Possible Virus Help Needed ASAP!

aTzUeLo1191 · 01-11-2009, 01:47 PM

A window thing from McAfee Firewall just popped up on my computer, asking for internet access for a program called "getmodule33.exe". I had never heard of such a thing, or remembered downloading such a program, so I did a quick google search and apparently its some sort of a virus. Has anyone heard of this? And will just deleting the file (its under program files) eliminate the possible virus? Help would be greatly appreciated.

**Sprite-** · 01-11-2009, 01:52 PM

Just hard delete (Shift+Delete) the file and you should be fine. Run a virus scan after updating.

aTzUeLo1191 · 01-11-2009, 02:03 PM

For some reason, it says access is denied when I try to delete it.

Now I'm getting some popup windows telling me to download some virus scanner from "bestvirusscanner.net" or something like that, b/c according to that, I have a trojan somewhere on my computer.

I'm running ad-aware right now, hopefully that will do the trick.

Edit: I think I found another one, called icheck.exe. Both were created at 2:35 today. I wasn't downloading anything at all. Anyone have any idea how they got here?

**Sprite-** · 01-11-2009, 02:08 PM

Okay. It seems that the process is locked. So what you can do it create a batch file that will delete the file when you restart the computer. ***DO THIS AT YOUR OWN RISK***
If you do it correctly, nothing bad will happen. Just make sure you don't put the wrong file name inside.

Create a new text file on your Desktop
Rename "New Text Document.txt" to "delete.bat"

Edit the batch file (right-click "delete.bat", "Edit")
Insert these lines (make sure to include the quotes):

REM Delete Batch File
del "C:\(location of file here)"
pause

Of course, substitute C:\ for whatever your drive letter is.
Put the file in your startup directory, and restart the computer. It should be deleted.

Make sure to delete the batch file out of your startup afterwords.

aTzUeLo1191 · 01-11-2009, 02:19 PM

Quick question...what exactly is a startup directory?

I'll be the first to admit I'm not too great with computers.

**Sprite-** · 01-11-2009, 02:22 PM

What version of windows do you run?

aTzUeLo1191 · 01-11-2009, 02:23 PM

**Sprite-** · 01-11-2009, 02:24 PM

First double click My Computer from the desktop, or select it from the Start Menu.
Double click the hard drive (default C:\).
Open the Documents and Settings folder.
Open a specific user account folder, or select All Users.
Double click the Start Menu folder.
Select Programs.
In the Programs folder, find the Startup folder and double click.

aTzUeLo1191 · 01-11-2009, 02:25 PM

Got it. Restarting now. Thanks a million.

aTzUeLo1191 · 01-11-2009, 03:24 PM

Doubleposting to say that when the command window came up and I said yes, access is denied, again. I think it's because my account doesn't have administrator capabilities. Is that right? How do I change it so I do have them?

Sorry I've never gone through this before, and I really don't know what to do. I just don't want to lose all my stuff.

Edit: I'm pretty sure it's starting to take effect...random Firefox windows keep popping up, from Hip-hop videos to mortgage rates to locating farms near my house. Getting reeeeeeeally nervous right now.

**funmonkey54** · 01-11-2009, 03:28 PM

Another time when a Computer Help subforum is needed.

**Sprite-** · 01-11-2009, 03:29 PM

In that case, you should get on an administrative account. I'm sure that is your problem.

aTzUeLo1191 · 01-11-2009, 03:36 PM

How do I make my account the administrative one?

**Sprite-** · 01-11-2009, 03:40 PM

If you're the only account on the computer, you should already be the administrative account. If other people have accounts such as parents, they probably have it. The only way to make your account have administrative access is if an administrative accounts logs in and adds you as one.

I'm sorry I can't help you more at the moment. I need to go out somewhere. Good luck.

aTzUeLo1191 · 01-11-2009, 03:52 PM

Phew...I ran the batch file on my dad's account (everyone in my family has an account on my computer but no one ever uses theirs but me). It worked like a charm. Thanks for everything.

rzr · 01-11-2009, 04:03 PM

If you can get onto your dad's account you might want to change your own account over to have administrator rights so you don't have to worry about this again.

