Help removing viruses

Nod32 is detecting 6 infected things and i cant seem to get rid of them. I ran Malwarebytes' Anti-Malware and it didn't detect them, but nod won't remove the files so im stuck with them on my pc. here is the log for nod32

C:\Users\****\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\29d9bb55-2912e892 » ZIP » javax/AServers.class - probably a variant of Win32/TrojanDownloader.Agent.DLBCGQR trojan
C:\Users\******\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\29d9bb55-2912e892 » ZIP » javax/Server1.class - probably a variant of Win32/TrojanDownloader.Agent.IHULBCB trojan
C:\Users\******\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\29d9bb55-2912e892 » ZIP » javax/Server2.class - probably a variant of Win32/TrojanDownloader.Agent.HBVQMAU trojan
C:\Users\******\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\27c3f96-115ceada » ZIP » Email.class - probably a variant of Win32/Agent.FXCQQMQ trojan
C:\Users\******\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\27c3f96-115ceada » ZIP » ExecService.class - probably a variant of Win32/Agent.KBEESLR trojan
C:\Users\*****\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\27c3f96-115ceada » ZIP » SendService.class - a variant of Java/Exploit.Agent.W trojan

Can somone please tell me how to remove these or link me to how to get rid of them?

 

Have you tried going to folder options / view / show hidden files, and folders? Then browse to the directory location where they are listed. Also what OS are you using?

 

Hi, thanks for the reply.

Yes i tried that and nothing seems to show up and im running windows 7

 

If i was you i would uninstall java if it will let you, and then delete all traces of java from the user's directory. Then reinstall java, and see if that works. Also you could try running hijack this, and Gmer to make sure you don't have other infections not being detected by NOD 32.

 

Did you enable hidden files? I just navigated to the directory shown above, and I have the same folders as you except the folders that are showing infected on your machine are empty on mine. If you can I would uninstall java, and delete all trace of java from your machine. Including the Program files folder, and then reinstall java.

 

If you are able to uninstall java then I would recommend you install a program called agentRansack. Then use AgentRansack to do a search for all files named sun and Java. Search for each name separately. It will help you find all traces of java on your machine. If you are not sure what is safe to delete then post a screen shot of your search results on this thread so i can help you.

 

If you don't feel like going through the trouble of installing AgentRansack then just do a search with widows search function, and that may suffice. I just like to be really thorough.

 

Well i found some files in them folders and removed them and then uninstalled java and scanned again with nod32 and they seem to be gone. I'm also scanning with gmer, but it hasnt found anything yet.

 

That's good news. If i was you I would delete the entire sun folder from the user directory before reinstalling java if it's still there. There's always a possibility their could be more infections that are not being detected in one of the subfolders. Play it safe, and delete the entire folder before reinstalling java. That is.. if the Sun folder was not deleted by the uninstaller.

 

Yeah, the uninstaller removed the folder and i did a search with agentransack and removed a few files in the temp and reinstalled java and all seems fine. That was the first time ive got a virus that nod has picked up in like a year. Teaches me to click on links from friends.

 

hm, i was scanning my pc with that program you told me to scan it with and my pc crashes into a blue screen and said something like "ran into an error" or something like that. You think i should try to restore my pc to a different date?

 

Here is some good information and you should use one of the online scanners to double check to see if you are truly clean: https://www.wilderssecurity.com/showpost.php?p=1533481&postcount=3

HTH,

TH

 

I know the java cache folder is hidden. I already stated that above. How do you know he or she had the latest version of java installed. Are you assuming he or she did? He or she also stated they could not find the infected files in their cache folder in their initial post. I am not Eset staff so I will not offer anymore assistance on this forum in regards to removing anyone's infection. So I do apologize if i have broken forum rules! If I have i was not aware, and will refrain from further doing so.

 

I've always taken the overkill approach. I just feel safer or more secure in being more thorough. I don't have any experience in removing any infections from my own machines because I've never been infected by anything unless it went undetected. I have removed countless infections from friends machines, and have never been made aware that I caused any harm to their machine. I am not a professional in this field so I will leave it to your staff in any further advice in manually removing malware. I would still like to refer them to other products that I know do an excellent job in detecting, and removing infections like MBAM, Hitman Pro, Prevx, and a few others.