Nebuler S Spyware and Viruses

[bjones371]

My laptop has been battered by viruses and spyware lately and I can't understand where from. I have anti-virus, firewall and anti-spyware installed but somehow my computer has become infected.

The antivirus program flags up viruses every 15 or so minutes one after the other, all saved in the "C:\WINDOWS\TEMP" directory, the file is always called WIN****.TMP.EXE (the *s can be any set of letters or numbers and appear to be random). They keep getting deleted but keep on coming back time after time.

Also, I am told every hour that anti-spyware has quarantined a spyware object called "Nebuler S". I delete the file every time but lo and behold, in one hours time, there it is again.

Does anyone know how I can get rid of these things?

Cheers

***EDIT*** Nebuler S is a spyware item the Virgin PCguard says is found in the registry if that helps

 

[Doctor Congo]

http://www.2-spyware.com/remove-nebuler.html
That might help mate.

For future reference get yourself Spybot s&d, it gives you the opportunity to allow or deny registry changes as well as scanning for spyware. Also stop clicking on those dodgy porn links fella and dont depend on anti virus sw to protect you 100%, dont forget new/variant viruses are released all the time, your av probably only updates once a day in response to them and cant preempt them. If you must download files you're not sure of then leave them on your hard drive for a few days or a week before scanning then running them.

 

[bjones371]

http://www.2-spyware.com/remove-nebuler.html
That might help mate.

For future reference get yourself Spybot s&d, it gives you the opportunity to allow or deny registry changes as well as scanning for spyware. Also stop clicking on those dodgy porn links fella and dont depend on anti virus sw to protect you 100%, dont forget new/variant viruses are released all the time, your av probably only updates once a day in response to them and cant preempt them. If you must download files you're not sure of then leave them on your hard drive for a few days or a week before scanning then running them.

Just ran spybot and adaware and they flagged up all sorts and i removed the lot. Still getting the same symptoms though so unfortunately no luck there.

I'll try the link though, cheers

 

[bjones371]

Right it says on the site:

Delete files:
win[X1]32.dll

[X1] is a combination of three random characters.

A quick search found winmbj32.dll and I tried to delete it. No luck :(

Says the file is in use and cannot be deleted.

Anyone help?

 

[Doctor Congo]

Right it says on the site:

Delete files:
win[X1]32.dll

[X1] is a combination of three random characters.

A quick search found winmbj32.dll and I tried to delete it. No luck :(

Says the file is in use and cannot be deleted.

Even in safe mode?

 

[Doctor Congo]

If still stuck put a post on this site mate:
http://forums.spywareinfo.com/index.php?showtopic=94146

 

[bjones371]

Right it says on the site:

Delete files:
win[X1]32.dll

[X1] is a combination of three random characters.

A quick search found winmbj32.dll and I tried to delete it. No luck :(

Says the file is in use and cannot be deleted.

Even in safe mode?

Yep, I've tried that KillBox thing as well and got nowhere

Is there no way to find out what process it is that is associated with Nebuler?

 

[Doctor Congo]

If still stuck put a post on this site mate:
http://forums.spywareinfo.com/index.php?showtopic=94146

 

[bjones371]

Cheers mate, will do :-)

 

[Doctor Congo]

Cheers mate, will do :-)

Hope it helps mate, alternatively if you're on a laptop it may have a recovery partition for really drastic action