SUBSIM Radio Room Forums



SUBSIM: The Web's #1 resource for all submarine & naval simulations since 1997

Go Back   SUBSIM Radio Room Forums > General > General Topics > PC Hardware/Software forum
Forget password? Reset here

Reply
 
Thread Tools Display Modes
Old 07-21-08, 07:20 PM   #1
nikimcbee
Fleet Admiral
 
nikimcbee's Avatar
 
Join Date: Jul 2003
Location: Patroling the Slot.
Posts: 17,927
Downloads: 90
Uploads: 0


Default virus help

On my old computer, something has messed with Explorer. When I go to log on the internet, some program hijacks it at says I need to download their program . The virus scans don't pick anything up (I have norton) but it stops it from installing when you click on the window pop-up. The spyware programs also say everything is okay. Firefox runs, so I've re-downloaded IE7 and the security updates. But they didn't seem to help. Any ideas on how to find this program and kill it?
__________________
nikimcbee is offline   Reply With Quote
Old 07-21-08, 07:25 PM   #2
SUBMAN1
Rear Admiral
 
Join Date: Apr 2005
Posts: 11,866
Downloads: 0
Uploads: 0
Default

Quote:
Originally Posted by nikimcbee
On my old computer, something has messed with Explorer. When I go to log on the internet, some program hijacks it at says I need to download their program . The virus scans don't pick anything up (I have norton) but it stops it from installing when you click on the window pop-up. The spyware programs also say everything is okay. Firefox runs, so I've re-downloaded IE7 and the security updates. But they didn't seem to help. Any ideas on how to find this program and kill it?
Run AdAware from Lavasoft. It should clean out 99% of everything, and then run Spybot after it since one will pick up what the other misses.

http://lavasoft.com/

http://www.safer-networking.org/index2.html

-S
__________________
SUBMAN1 is offline   Reply With Quote
Old 07-21-08, 07:36 PM   #3
nikimcbee
Fleet Admiral
 
nikimcbee's Avatar
 
Join Date: Jul 2003
Location: Patroling the Slot.
Posts: 17,927
Downloads: 90
Uploads: 0


Default

Quote:
Originally Posted by SUBMAN1
Quote:
Originally Posted by nikimcbee
On my old computer, something has messed with Explorer. When I go to log on the internet, some program hijacks it at says I need to download their program . The virus scans don't pick anything up (I have norton) but it stops it from installing when you click on the window pop-up. The spyware programs also say everything is okay. Firefox runs, so I've re-downloaded IE7 and the security updates. But they didn't seem to help. Any ideas on how to find this program and kill it?
Run AdAware from Lavasoft. It should clean out 99% of everything, and then run Spybot after it since one will pick up what the other misses.

http://lavasoft.com/

http://www.safer-networking.org/index2.html

-S
I have adaware, but something was blocking it from updating . I've got it updating and re-running scan. I re-installed IE7, it runs the first time but the second time it runs, it brings up the critical error window, please download the program. I'm making progress, I think...
__________________
nikimcbee is offline   Reply With Quote
Old 07-21-08, 08:33 PM   #4
Monica Lewinsky
Grey Wolf
 
Join Date: Mar 2007
Posts: 845
Downloads: 11
Uploads: 0
Default

Is it possible for you to remove that hard drive on a temp basis and put it another PC of yours ; then scan? The advantage of doing that it is not a bootable drive which might confuse the virus/spyware and remove it or kill it using the temp PC? I have had a lot of luck using this approach avoiding a total reformat of the bum hard drive.

Of course you expose the other machine a SLIGHT risk of the same infection ... but... by making a suspected h.d. as a secondary drive, it is SO MUCH EASIER to clean it up than beating yours brains out if using it as the boot drive in the secondary PC.

Just a suggestion.
__________________


Sink them all!
Monica Lewinsky is offline   Reply With Quote
Old 07-21-08, 08:37 PM   #5
raymond6751
Admirable Mike
 
raymond6751's Avatar
 
Join Date: Mar 2004
Location: Canada
Posts: 1,338
Downloads: 421
Uploads: 0
Default hijack this

I had a similar problem last year. I recall there was a program called Hijack This or something. Google with the word hijack and you may find it.

You have got a hijacker that has attached itself in your favourites, I think.

