- Joined
- Aug 9, 2010
- Messages
- 21
I was just there today downloading skins for CS:S and my AVAST blocked an "AD" virus!
_____
!NOTE!
VIRUS SCANNERS WILL NOT DETECT OR FIND THIS VIRUS! ONLY REAL-TIME VIRUS PROTECTION CAN DETECT AND STOP THIS VIRUS FROM BEING INSTALLED.
______
Do I have the Virus?
Even if you think you do not have the virus, you could still be infected!
There is an easy way to test if you have the virus. Follow these steps...
Step 1)
Press CTRL+ALT+DEL on your keyboard. Click "Open Task Manager".
Step 2)
On the Task Manger, click the "Processes" tabs.
Step 3)
Look through your processes for "loader.exe". If you have that file running, there will also be one or multiple instances of "iexplorer.exe". If so, You are infected!
_____________________
Removing the Virus
To remove this virus, you are REQUIRED to have a Windows disk corresponding to your version of Windows OR a recovery drive that came from factory. If you do not, you are pretty much screwed... There are other ways but they have a 10% chance of working.
So now, insert your Windows disk into your CD/DVD drive and restart your computer. When it says to "Press any key to continue..." do so. If you have a recovery drive, you will either have to press a key that is defined on the Bios screen or press F8 before Windows loads. Choose to recover your Windows installation.
After you choose the option to recover your Windows Installation, you can choose to use Command Prompt to do so. Once the Command Prompt opens, type the following...
Windows XP: fixmbr
Vista or 7: bootrec.exe /FixMbr
After the process completes, you can then close command prompt and Restart your computer. When the computer loads up again, the Virus has been disabled. You just need to delete the file.
You can either use CCleaner to delete all over your Windows Temporary Files or goto your temp folder in the following location...
Windows XP: C:\Documents and Settings\Application Data\temp
Vista or 7: C:\Users\[YOUR USERNAME]\AppData\Local\Temp
Find the file "loader.exe" and delete it.
You should be all set now and the infection should be gone. Double check by following the the steps to check for the virus above.
______
VIRUS SCANNERS THAT !CAN! DETECT IT
[#] NOD32 - A lot of people in this thread recommending it.
Update: Read and heard from a people that NOD32 CAN KILL IT. At the moment, this is what I recommend hte highest from this list. Hence the moving it to the top of the list.
[#] Kaspersky - will detect and prevent this from installing on your computer.
[#] Avast - Somone in this thread somewhere mentioned that Avast also does this. I can't confirm it as I've not heard anything else about Avast for this but I've heard great things about it anyway.
[#] MVPS Hosts - I've been hearing good things about this.
[#] Malwarebytes - Quite a lot of people are recommending Malwarebytes to help get rid of unwanted things. Might not be the best for this trojan(I've no idea if it's effective or not in any way for this) but it should at least get rid of the need for people to keep posting it as you'll see it here and I'm sure it's got its uses for other sorts of nasties.
[#] Panda Cloud Antivirus - Read a lot of great things about it. Does it's job great apparently, in beta though and isn't feature complete from what I read. Still it's another alternative and worth looking into. Note that I don't know if it's effective in anyway towards protecting you from this trojan.
_____
!NOTE!
VIRUS SCANNERS WILL NOT DETECT OR FIND THIS VIRUS! ONLY REAL-TIME VIRUS PROTECTION CAN DETECT AND STOP THIS VIRUS FROM BEING INSTALLED.
______
Do I have the Virus?
Even if you think you do not have the virus, you could still be infected!
There is an easy way to test if you have the virus. Follow these steps...
Step 1)
Press CTRL+ALT+DEL on your keyboard. Click "Open Task Manager".
Step 2)
On the Task Manger, click the "Processes" tabs.
Step 3)
Look through your processes for "loader.exe". If you have that file running, there will also be one or multiple instances of "iexplorer.exe". If so, You are infected!
_____________________
Removing the Virus
To remove this virus, you are REQUIRED to have a Windows disk corresponding to your version of Windows OR a recovery drive that came from factory. If you do not, you are pretty much screwed... There are other ways but they have a 10% chance of working.
So now, insert your Windows disk into your CD/DVD drive and restart your computer. When it says to "Press any key to continue..." do so. If you have a recovery drive, you will either have to press a key that is defined on the Bios screen or press F8 before Windows loads. Choose to recover your Windows installation.
After you choose the option to recover your Windows Installation, you can choose to use Command Prompt to do so. Once the Command Prompt opens, type the following...
Windows XP: fixmbr
Vista or 7: bootrec.exe /FixMbr
After the process completes, you can then close command prompt and Restart your computer. When the computer loads up again, the Virus has been disabled. You just need to delete the file.
You can either use CCleaner to delete all over your Windows Temporary Files or goto your temp folder in the following location...
Windows XP: C:\Documents and Settings\Application Data\temp
Vista or 7: C:\Users\[YOUR USERNAME]\AppData\Local\Temp
Find the file "loader.exe" and delete it.
You should be all set now and the infection should be gone. Double check by following the the steps to check for the virus above.
______
VIRUS SCANNERS THAT !CAN! DETECT IT
[#] NOD32 - A lot of people in this thread recommending it.
Update: Read and heard from a people that NOD32 CAN KILL IT. At the moment, this is what I recommend hte highest from this list. Hence the moving it to the top of the list.
[#] Kaspersky - will detect and prevent this from installing on your computer.
[#] Avast - Somone in this thread somewhere mentioned that Avast also does this. I can't confirm it as I've not heard anything else about Avast for this but I've heard great things about it anyway.
[#] MVPS Hosts - I've been hearing good things about this.
[#] Malwarebytes - Quite a lot of people are recommending Malwarebytes to help get rid of unwanted things. Might not be the best for this trojan(I've no idea if it's effective or not in any way for this) but it should at least get rid of the need for people to keep posting it as you'll see it here and I'm sure it's got its uses for other sorts of nasties.
[#] Panda Cloud Antivirus - Read a lot of great things about it. Does it's job great apparently, in beta though and isn't feature complete from what I read. Still it's another alternative and worth looking into. Note that I don't know if it's effective in anyway towards protecting you from this trojan.
Last edited:
