Jump to content

Stubborn Trojan!


Recommended Posts

Guest Brettster
Posted

I have a fairly virulent virus on my PC (using Windows XP).

 

When I Google something in any browser and click on a link. Very often

it automatically redirects to a shopping or marketing type spam page.

It's not a popup; just a regular page. And hitting the back button

usually accomplishes nothing.

 

Here are some interesting aspects of this trojan.

 

1. Ad-Aware usually finds some spyware and removes it. (Spybot and

Malware find nothing.) But if you then launch a browser, it

immediately starts happening again. And yes, I've run Ad-Aware in safe

mode. Run Ad-Aware immediately after lauching the browser, and it

finds the spyware again.

 

2. Googling for "HijackThis" or "McAfee" causes any browser to

immediately quit; ditto looking for McAfee's website in the URL field.

 

3. I was able to DL a trial copy of McAfee to my hard drive, but it

will not run.

 

Any ideas on how to defeat this trojan are highly appreciated.

 

Thanks!

  • Replies 6
  • Created
  • Last Reply
Posted

Brettster wrote:

<span style="color:blue">

> I have a fairly virulent virus on my PC (using Windows XP).

>

> When I Google something in any browser and click on a link. Very often

> it automatically redirects to a shopping or marketing type spam page.

> It's not a popup; just a regular page. And hitting the back button

> usually accomplishes nothing.

>

> Here are some interesting aspects of this trojan.

>

> 1. Ad-Aware usually finds some spyware and removes it. (Spybot and

> Malware find nothing.) But if you then launch a browser, it

> immediately starts happening again. And yes, I've run Ad-Aware in safe

> mode. Run Ad-Aware immediately after lauching the browser, and it

> finds the spyware again.

>

> 2. Googling for "HijackThis" or "McAfee" causes any browser to

> immediately quit; ditto looking for McAfee's website in the URL field.

>

> 3. I was able to DL a trial copy of McAfee to my hard drive, but it

> will not run.</span>

 

You have something that is respawning. The following general malware steps

may have some things for you to do. Or go directly to the "When all else

fails" instructions below.

 

http://www.elephantboycomputers.com/page2....emoving_Malware

 

Include scanning with David Lipman's Multi_AV and follow instructions to do

all scans in Safe Mode. Please see the special Notes regarding using

Multi_AV in Vista.

 

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions

http://tinyurl.com/yoeru3 - download link and more instructions

 

When all else fails, get guided help. Choose one of the specialty forums

listed at the first link. Register and read its posting FAQ. PLEASE DO NOT

POST LOGS IN THE MS NEWSGROUPS.

 

Standard disclaimer: I can't see and test your computer myself, so these are

just suggestions based on many years of being a professional computer tech;

suggestions based on what you've written. You should not take my

suggestions as a definitive diagnosis. If you can't do the work yourself

(and there is no shame in admitting this isn't your cup of tea), take the

machine to a professional computer repair shop (not your local equivalent

of BigComputerStore/GeekSquad). Please be aware that not all local shops

are skilled at removing malware and even if they are, your computer may be

so infested that Windows will need to be clean-installed. If possible, have

all your data backed up before you take the machine into a shop.

 

Malke

--

MS-MVP

Elephant Boy Computers - Don't Panic!

FAQ - http://www.elephantboycomputers.com/#FAQ

Guest spamfree@nospam.com
Posted

I had a problem that sounded very much like yours. Scanning with the "big

boys" revealed nothing, but every time I used the net, sites I wasn't

interested in seeing appeared.

 

It got to the point where I thought I was going to have to do a complete

reinstall. Then I tried the free AVG. It found the cause(s) and allowed me

to removed them and not have to go through the trouble of the reinstall.

 

McAfee told me about the trojans and even said they were removed, but that

wasn't true. As soon as I went on the net, my trouble came back, but after

using the free AVG, I'm up and running. I don't know if this will work for

you, but it's free, the install is easy, and the scan is the longest part.

 

Good luck

 

M

Guest The Real Truth MVP
Posted

Use my free Remove-it software, it will remove that malware from your

system. Download it here http://pcbutts1.com/downloads/tools/tools.htm

 

--

Cyberstalking is a crime. If you had one as bad as I did simply ignoring

them is not an option.

 

 

 

 

"Brettster" <brett.bayne@gmail.com> wrote in message

news:1845ee1d-906b-494a-abcc-8ee529829291@s1g2000pra.googlegroups.com...<span style="color:blue">

>I have a fairly virulent virus on my PC (using Windows XP).

>

> When I Google something in any browser and click on a link. Very often

> it automatically redirects to a shopping or marketing type spam page.

> It's not a popup; just a regular page. And hitting the back button

> usually accomplishes nothing.

>

> Here are some interesting aspects of this trojan.

>

> 1. Ad-Aware usually finds some spyware and removes it. (Spybot and

> Malware find nothing.) But if you then launch a browser, it

> immediately starts happening again. And yes, I've run Ad-Aware in safe

> mode. Run Ad-Aware immediately after lauching the browser, and it

> finds the spyware again.

>

> 2. Googling for "HijackThis" or "McAfee" causes any browser to

> immediately quit; ditto looking for McAfee's website in the URL field.

>

> 3. I was able to DL a trial copy of McAfee to my hard drive, but it

> will not run.

>

> Any ideas on how to defeat this trojan are highly appreciated.

>

> Thanks!

> </span>

Guest Richard Urban
Posted

Designed for Windows 2000 and XP only. Yet you post it here.

 

And you claim to write this stuff. You don't seem to know a lot about your

own program!