**foilman8805** · 01-11-2009, 04:12 PM

Quote:

Originally Posted by funmonkey54

Another time when a Computer Help subforum is needed.

I second that.

aTzUeLo1191 · 01-11-2009, 05:34 PM

K new problem now.

My computer is turning on by itself now. It happened twice. The first time I thought I may have just hit a button accidentally, but the second time I was nowhere near the computer. Really creeped out now. Any suggestions?

Chaosvermin · 01-11-2009, 05:41 PM

From being fully turned off or from Standby or Hibernation?
If its doing it from when its fully turned off then WTF?

aTzUeLo1191 · 01-11-2009, 05:44 PM

It's just on standby, but still it shouldn't be doing that.

I'm running spybot again to see if it's picking something else up. I hope it does because otherwise this will be a looooong night.

01-11-2009, 01:52 PM	#2
Sprite- HAVE ME WITH VODKA Join Date: Aug 2005 Location: Long Island, New York Age: 35 Posts: 7,316	Re: Possible Virus Help Needed ASAP! Just hard delete (Shift+Delete) the file and you should be fine. Run a virus scan after updating.

01-11-2009, 02:08 PM	#4
Sprite- HAVE ME WITH VODKA Join Date: Aug 2005 Location: Long Island, New York Age: 35 Posts: 7,316	Re: Possible Virus Help Needed ASAP! Okay. It seems that the process is locked. So what you can do it create a batch file that will delete the file when you restart the computer. *DO THIS AT YOUR OWN RISK* If you do it correctly, nothing bad will happen. Just make sure you don't put the wrong file name inside. Create a new text file on your Desktop Rename "New Text Document.txt" to "delete.bat" Edit the batch file (right-click "delete.bat", "Edit") Insert these lines (make sure to include the quotes): REM Delete Batch File del "C:\(location of file here)" pause Of course, substitute C:\ for whatever your drive letter is. Put the file in your startup directory, and restart the computer. It should be deleted. Make sure to delete the batch file out of your startup afterwords. Last edited by Sprite-; 01-11-2009 at 02:14 PM..

01-11-2009, 02:22 PM	#6
Sprite- HAVE ME WITH VODKA Join Date: Aug 2005 Location: Long Island, New York Age: 35 Posts: 7,316	Re: Possible Virus Help Needed ASAP! What version of windows do you run?

01-11-2009, 02:24 PM	#8
Sprite- HAVE ME WITH VODKA Join Date: Aug 2005 Location: Long Island, New York Age: 35 Posts: 7,316	Re: Possible Virus Help Needed ASAP! First double click My Computer from the desktop, or select it from the Start Menu. Double click the hard drive (default C:\). Open the Documents and Settings folder. Open a specific user account folder, or select All Users. Double click the Start Menu folder. Select Programs. In the Programs folder, find the Startup folder and double click.

01-11-2009, 03:28 PM	#11
funmonkey54 The Chill Keeper Join Date: Oct 2007 Posts: 4,127	Re: Possible Virus Help Needed ASAP! Another time when a Computer Help subforum is needed. __________________

01-11-2009, 03:29 PM	#12
Sprite- HAVE ME WITH VODKA Join Date: Aug 2005 Location: Long Island, New York Age: 35 Posts: 7,316	Re: Possible Virus Help Needed ASAP! In that case, you should get on an administrative account. I'm sure that is your problem.

01-11-2009, 03:40 PM	#14
Sprite- HAVE ME WITH VODKA Join Date: Aug 2005 Location: Long Island, New York Age: 35 Posts: 7,316	Re: Possible Virus Help Needed ASAP! If you're the only account on the computer, you should already be the administrative account. If other people have accounts such as parents, they probably have it. The only way to make your account have administrative access is if an administrative accounts logs in and adds you as one. I'm sorry I can't help you more at the moment. I need to go out somewhere. Good luck. Last edited by Sprite-; 01-11-2009 at 03:42 PM..

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)