Re: Evil Panda

Mingo wrote:

Can anyone help me?

Does anyone here know about a virus call Evil Panda and is there any tools
that can kill it?
I know it's a new virus that change all *.exe on hardrive and shows a cute
panda.

"Shows a cute panda" where? I'm afraid that Googling for "Evil Panda virus"
only brings up links to Panda Antivirus (completely legitimate) and I've
not seen anything like that here on clients' machines. There are many
viruses that will change all the executables on a system, so that bit of
general information doesn't help to identify your particular problem.

If you think you know which file is the virus executable, send a copy to
VirusTotal:

http://www.virustotal.com/flash/index_en.html

They will submit the file to numerous antivirus companies for
identification. Then paste the report in your next post.

In the meantime, you can try the standard malware removal steps:

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with either Sysclean or Multi_AV, plus AVG Anti-Spyware
(formerly Ewido - http://www.ewido.net/en/) and follow instructions to do
all scans in Safe Mode.

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the link above (not here, please).

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a professional computer repair
shop (not your local version of BigStoreUSA). The only alternative to going
through the malware removal tediously and systematically, probably with
online help from an HJT forum, and taking the machine to a real
professional is to back up your data and do a clean install of Windows.
It's your call. Please be aware that not all local shops are skilled at
removing malware and even if they are, your computer may be so infested
that Windows will need to be clean-installed. Have all your data backed up
before you take the machine into a shop.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
.

Relevant Pages

  • Re: Trojan Flush M
    ... I am running Norton Anti - Virus and it has reported that i have a virus ... instructed me to restart windows in safe mode and then a full scan. ... I suggest you do a clean install of Windows. ... shop. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: NTOSKRNL.EXE
    ... Panda may be highlighting the fact that it has changed ... > Actually I have done a full virus scan with AV softwares. ... >> Part Of: Microsoft Windows Operating System ... >> According to that, it does NOT, as you stated, use the network. ...
    (microsoft.public.windowsxp.general)
  • RE: I have a virus
    ... AT&T virus detector is on ... first with Sysclean or Dave Lipman's Multi-AV. ... shop. ... professional is to back up your data and do a clean install of Windows. ...
    (microsoft.public.security.virus)
  • Re: Trojan Flush M
    ... I am running Norton Anti - Virus and it has reported that i have a virus ... instructed me to restart windows in safe mode and then a full scan. ... I suggest you do a clean install of Windows. ... shop. ...
    (microsoft.public.windowsxp.security_admin)
  • mouse unnavailable
    ... When I work with my PC in different windows, the mouse is stop in ... virus, but I scan my PC with Norton and Panda, and nothing found. ...
    (microsoft.public.development.device.drivers)
Loading