HELP! My PC is infected with sysupd32

Discussion in 'ESET NOD32 Antivirus' started by bLupyr0, Nov 14, 2009.

Thread Status:
Not open for further replies.
  1. bLupyr0

    bLupyr0 Registered Member

    Joined:
    Nov 14, 2009
    Posts:
    4
    and also ~TM5705
    I tried cleaning it up w/ my ESET, can't clean it.
    TuneUp Utilities - can't fix it
    Ad-Aware - didn't remove it.

    PLEASE help me.
    can someone please tell me what to do
     
  2. deanmartin

    deanmartin Registered Member

    Joined:
    Sep 6, 2007
    Posts:
    231
    Location:
    USA/KY
  3. Nerimash

    Nerimash Registered Member

    Joined:
    Apr 14, 2009
    Posts:
    86
    Location:
    Ukraine
    Download MBAM from http://www.malwarebytes.org/ . Update databases and run full system scan. Also if you could, please place information from mbam log here.
     
  4. JRViejo

    JRViejo Global Moderator

    Joined:
    Jul 9, 2008
    Posts:
    20,916
    Location:
    U.S.A.
    Nerimash, FYI, as per this Policy, should bLupyr0 post a MBAM log, this thread would certainly close.

    @bLupyr0,
    Perhaps you should also review this Wilders thread: If you are currently infected and seek help in any of the sites listed there, just in case MBAM can not help you.

    JR
     
  5. bLupyr0

    bLupyr0 Registered Member

    Joined:
    Nov 14, 2009
    Posts:
    4
    ok, thank you all!
    I've been awake for almost 24hrs now just to remove this virus.
    and thank you for the reminder.
     
  6. bLupyr0

    bLupyr0 Registered Member

    Joined:
    Nov 14, 2009
    Posts:
    4
    It removed the two virus but it didn't removed this:
    rundll32 C:\PROGRA~1\MYWEBS~1\bar\3.bin\M3PLUGIN.DLL,UPF

    its still in the start up program, but I can't look it up but I disabled it in start up.

    What should I do with this?
     
  7. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,011
    Location:
    Ontario, Canada
  8. bLupyr0

    bLupyr0 Registered Member

    Joined:
    Nov 14, 2009
    Posts:
    4
    It keeps on coming back! I deleted it already with MBAM yesterday, and now its back! wooooo!
     
  9. JRViejo

    JRViejo Global Moderator

    Joined:
    Jul 9, 2008
    Posts:
    20,916
    Location:
    U.S.A.
    bLupyr0, sounds like you need focused, dedicated help to eradicate the malware inside your PC, assistance that is beyond what Wilders can provide.

    Now, more than ever, you must review If you are currently infected and seek immediate assistance in any of the sites listed there.
     
  10. HKEY1952

    HKEY1952 Registered Member

    Joined:
    Jul 22, 2009
    Posts:
    648
    Location:
    HKEY/SECURITY/ (value not set)
    I agree with JRViejo.....

    As one last 'Wilders Attempt' you can try the "Avira AntiVir Rescue System CD"

    The Avira AntiVir Rescue System CD is an Virus Scanner that scans the System outside of the Operating System by booting from the CD

    Download the Avira AntiVir Rescue System .exe (60,529 Kb) not the .iso

    The current version is: 20091111184537

    Download the 'rescue_system-common-en.exe' then place an CD in the tray and DoubleClick the Downloaded 'rescue_system-common-en.exe'

    An bootable CD will automatically be created

    Boot the computer from this CD choosing the Default Settings, once at the User Interface choose your language in the lower left hand corner by
    clicking on the flags representing the languages supported.....then run the scanner.....

    The scanner by Default will only reveal infections, so should the scanner find anything, re-run the scanner by first electing to remove the infections within the scanner settings


    Avira AntiVir Rescue System (sixth one from the top in the "Downloads" list):
    http://www.avira.com/en/support/support_downloads.html


    Also try these Online Scanners from Microsoft (Must accept ActiveX Control):

    Microsoft Malicious Software Removal Tool (choose full system scan):
    http://www.microsoft.com/security/malwareremove/default.mspx

    Windows Live OneCare Online Protection Scan (virus/spyware scanner):
    http://onecare.live.com/site/en-US/center/howsafe.htm

    Windows Live OneCare Online Clean up Scan (registry and hard drive cleaner):
    http://onecare.live.com/site/en-US/center/cleanup.htm


    EDIT: and Welcome to Wilders Security Forums bLupyr0.....


    HKEY1952
     
    Last edited: Nov 15, 2009
  11. hogndog

    hogndog Registered Member

    Joined:
    Jun 9, 2007
    Posts:
    628
    Location:
    In His Service
Thread Status:
Not open for further replies.