1. This forum is in read-only mode.

What in the hell, virus is this?

Discussion in 'Computers & Modding' started by damanali, May 19, 2009.

  1. damanali

    damanali Well-Known Member

    Well, I'm a freak out whenever i see virus or spyware in my comp. My dad told me he can't access the internet and called PLDT, our internet provider, and they told us to remove the cable from the router and put the modem directly to the pc, did that and the internet it back and can be accessed. the problem is, my dad is using McAfee and it detected a virus, here it said:

    VirusScan Alert!
    C:\WINDOWS\System32\svchost.exe:KERNEL32.LoadLibraryA
    BO:Writable BO:Stack
    Blocked by Buffer Overflow Protection

    so, what am i supposed to do, it said blocked, but its still there and when i open a explorer/mozilla, it is always detected. Can anybody help me with this?
     
  2. Loonylion

    Loonylion Administrator Staff Member

    upload the file here:

    http://www.kaspersky.com/scanforvirus

    DO NOT DELETE IT. it is a critical windows file. McAfee is well known for finding false positives (saying files are infected when they aren't). If kaspersky says it's clean then it most probably is.
     
  3. damanali

    damanali Well-Known Member

    There is no option to delete it, it said it was blocked. Well, I'm now in school and will do what you said later. Thank you! Would post later for the result.
     
  4. timmy1991

    timmy1991 Well-Known Member

    Yeah, false positives are a pain in the arse
     
  5. bhatooth

    bhatooth Well-Known Member

    that happened to me to i formatted this pc for 2 times because of that but i dont know it that is the virus i just cant acces the internet but there are net connection it just load for eternity
     
  6. damanali

    damanali Well-Known Member

    i used the spybot search and destroy, it picked up 50+ stuffs, all fixed and now i can use the net again.

    and i think the virus alert was a false positive... i search the net and many are saying it was a false positive.

    it also was not detected by kaspersky...or maybe i did something wrong...but anyways, i can now use the net again.

    Thanks for the help Loonylion
     
  7. Loonylion

    Loonylion Administrator Staff Member

    if kaspersky did not detect anything when you uploaded the file, then like I said, its most probably a false positive.
     
  8. damanali

    damanali Well-Known Member

    now there is a new one that pop-up in my laptop and its using avira

    its saying its a trojan:

    C:\WINDOWS\system32\fbtbebr.dll
    Is the TR/crypt.ZPACK.Gen Trojan

    Move to quarantein
    Delete
    Rename
    Ignore

    What should i do?
     
  9. Loonylion

    Loonylion Administrator Staff Member

    that probably is a virus, try it on kaspersky, and move to quarantine.
     
  10. damanali

    damanali Well-Known Member

    or, i tried that but when i tried to put it on the browse line, the avira pop and gave me the same options, what should i pick?
     
  11. Loonylion

    Loonylion Administrator Staff Member

  12. damanali

    damanali Well-Known Member

    ok, i'll do that right now.
     
  13. damanali

    damanali Well-Known Member

    it is a virus according to kaspersky, should i delete it?
     
  14. Loonylion

    Loonylion Administrator Staff Member

    yes, it might not let you though
     
  15. damanali

    damanali Well-Known Member

    ok, it was deleted, but i started again a full scan and there is a new one that just pop up, just 2% after i press start scan...

    C:\ARK14.tmp

    I'm now trying to use kaspersky again... i blame my classmate for using his flash disk on my laptop... it has viruses and stuff....
     
  16. Loonylion

    Loonylion Administrator Staff Member

    probably a virus, delete or move to quarantine. once the scan has finished, disable system restore then re-enable it. This will delete all the restore points and any viruses that may be infecting them.
     
  17. damanali

    damanali Well-Known Member


    how do i do that? where can i find that system restore?
    never mind, found it.

    and i would like to ask a few questions if its okay.

    1.) Is avira good or should i change to a new anti virus?
    2.) can i get a virus using wifi internet?
    3.) if yes to #2, can i put a firewall/protection or something to the router?
     
  18. Loonylion

    Loonylion Administrator Staff Member

    Avira is perfectly good, yes. It is possible to get viruses using any internet, unencrypted or weakly encrypted wifi carries additional risks because other people (who may have viruses on their computers) can connect to the wifi and spread them. Relying on a router firewall is not enough when using wifi, you must always run a software firewall on your laptop as well (www.oldversion.com has a good one called 'sygate personal firewall'). Chances are your router already has a firewall built in.
     
  19. damanali

    damanali Well-Known Member

    Ok, i did what you told me to do, did the restore system thing. hope that it will not detect any virus or wares after that.

    Also, is there a Anti-virus and anti-spyware/anti-malware or watever anti combined into one?, cause i think my avira antivir has only the anti-virus and i need to run spybot search and destroy to detect all the other anti...

    in the other thread, i think its only anti-virus on the lists
     
  20. Loonylion

    Loonylion Administrator Staff Member

    yes, there are combined solutions, but in my experience they arent as good as separate ones.