 

--

 

Richard Urban

Microsoft MVP

Windows Desktop Experience

 

 

 

"The Real Truth MVP" <toidi@tpap.com> wrote in message

news:b_nqk.36992$ZE5.675@nlpi061.nbdc.sbc.com...<span style="color:blue">

> Use my free Remove-it software, it will remove that malware from your

> system. Download it here http://pcbutts1.com/downloads/tools/tools.htm

>

> --

> Cyberstalking is a crime. If you had one as bad as I did simply ignoring

> them is not an option.

>

>

>

>

> "Brettster" <brett.bayne@gmail.com> wrote in message

> news:1845ee1d-906b-494a-abcc-8ee529829291@s1g2000pra.googlegroups.com...<span style="color:green">

>>I have a fairly virulent virus on my PC (using Windows XP).

>>

>> When I Google something in any browser and click on a link. Very often

>> it automatically redirects to a shopping or marketing type spam page.

>> It's not a popup; just a regular page. And hitting the back button

>> usually accomplishes nothing.

>>

>> Here are some interesting aspects of this trojan.

>>

>> 1. Ad-Aware usually finds some spyware and removes it. (Spybot and

>> Malware find nothing.) But if you then launch a browser, it

>> immediately starts happening again. And yes, I've run Ad-Aware in safe

>> mode. Run Ad-Aware immediately after lauching the browser, and it

>> finds the spyware again.

>>

>> 2. Googling for "HijackThis" or "McAfee" causes any browser to

>> immediately quit; ditto looking for McAfee's website in the URL field.

>>

>> 3. I was able to DL a trial copy of McAfee to my hard drive, but it

>> will not run.

>>

>> Any ideas on how to defeat this trojan are highly appreciated.

>>

>> Thanks!

>></span>

> </span>

Guest The Real Truth MVP
Posted

What part of "(using Windows XP)" in the ops post don't you understand?

 

 

--

Cyberstalking is a crime. If you had one as bad as I did simply ignoring

them is not an option.

 

 

 

 

"Richard Urban" <richardurbanREMOVETHIS@hotmail.com> wrote in message

news:%23BPVJlZAJHA.3572@TK2MSFTNGP06.phx.gbl...<span style="color:blue">

> Designed for Windows 2000 and XP only. Yet you post it here.

>

> And you claim to write this stuff. You don't seem to know a lot about your

> own program!

>

> --

>

> Richard Urban

> Microsoft MVP

> Windows Desktop Experience

>

>

>

> "The Real Truth MVP" <toidi@tpap.com> wrote in message

> news:b_nqk.36992$ZE5.675@nlpi061.nbdc.sbc.com...<span style="color:green">

>> Use my free Remove-it software, it will remove that malware from your

>> system. Download it here http://pcbutts1.com/downloads/tools/tools.htm

>>

>> --

>> Cyberstalking is a crime. If you had one as bad as I did simply ignoring

>> them is not an option.

>>

>>

>>

>>

>> "Brettster" <brett.bayne@gmail.com> wrote in message

>> news:1845ee1d-906b-494a-abcc-8ee529829291@s1g2000pra.googlegroups.com...<span style="color:darkred">

>>>I have a fairly virulent virus on my PC (using Windows XP).

>>>

>>> When I Google something in any browser and click on a link. Very often

>>> it automatically redirects to a shopping or marketing type spam page.

>>> It's not a popup; just a regular page. And hitting the back button

>>> usually accomplishes nothing.

>>>

>>> Here are some interesting aspects of this trojan.

>>>

>>> 1. Ad-Aware usually finds some spyware and removes it. (Spybot and

>>> Malware find nothing.) But if you then launch a browser, it

>>> immediately starts happening again. And yes, I've run Ad-Aware in safe

>>> mode. Run Ad-Aware immediately after lauching the browser, and it

>>> finds the spyware again.

>>>

>>> 2. Googling for "HijackThis" or "McAfee" causes any browser to

>>> immediately quit; ditto looking for McAfee's website in the URL field.

>>>

>>> 3. I was able to DL a trial copy of McAfee to my hard drive, but it

>>> will not run.

>>>

>>> Any ideas on how to defeat this trojan are highly appreciated.

>>>

>>> Thanks!

>>></span>

>></span>

> </span>

  • 3 weeks later...
Posted

Hi

 

You have mentined ,you are redirecting to "shopping or marketing type spam

page".Can you mention the spam link

 

Warm Regards

Kalyan

 

 

 

 

 

 

"Brettster" <brett.bayne@gmail.com> wrote in message

news:1845ee1d-906b-494a-abcc-8ee529829291@s1g2000pra.googlegroups.com...<span style="color:blue">

>I have a fairly virulent virus on my PC (using Windows XP).

>

> When I Google something in any browser and click on a link. Very often

> it automatically redirects to a shopping or marketing type spam page.

> It's not a popup; just a regular page. And hitting the back button

> usually accomplishes nothing.

>

> Here are some interesting aspects of this trojan.

>

> 1. Ad-Aware usually finds some spyware and removes it. (Spybot and

> Malware find nothing.) But if you then launch a browser, it

> immediately starts happening again. And yes, I've run Ad-Aware in safe

> mode. Run Ad-Aware immediately after lauching the browser, and it

> finds the spyware again.

>

> 2. Googling for "HijackThis" or "McAfee" causes any browser to

> immediately quit; ditto looking for McAfee's website in the URL field.

>

> 3. I was able to DL a trial copy of McAfee to my hard drive, but it

> will not run.

>

> Any ideas on how to defeat this trojan are highly appreciated.

>

> Thanks!

> </span>

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...