how do you get rid of Gaelicum.A virus

[barny2006]

hello,
my son recently visited some unknown site, and the pc (xp-pro-sp2) is infected with Gaelicum.A virus. and it keeps corrupting all the programs. is there anyway to get rid of this nasty virus?
thanks.

 

[erikhertzel]

Here you go:

Read this article:

http://www.grisoft.com/doc/removal/lng/us/tpl/tpl01?uti=Vcleaner

Download vcleaner:

http://www.grisoft.cz/softw/70/filedir/util/avg_rem_sup.dir/vcleaner.exe

Regards,

Erik

 

[barny2006]

thanks! i will try that.

 

[erikhertzel]

This is the 2nd of these that have came up recently. I hope that it resolves your problem. Let us know if we can help further.

Regards.

Erik

 

[barny2006]

i downloaded vcleaner.exe and ran it in safe mode. it processed 23000 files and it was saying "cleaned ok". over 1700 instances of infected files were found. at end, it said all problems fixed. i turned the pc off, restarted, ran vcleaner.exe. this time, it found another 500 files that were infected. is the pc lean now? can i remove any instances of this virus from the registry?
thanks.

 

[erikhertzel]

I would think so. I would also check it with some other virus scanners just to make sure.

http://housecall.trendmicro.com

http://www.pandasoftware.com/activescan

Regards,

Erik

 

[barny2006]

more virus found again after several safe mode restarts and scans. it's strange that vcleaner.exe says it cleaned up everything, then after more restarts, virus are found again.

 

[erikhertzel]

I would check for malware as well:

Webroot Spysweeper

Download it here:

http://www.sabethacomputing.com/downloads.html

Webroot Spysweeper 14 day Trial

Update the defs and do a sweep.

Also check this out:

Ewido download:

http://www.ewido.net/en

Update it and run a complete scan.

 

[barny2006]

sorry, i forgot to mention. it keeps finding the same virus: win32/Gaelicum.A and nothing else. it keeps saying it cleaned it up, but after restarts, it's showing up more.
is there anyway i can get to regedit and wipe any references to this nasty virus. it has corrupted all the programs.

 

[erikhertzel]

Look here for information:

http://forums.thetechguys.com/archive/index.php/t-21231.html

http://ve.nod32.ch/worms/tenga.php

http://www.symantec.com/avcenter/venc/data/w32.licum.html

Removal:

http://forums.tomcoyote.org/lofiversion/index.php/t46927.html

I would try hitting it with this as well as others have had some success:

http://www.avast.com

Regards

Erik

 

[barny2006]

thanks a lot.
that's a wealth of information. i'm going to try to see if i can get rid of this virus.