Korean Job Discussion Forums

[inthewild]

I tried to remove it with Avast and SpyBot S&D but it keeps on popping up. Anyone else had trouble with this? Normally the above 2 programs get rid of anything but not this one...

I have googled it but it seems to link to more malware pages...

Help appreciated.

avast log...

2009-02-08 오후 10:36:12 SYSTEM 1140 Sign of "Win32:PureMorph [Cryp]" has been found in "C:\WINDOWS\system32\800.exe\[UPX]" file.
2009-02-08 오후 10:46:29 SYSTEM 1140 Sign of "Win32:PureMorph [Cryp]" has been found in "C:\WINDOWS\system32\087.exe\[UPX]" file.
2009-02-08 오후 10:47:46 SYSTEM 1140 Sign of "Win32:PureMorph [Cryp]" has been found in "C:\WINDOWS\system32\518.exe\[UPX]" file.
2009-02-08 오후 10:51:54 SYSTEM 1140 Sign of "Win32:PureMorph [Cryp]" has been found in "C:\WINDOWS\system32\561.exe\[UPX]" file.
2009-02-08 오후 10:52:50 SYSTEM 1140 Sign of "Win32:PureMorph [Cryp]" has been found in "C:\WINDOWS\system32\561.exe\[UPX]" file.
2009-02-08 오후 11:16:47 SYSTEM 1140 Sign of "Win32:PureMorph [Cryp]" has been found in "C:\WINDOWS\system32\881.exe\[UPX]" file.

[xpat]

Have you tried any of these sites?
http://www.google.com/search?hl=en&q=puremorph+trojan&btnG=Search

[bassexpander]

First try Malwarebytes:

http://www.malwarebytes.org/mbam.php

Free download on the left of that page. You might need to download it onto another machine and bring it over on a memory key or something. Your malware infection might try to block you from downloading it.

You should also remove Avast and try Kaspersky using their free trial:
http://www.kaspersky.com/productupdates

It'll only last a month, but might do a better job of removing it if Malwarebytes doesn't.

[blackjack]

Terrible name but superantispyware has got some very good reviews

http://www.download.com/SuperAntiSpyware-Free-Edition/3000-8022_4-10523889.html?tag=mncol

[hanguker]

I suggest you backup any data you haven't lost and reinstall Windows. Although I really appreciate these anti-spyware companies for trying to make programs to rid our computers of these viruses, they are seldom successful at totally removing them.

In my experience, the process of running various scans, messing with startup items and services, and restarting the computer a million times is much longer and more stressful than simply backing up and reinstalling.

In the future keep all of you data on a separate partition so that you can just wipe your C: drive on a whim if you get infected.

Good luck.

[blackjack]

when you did the scans did you do it in safe mode? did you disable system restore? viruses and stuff can hide in the system restore area.

[inthewild]