Stubborn Trojan!

Stubborn Trojan!
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Stubborn Trojan! Brettster 08-18-2008
---> Re: Stubborn Trojan! The Real Truth ...08-18-2008
| `--> Re: Stubborn Trojan! The Real Truth ...08-18-2008
Posted by Brettster on August 18, 2008, 1:24 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


I have a fairly virulent virus on my PC (using Windows XP).

When I Google something in any browser and click on a link. Very often
it automatically redirects to a shopping or marketing type spam page.
It's not a popup; just a regular page. And hitting the back button
usually accomplishes nothing.

Here are some interesting aspects of this trojan.

1. Ad-Aware usually finds some spyware and removes it. (Spybot and
Malware find nothing.) But if you then launch a browser, it
immediately starts happening again. And yes, I've run Ad-Aware in safe
mode. Run Ad-Aware immediately after lauching the browser, and it
finds the spyware again.

2. Googling for "HijackThis" or "McAfee" causes any browser to
immediately quit; ditto looking for McAfee's website in the URL field.

3. I was able to DL a trial copy of McAfee to my hard drive, but it
will not run.

Any ideas on how to defeat this trojan are highly appreciated.

Thanks!


Posted by Malke on August 18, 2008, 2:24 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


Brettster wrote:

> I have a fairly virulent virus on my PC (using Windows XP).
>
> When I Google something in any browser and click on a link. Very often
> it automatically redirects to a shopping or marketing type spam page.
> It's not a popup; just a regular page. And hitting the back button
> usually accomplishes nothing.
>
> Here are some interesting aspects of this trojan.
>
> 1. Ad-Aware usually finds some spyware and removes it. (Spybot and
> Malware find nothing.) But if you then launch a browser, it
> immediately starts happening again. And yes, I've run Ad-Aware in safe
> mode. Run Ad-Aware immediately after lauching the browser, and it
> finds the spyware again.
>
> 2. Googling for "HijackThis" or "McAfee" causes any browser to
> immediately quit; ditto looking for McAfee's website in the URL field.
>
> 3. I was able to DL a trial copy of McAfee to my hard drive, but it
> will not run.

You have something that is respawning. The following general malware steps
may have some things for you to do. Or go directly to the "When all else
fails" instructions below.

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. PLEASE DO NOT
POST LOGS IN THE MS NEWSGROUPS.

Standard disclaimer: I can't see and test your computer myself, so these are
just suggestions based on many years of being a professional computer tech;
suggestions based on what you've written. You should not take my
suggestions as a definitive diagnosis. If you can't do the work yourself
(and there is no shame in admitting this isn't your cup of tea), take the
machine to a professional computer repair shop (not your local equivalent
of BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may be
so infested that Windows will need to be clean-installed. If possible, have
all your data backed up before you take the machine into a shop.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ


Posted by on August 18, 2008, 5:16 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


I had a problem that sounded very much like yours. Scanning with the "big
boys" revealed nothing, but every time I used the net, sites I wasn't
interested in seeing appeared.

It got to the point where I thought I was going to have to do a complete
reinstall. Then I tried the free AVG. It found the cause(s) and allowed me
to removed them and not have to go through the trouble of the reinstall.

McAfee told me about the trojans and even said they were removed, but that
wasn't true. As soon as I went on the net, my trouble came back, but after
using the free AVG, I'm up and running. I don't know if this will work for
you, but it's free, the install is easy, and the scan is the longest part.

Good luck

M

Posted by The Real Truth MVP on August 18, 2008, 7:55 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


Use my free Remove-it software, it will remove that malware from your
system. Download it here http://pcbutts1.com/downloads/tools/tools.htm

--
Cyberstalking is a crime. If you had one as bad as I did simply ignoring
them is not an option.




>I have a fairly virulent virus on my PC (using Windows XP).
>
> When I Google something in any browser and click on a link. Very often
> it automatically redirects to a shopping or marketing type spam page.
> It's not a popup; just a regular page. And hitting the back button
> usually accomplishes nothing.
>
> Here are some interesting aspects of this trojan.
>
> 1. Ad-Aware usually finds some spyware and removes it. (Spybot and
> Malware find nothing.) But if you then launch a browser, it
> immediately starts happening again. And yes, I've run Ad-Aware in safe
> mode. Run Ad-Aware immediately after lauching the browser, and it
> finds the spyware again.
>
> 2. Googling for "HijackThis" or "McAfee" causes any browser to
> immediately quit; ditto looking for McAfee's website in the URL field.
>
> 3. I was able to DL a trial copy of McAfee to my hard drive, but it
> will not run.
>
> Any ideas on how to defeat this trojan are highly appreciated.
>
> Thanks!
>


Posted by Richard Urban on August 18, 2008, 9:17 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


Designed for Windows 2000 and XP only. Yet you post it here.

And you claim to write this stuff. You don't seem to know a lot about your
own program!

--

Richard Urban
Microsoft MVP
Windows Desktop Experience



> Use my free Remove-it software, it will remove that malware from your
> system. Download it here http://pcbutts1.com/downloads/tools/tools.htm
>
> --
> Cyberstalking is a crime. If you had one as bad as I did simply ignoring
> them is not an option.
>
>
>
>
>>I have a fairly virulent virus on my PC (using Windows XP).
>>
>> When I Google something in any browser and click on a link. Very often
>> it automatically redirects to a shopping or marketing type spam page.
>> It's not a popup; just a regular page. And hitting the back button
>> usually accomplishes nothing.
>>
>> Here are some interesting aspects of this trojan.
>>
>> 1. Ad-Aware usually finds some spyware and removes it. (Spybot and
>> Malware find nothing.) But if you then launch a browser, it
>> immediately starts happening again. And yes, I've run Ad-Aware in safe
>> mode. Run Ad-Aware immediately after lauching the browser, and it
>> finds the spyware again.
>>
>> 2. Googling for "HijackThis" or "McAfee" causes any browser to
>> immediately quit; ditto looking for McAfee's website in the URL field.
>>
>> 3. I was able to DL a trial copy of McAfee to my hard drive, but it
>> will not run.
>>
>> Any ideas on how to defeat this trojan are highly appreciated.
>>
>> Thanks!
>>
>


Similar ThreadsPosted
stubborn Keylogger ! March 25, 2008, 4:19 pm
Trojan August 2, 2005, 8:42 pm
Trojan August 19, 2005, 6:31 pm
trojan by icq November 4, 2005, 6:40 am
Trojan November 7, 2005, 3:45 pm
trojan November 8, 2005, 3:46 pm
Trojan.moo December 18, 2005, 3:23 pm
Trojan! ? August 14, 2006, 9:52 pm
ssu.exe is it trojan ??? March 21, 2007, 5:49 pm
Possible trojan??? April 30, 2007, 12:40 pm

The site map in XML format XML site map

Contact Us | Privacy Policy