Re: Something is using a whole lot of memory after virus deletion

From: Enkidu (enkidu.com_at_com.cliffp.com)
Date: 12/30/04 

Date: Thu, 30 Dec 2004 14:03:11 +1300

On Wed, 29 Dec 2004 14:38:15 -0800, "Paul in San Diego" <me@you.com>
wrote:

>I caught a virus last week which did not much more than introduce a lot of
>spyware on my PC. Most of the spyware was easy to remove, and Norton AV
>2004 got rid of the virus. It still shows a couple of instances of
>'MALWARE' on the computer that it cannot delete.
>
>Adaware 6.0 finds nothing. Spybot S&D is installed, as is 'HIJACK THIS'
>which I had kill processes that I couldn't verify with google.
>
>Bottom line is that now the machine is showing memory usage of 600-800 megs
>of RAM with no programs running. Number of processes (including Norton) is
>normal, about 35. None of the processes that I see are out of the ordinary
>(I'm not new to this stuff and I normally know very well what's happening on
>my PC)
>
>If I use MSIE for net browsing, I get constant popups, and my popup blocker
>is working hard. I now use Firefox to get rid of that problem. Bottom line
>is that the PC is still not healthy, because the popups are a byproduct of
>whatever malware I can't remove. How do I find out what is using all this
>memory and the popups?
>
>OS is XP Pro sp1 but the browser has had it's latest shots from Microsoft.
>PC is 3.3G intel with 512Megs of RAM. Normal memory usage with no programs
>running has always been about 200-250MB.
>
>Suggestions appreciated!
>
Hi Paul, you seem to have done a lot to remove this stuff and it is
now time to re-install. Most professionalls re-install on the first
sign of a virus, but that is no good for home users, is it? However,
you have probably reached the end of the road. Of course, it's up to
you, and you may feel competent enough to continue. If you are I'm
sure that people here will help you.

I'd review where you are and see if you want to take it further.
There's no doubt that you will learn a LOT about your systems if you
do continue!

Cheers,

Cliff 

-- 
The National Party manifesto can be viewed here:
http://www.labour.org.nz/policy/index.html

Relevant Pages

  • Re: Trojan Virus
    ... norton doesn't provide you with a link to describe the virus and how to get ... the manual method of getting rid of it... ... safe mode and deleting there, or maybe deleting a registry entry then ...
    (microsoft.public.security)
  • W32.HLLP>Spreda.B.spy virus
    ... >this has come up as a virus on my system & Norton will ... How can I get rid of it? ... Norton is, how may ... your key board name of the virus in order to find and ...
    (microsoft.public.security.virus)
  • Re: 16 BIT Window Subsytem
    ... > window was to restart the computer. ... > had trouble getting rid of a virus before to use another ... > them on theirs & both have had problems with Norton not ...
    (microsoft.public.windowsxp.basics)
  • Help with Bloodhound.Exploit.6
    ... I've got the bloodhound.Expoit.6 virus and can't get rid of it. ... Norton Antivirus. ... in the above temp folder, is that normal and can I delete them? ...
    (microsoft.public.security)
  • w32.welchia.b.worm
    ... I've been getting popups from my computer saying ... that I have the w32.welchia.b.worm virus on my computer. ... rid of it but that program didn't even find it on my ...
    (microsoft.public.security.virus)