: Originally Posted by Neverhavemoney

Ultrain,
We have tried to help you here. I, along with some other members, have given you good advice. The last resost will be a complete reinstall. Do you know if you are willing to do this yet?
We can also help here if you need it.

Ben

Ok guys ive been working on this problem for quite some time now and after all of this time im 95% certain ive discovered the source of my problems.
To locate the issue i have reinstalled windows about 5 times each time replacing the same programs i had on my computer until i could duplicate the problem.
Well after all of that i narrowed the problem down to a game that i play.
Warcraft III... there has been a recent exploit in the custom map games that allows malicous code to be transfered to your computer. As far as i know there isnt a fix for this problem. I saw a post on a website that said Comodo can actually block it but i have no personal experience with it. The recent exploit in the came came as a huge surprise I never would have thought it could have been the problem. I appreciate everyone's help and apologize for getting to frustrated and offending anyone.... even if i did sensor myself. I sent an email to Blizzard asking them for input on the situation. So for future refrence if anyone else and i suspect there will be some more just like i was.. come asking for help about the windows mail box popping up. Ask them if they have Warcraft III or any other Blizzard game that uses custom maps (user created games).
Thanks again...
-Ultrin-

Hi Ultrin, thank you for posting your result (valuable to me and i am sure others for future reference.) I have often wondered if you had got it sorted, i was convinced it was a file corruption. Well all the best i will let you get back to your new found happy, positive relationship with your PC

**Fastboy42** · 07-07-2009

Hello,
I would like to be part of the team,
I use Norton 360 v3 and Nod32 4.
I'm pretty good at removing viruses.
People around our community who don't want to pay for some computer guy to fix their computer for $200 come to me and I fix it for them.

gbhutchinson · 07-07-2009

I have been plagued with Chinese marketing bots that are attempting to hijack my hotmail contact list to email their messages to my contacts. The result is a flood in my inbox with Delivery Status Failure messages. They were previously using the automated vacation message option. I have increased the security to the highest level and they are not able to access my contact list at this time.

Two days ago I received a phone call by people hinting that they worked for Microsoft and that they had received notice of applications failure from a log within my computer. They informed me that they could repair the problem. I politely sent them to the devil.

Help!

**Fastboy42** · 07-07-2009

Quote: Originally Posted by gbhutchinson

I have been plagued with Chinese marketing bots that are attempting to hijack my hotmail contact list to email their messages to my contacts. The result is a flood in my inbox with Delivery Status Failure messages. They were previously using the automated vacation message option. I have increased the security to the highest level and they are not able to access my contact list at this time.

Two days ago I received a phone call by people hinting that they worked for Microsoft and that they had received notice of applications failure from a log within my computer. They informed me that they could repair the problem. I politely sent them to the devil.

Help!

That doesn't sound to good.
I would probably block,report them.
I would also consider making another hotmail account

gbhutchinson · 07-07-2009

To whom do I report them?

**LadyL** · 08-06-2009

well I have one of those email stating that I have x number of virus, and it took me a few minutes to find out it was fake, when I clicked on info button and they wanted money for a virus program, so now I can't go on line , but I did find a post from neverhavemoney about malwarebytes, and what to do, I guest I should tell you that my unit is vista home premium 32, down loaded malware, saved on desktop, changed to safe mode ran malware, but before it finished this note came up" Internal error:Failed to expand shell folder constant userappdata" so what is the next step besides restoreing which I just did 10 days ago. Iam on my laptop, please please help

**SIW2** · 08-06-2009

Did you try installing and running Malwarebytes not in Safe Mode?

Otherwise you could d/l a bootable antimalware program like DR Web - burn it to a cd with an isoburner ( don't format the cd ) .

Burn CDCC.zip

Boot the Dr Web cd and let it scan your machine.

Info :
http://www.freedrweb.com/livecd/

Download:
ftp://ftp.drweb.com/pub/drweb/livecd/

Obviously, you need to use another machine to download and burn the cd.

**LadyL** · 08-06-2009

no, but will and let you know how it turns out , thank you

**LadyL** · 08-07-2009

with the malware got the same message as I did in the safe mode, running the program DrWebb, so far have found two trojan one is Trojan.PWS.GoldSpy.origin, will the program delete them or do I have, another thing that had came up on my desktop before I disconnected from the internet, after I have received the other messages about the visus, was Windows System Suite and it looks like the firewall image, but didn't want to trust until I could get rid of this virus, hope Drwebb does a good job. thank you again will let you know

06-11-2009	#211 (permalink)
mitchell Windows Seven Home Premium 132 posts	Re: Infection Resolving Team Sorry, i have doubled up on my reply and i cant seem to delete one can someone please edit and remove this one. Thank You. Last edited by mitchell; 06-11-2009 at 02:12 PM..
My System Specs

