virus help

[nikimcbee]

On my old computer, something has messed with Explorer. When I go to log on the internet, some program hijacks it at says I need to download their program . The virus scans don't pick anything up (I have norton) but it stops it from installing when you click on the window pop-up. The spyware programs also say everything is okay. Firefox runs, so I've re-downloaded IE7 and the security updates. But they didn't seem to help. Any ideas on how to find this program and kill it?

[SUBMAN1]

Originally Posted by nikimcbee

On my old computer, something has messed with Explorer. When I go to log on the internet, some program hijacks it at says I need to download their program . The virus scans don't pick anything up (I have norton) but it stops it from installing when you click on the window pop-up. The spyware programs also say everything is okay. Firefox runs, so I've re-downloaded IE7 and the security updates. But they didn't seem to help. Any ideas on how to find this program and kill it?

Run AdAware from Lavasoft. It should clean out 99% of everything, and then run Spybot after it since one will pick up what the other misses.

http://lavasoft.com/

http://www.safer-networking.org/index2.html

-S

[nikimcbee]

Originally Posted by SUBMAN1

Run AdAware from Lavasoft. It should clean out 99% of everything, and then run Spybot after it since one will pick up what the other misses.

http://lavasoft.com/

http://www.safer-networking.org/index2.html

-S

I have adaware, but something was blocking it from updating . I've got it updating and re-running scan. I re-installed IE7, it runs the first time but the second time it runs, it brings up the critical error window, please download the program. I'm making progress, I think...

[Monica Lewinsky]

Is it possible for you to remove that hard drive on a temp basis and put it another PC of yours ; then scan? The advantage of doing that it is not a bootable drive which might confuse the virus/spyware and remove it or kill it using the temp PC? I have had a lot of luck using this approach avoiding a total reformat of the bum hard drive.

Of course you expose the other machine a SLIGHT risk of the same infection ... but... by making a suspected h.d. as a secondary drive, it is SO MUCH EASIER to clean it up than beating yours brains out if using it as the boot drive in the secondary PC.

Just a suggestion.

[raymond6751]

I had a similar problem last year. I recall there was a program called Hijack This or something. Google with the word hijack and you may find it.

You have got a hijacker that has attached itself in your favourites, I think.

Anyway, good luck.

[nikimcbee]

Originally Posted by Monica Lewinsky

Is it possible for you to remove that hard drive on a temp basis and put it another PC of yours ; then scan? The advantage of doing that it is not a bootable drive which might confuse the virus/spyware and remove it or kill it using the temp PC?

Of course you expose the other machine a SLIGHT risk of the same infection ... but... by making a suspected h.d. as a secondary drive, it is SO MUCH EASIER to clean it up than beating yours brains out if it is the boot drive.

Just a suggestion.

Ha, funny you should mention that. That's how I fixed my super old computer, I just took the hard drive out, plugged it in as a secondary drive and scanned it. I was able to recover what I wanted off the drive.

My other computer is okay (I think), it's just that something has messed with IE. Firefox runs just fine .

[nikimcbee]

Originally Posted by raymond6751

I had a similar problem last year. I recall there was a program called Hijack This or something. Google with the word hijack and you may find it.

You have got a hijacker that has attached itself in your favourites, I think.

Anyway, good luck.

Good idea, I'll look into that.

[Monica Lewinsky]

Originally Posted by raymond6751

I had a similar problem last year. I recall there was a program called Hijack This or something.

All that program does is tell you that you are screwed. It does very little to solve the problem other than stop the auto-starts that MIGHT be the cause of the problem[s].

[SUBMAN1]

Originally Posted by Monica Lewinsky

All that program does is tell you that you are screwed. It does very little to solve the problem other than stop the auto-starts that MIGHT be the cause of the problem[s].

His words are true - good for finding stuff, and if you aren't good at manual manipulation, Hijack will not do anything for you which is why i don't even mention it.

Pull up a run menu and type in msconfig. That will allow you to selectively control what programs start up. You can safely disable everything in the start tab, but you may get some not so friendly errors under normal operation.

Anyway, disable everything and then run Spybot. Try Spybot if Adaware is having issue.

What ticks me off on Adaware is that I was on its testing committee back during the Becky forum days, and back then they were always telling us it would be 100% free forever. Seems you must buy it now days if you want full functionality. Spybot is still 100% free by the way.

-S

[JHuschke]

What are you using? You should get a better firewall, get ZL.

http://www.zonealarm.com/store/content/home.jsp

It's what I use, hunts em down and kills em.

[Skybird]

This would be the time for me to turn on paranoid mode, since éven after a "repair" I am not able to put trust in my installation anymore. I would format and reinstall, not using any saved data from the time period since you became aware of something beeing messed up.

Guys, use an installation image on a separate drive to do a backup of your basic installation. that way reinstallaing is a breeze, only updates and working files/save games you need to copy over by hand. This has been one of the best investments in my PC I ever did. Acronis software 45 euros, second HD in frame 50-60 euros - "und gut is'. " just do not leave the image HD connected to the computer, so that it cannot get infested. Physical separation/interruption is always a million times better than any software solution to protect a device from something - every software code can be beaten.

[d@rk51d3]

Also, try booting into "safe mode" first , THEN run your scans. You'll usually detect even more nasties.

[SteveW1]

I had this same situation recently myself, every time I opened up explorer an advert would load instantly telling me to download their program.

I tried multiple adware programs as well as virus scanners, they wouldn't pick up diddly squat so in the end I backed up 8 DVD's worth of data and reformatted my hard drive.

No problems now after formating and reinstalling.

Hope you get your problem sorted nikimcbee.

Steve

[kiwi_2005]

Hijacked. I got a similar one once, Spybot killed it.

[Skybird]

Originally Posted by SteveW1

I tried multiple adware programs as well as virus scanners, they wouldn't pick up diddly squat so in the end I backed up 8 DVD's worth of data and reformatted my hard drive.

You must be aware that it holds a risk to create backups from the time your system already has been affected. It is better to do regular backups, or incremental backups, of your wokring files, and have three sets of them from the past three (or how many you want) timestamps, so that you can always go back to a backup originating from a time when everything still was in order. else you reinstall your system, copy your infested data back to it - and you are were you started, in the middle of the mess.