Virus

Hello Guys!
Since a week, my PC settings always change a little bit like the the Icon for my externel Hard Drive etc. My friend said that this is a Virus named Configer. Do you know it? Have you got a programm against it. Avira Antvir Free doesen´t find him.

Yeah, every anti-virus call it XXXXX.Configer. I got one like that 5 months ago, and it was hard to remove it. It was turning off my firewall.

BUT, with help with ESET SmartSecurity, and TuneUp, and WIndows Task Manager, i found most of them, AND i know thier folder, and i used WinRAR to delete all of them. Nice story, eh??

Follow these steps and maybe you'll find them.

I have searched my PC three times but it didn´t find anything. Just my friend telling that I have it. My Computer Icon is the Trash Icon and I haven´t got Tune Up. My Friend also said that there is a special folder named "Recycle" and that there is a special programm to find it and destroy it.

How much does Smart Security Cost?

start->run->msconfig

In the services and startup tabs find anything suspicious and record the names.
Type the names into google to see if their viruses. If they are:

start->run->regedit

In the 'find' dialog, type the names that registered as viruses on google (Do NOT type the virus' name, you must type what it was called in msconfig)

Keep pressing F3 until you find entries like 'run"xxxxxx.exe"', and delete them.
This works for almost all viruses. Very hard to escape the registry.

Could it be that it is the: MobilityService.exe

There once was a pretty bad-ass virus/worm named "Conficker".
The problem is that some virus (at least Conficker did, I think) attach themselves to some windows service routine like svchost.exe.

One test if its a type of Conficker was to try to browse to any anti-virus software website.
If you cannot access them your system may be infected with Conficker, because since a certain version Conficker blocked access to thoses websites.

Quick online check if your system is possibly infected with Conficker:
http://four.cs.uni-bonn.de/fileadmin/user_upload/werner/cfdetector/

Some more information about Conficker (and tools how to remove it):
http://four.cs.uni-bonn.de/wg/cs/applications/containing-conficker/

So fast test? My friend told me tha this take about 5 hours?!

Of course it will take a few hours. Just do it.. it's worth it.

No the online check (first link I posted) will not take hours. But it finds only Version B and later.
Furthermore it might not find every Conficker infected System.

To do some deeper scanning of your system there should be some tools available at the second link I posted.

I mean: http://four.cs.uni-bonn.de/fileadmin/user_upload/werner/cfdetector/

I can recommend the Trend Micro online scan as well... it will also remove viruses.

http://housecall.trendmicro.com/

How can an online programm scan my PC????

Simple, it's using an ActiveX to scan your PC, and the ActiveX is installed on your PC.

Another link to check for Conficker infection:
http://www.confickerworkinggroup.org/infection_test/cfeyechart.html

And more information:
http://www.confickerworkinggroup.org/wiki/

I'm afraid that I'm not able to tell you exactly how these online tests work.
But I can tell you that it does not use ActiveX as Cowabanga states.

You're wrong, he's actually right. The online scanner from Trend Micro certainly does use either the ActiveX based core engine or their Java VM Core engine for scanning your PC online.

I'm sure most online virus scanners do, as this is the quickest and most reliable way.

use Malwarebytes. when I caught this bug I could not get rid of it. nod 32 did not find it, norton found it but could not get rid of it. Internet forums recommended it as one of the few softwares to remove conficker.

i tried yours Xarthor but it hasn´t found anything, yours PHeMoX runs since you´re posting it, i have a slow i-net concetion and a big hard disc

Hmm.... I just checked and I did not have conficker but a hijacker virus.

the way i found it was I used Symantic's online scanner, they found it but could not remove it. Then I downloaded Malwarebytes and it found it and removed it. Malwarebytes is free.

Sorry if I led you down the wrong path.