Anoying virus

**evilfantasy** · #61 1st Oct 2007, 17:17

PAL Spyware Remover is a malware program that pretends to be an antispyware program, while it is not.

**gizmo** · #62 2nd Oct 2007, 15:31

ive just done a counterspy scan and it has picked up Trojan-Downloader.Zlob.Media-Codec Trojan Downloader,
any clues on how to get rid of it?

**evilfantasy** · #63 2nd Oct 2007, 15:39

Counterspy would not remove it?

**gizmo** · #64 2nd Oct 2007, 15:42

well it said it remved it but i done a counterspy scan yesterday and i think it came up with the same thing,i think your right and it has been removed,is it posible for the malware to like respawn?

**evilfantasy** · #65 2nd Oct 2007, 15:46

Where is it saying it is located.

Look in the quarantine and see if you can tell me the location that it was found.

**gizmo** · #66 2nd Oct 2007, 15:52

i dont know why but it is in qurantine now but itonly says the date it was found and name

**gizmo** · #67 2nd Oct 2007, 16:22

found it, c:/documents and settings/owner/local settings/temp/nsd78.tmp/installoptions.dll

there are two of these exactly the same but one was quarentined a few seconds after the first one

**evilfantasy** · #68 2nd Oct 2007, 16:25

If it was found and quarantined by another program then Counterspy it will see it in that programs quarantine file.

Try emptying your antivirus quarantine.
Empty any spyware backups you might have.
Also clear Counterspys.

Also it may be seeing it in the system restore folder.

**gizmo** · #69 2nd Oct 2007, 16:29

ive empty'ed bitdefenders quarantine and counterspy and counterspy said it they would be permently removed so its proberly gone,i can do a scan tomarro to make sure its gone,should i do that then

**evilfantasy** · #70 2nd Oct 2007, 16:30

Go to that folder and delete it.

Open CCleaner and select the Options tab on the left of the screen.
Then click advanced. uncheck the "Only delete files in Windows Temp folders older then 48 hours."

Run Ccleaner.