06-11-2009	#212 (permalink)
mitchell Windows Seven Home Premium 132 posts	Re: Infection Resolving Team Quote: Originally Posted by ultrin Quote: Originally Posted by Neverhavemoney Ultrain, We have tried to help you here. I, along with some other members, have given you good advice. The last resost will be a complete reinstall. Do you know if you are willing to do this yet? We can also help here if you need it. Ben Ok guys ive been working on this problem for quite some time now and after all of this time im 95% certain ive discovered the source of my problems. To locate the issue i have reinstalled windows about 5 times each time replacing the same programs i had on my computer until i could duplicate the problem. Well after all of that i narrowed the problem down to a game that i play. Warcraft III... there has been a recent exploit in the custom map games that allows malicous code to be transfered to your computer. As far as i know there isnt a fix for this problem. I saw a post on a website that said Comodo can actually block it but i have no personal experience with it. The recent exploit in the came came as a huge surprise I never would have thought it could have been the problem. I appreciate everyone's help and apologize for getting to frustrated and offending anyone.... even if i did sensor myself. I sent an email to Blizzard asking them for input on the situation. So for future refrence if anyone else and i suspect there will be some more just like i was.. come asking for help about the windows mail box popping up. Ask them if they have Warcraft III or any other Blizzard game that uses custom maps (user created games). Thanks again... -Ultrin- Hi Ultrin, thank you for posting your result (valuable to me and i am sure others for future reference.) I have often wondered if you had got it sorted, i was convinced it was a file corruption. Well all the best i will let you get back to your new found happy, positive relationship with your PC
My System Specs

07-07-2009	#213 (permalink)
Fastboy42 Windows 7 Ultimate 575 posts	Re: Infection Resolving Team Hello, I would like to be part of the team, I use Norton 360 v3 and Nod32 4. I'm pretty good at removing viruses. People around our community who don't want to pay for some computer guy to fix their computer for $200 come to me and I fix it for them.
My System Specs

07-07-2009	#214 (permalink)
gbhutchinson vista home premium 32 bit 2 posts	Re: Infection Resolving Team I have been plagued with Chinese marketing bots that are attempting to hijack my hotmail contact list to email their messages to my contacts. The result is a flood in my inbox with Delivery Status Failure messages. They were previously using the automated vacation message option. I have increased the security to the highest level and they are not able to access my contact list at this time. Two days ago I received a phone call by people hinting that they worked for Microsoft and that they had received notice of applications failure from a log within my computer. They informed me that they could repair the problem. I politely sent them to the devil. Help!
My System Specs

07-07-2009	#215 (permalink)
Fastboy42 Windows 7 Ultimate 575 posts	Re: Infection Resolving Team Quote: Originally Posted by gbhutchinson I have been plagued with Chinese marketing bots that are attempting to hijack my hotmail contact list to email their messages to my contacts. The result is a flood in my inbox with Delivery Status Failure messages. They were previously using the automated vacation message option. I have increased the security to the highest level and they are not able to access my contact list at this time. Two days ago I received a phone call by people hinting that they worked for Microsoft and that they had received notice of applications failure from a log within my computer. They informed me that they could repair the problem. I politely sent them to the devil. Help! That doesn't sound to good. I would probably block,report them. I would also consider making another hotmail account
My System Specs

07-07-2009	#216 (permalink)
gbhutchinson vista home premium 32 bit 2 posts	Re: Infection Resolving Team To whom do I report them?
My System Specs

08-06-2009	#217 (permalink)
LadyL Vista Home Premium 32bit 12 posts	Re: Infection Resolving Team well I have one of those email stating that I have x number of virus, and it took me a few minutes to find out it was fake, when I clicked on info button and they wanted money for a virus program, so now I can't go on line , but I did find a post from neverhavemoney about malwarebytes, and what to do, I guest I should tell you that my unit is vista home premium 32, down loaded malware, saved on desktop, changed to safe mode ran malware, but before it finished this note came up" Internal error:Failed to expand shell folder constant userappdata" so what is the next step besides restoreing which I just did 10 days ago. Iam on my laptop, please please help
My System Specs

08-06-2009	#218 (permalink)
SIW2 VISTA HOME PREMIUM X64/ 7 x64 / 7x86 2,303 posts	Re: Infection Resolving Team Did you try installing and running Malwarebytes not in Safe Mode? Otherwise you could d/l a bootable antimalware program like DR Web - burn it to a cd with an isoburner ( don't format the cd ) . Burn CDCC.zip Boot the Dr Web cd and let it scan your machine. Info : http://www.freedrweb.com/livecd/ Download: ftp://ftp.drweb.com/pub/drweb/livecd/ Obviously, you need to use another machine to download and burn the cd.
My System Specs

08-06-2009	#219 (permalink)
LadyL Vista Home Premium 32bit 12 posts	Re: Infection Resolving Team no, but will and let you know how it turns out , thank you
My System Specs

08-07-2009	#220 (permalink)
LadyL Vista Home Premium 32bit 12 posts	Re: Infection Resolving Team with the malware got the same message as I did in the safe mode, running the program DrWebb, so far have found two trojan one is Trojan.PWS.GoldSpy.origin, will the program delete them or do I have, another thing that had came up on my desktop before I disconnected from the internet, after I have received the other messages about the visus, was Windows System Suite and it looks like the firewall image, but didn't want to trust until I could get rid of this virus, hope Drwebb does a good job. thank you again will let you know
My System Specs

Similar Threads
Thread	Forum
Re: Cannot Uninstall Visual Studio 2005 Team Suite & Team Explorer	.NET General
Problem with IP resolving	Vista security
Resolving a pointer in quickwatch?	.NET General
IE7 not resolving after SP1 install	Vista security