Anyway, good luck.
__________________
Game Designer:
Close The Atlantic - World War Three
https://boardgamegeek.com/boardgame/...orld-war-three
raymond6751 is offline   Reply With Quote
Old 07-21-08, 08:38 PM   #6
nikimcbee
Fleet Admiral
 
nikimcbee's Avatar
 
Join Date: Jul 2003
Location: Patroling the Slot.
Posts: 17,927
Downloads: 90
Uploads: 0


Default

Quote:
Originally Posted by Monica Lewinsky
Is it possible for you to remove that hard drive on a temp basis and put it another PC of yours ; then scan? The advantage of doing that it is not a bootable drive which might confuse the virus/spyware and remove it or kill it using the temp PC?

Of course you expose the other machine a SLIGHT risk of the same infection ... but... by making a suspected h.d. as a secondary drive, it is SO MUCH EASIER to clean it up than beating yours brains out if it is the boot drive.

Just a suggestion.
Ha, funny you should mention that. That's how I fixed my super old computer, I just took the hard drive out, plugged it in as a secondary drive and scanned it. I was able to recover what I wanted off the drive.

My other computer is okay (I think), it's just that something has messed with IE. Firefox runs just fine .
__________________
nikimcbee is offline   Reply With Quote
Old 07-21-08, 08:39 PM   #7
nikimcbee
Fleet Admiral
 
nikimcbee's Avatar
 
Join Date: Jul 2003
Location: Patroling the Slot.
Posts: 17,927
Downloads: 90
Uploads: 0


Default

Quote:
Originally Posted by raymond6751
I had a similar problem last year. I recall there was a program called Hijack This or something. Google with the word hijack and you may find it.

You have got a hijacker that has attached itself in your favourites, I think.

Anyway, good luck.
Good idea, I'll look into that.
__________________
nikimcbee is offline   Reply With Quote
Old 07-21-08, 08:58 PM   #8
Monica Lewinsky
Grey Wolf
 
Join Date: Mar 2007
Posts: 845
Downloads: 11
Uploads: 0
Default

Quote:
Originally Posted by raymond6751
I had a similar problem last year. I recall there was a program called Hijack This or something.
All that program does is tell you that you are screwed. It does very little to solve the problem other than stop the auto-starts that MIGHT be the cause of the problem[s].
__________________


Sink them all!
Monica Lewinsky is offline   Reply With Quote
Old 07-21-08, 09:41 PM   #9
SUBMAN1
Rear Admiral
 
Join Date: Apr 2005
Posts: 11,866
Downloads: 0
Uploads: 0
Default

Quote:
Originally Posted by Monica Lewinsky
Quote:
Originally Posted by raymond6751
I had a similar problem last year. I recall there was a program called Hijack This or something.
All that program does is tell you that you are screwed. It does very little to solve the problem other than stop the auto-starts that MIGHT be the cause of the problem[s].
His words are true - good for finding stuff, and if you aren't good at manual manipulation, Hijack will not do anything for you which is why i don't even mention it.

Pull up a run menu and type in msconfig. That will allow you to selectively control what programs start up. You can safely disable everything in the start tab, but you may get some not so friendly errors under normal operation.

Anyway, disable everything and then run Spybot. Try Spybot if Adaware is having issue.

What ticks me off on Adaware is that I was on its testing committee back during the Becky forum days, and back then they were always telling us it would be 100% free forever. Seems you must buy it now days if you want full functionality. Spybot is still 100% free by the way.

-S
__________________
SUBMAN1 is offline   Reply With Quote
Old 07-22-08, 01:26 AM   #10
JHuschke
XO
 
Join Date: May 2008
Location: Munich, Germany
Posts: 432
Downloads: 32
Uploads: 0
Default

What are you using? You should get a better firewall, get ZL.

http://www.zonealarm.com/store/content/home.jsp

It's what I use, hunts em down and kills em.
JHuschke is offline   Reply With Quote
Old 07-22-08, 03:01 AM   #11
Skybird
Soaring
 
Skybird's Avatar
 
Join Date: Sep 2001
Location: the mental asylum named Germany
Posts: 41,432
Downloads: 9
Uploads: 0


Default

This would be the time for me to turn on paranoid mode, since éven after a "repair" I am not able to put trust in my installation anymore. I would format and reinstall, not using any saved data from the time period since you became aware of something beeing messed up.

Guys, use an installation image on a separate drive to do a backup of your basic installation. that way reinstallaing is a breeze, only updates and working files/save games you need to copy over by hand. This has been one of the best investments in my PC I ever did. Acronis software 45 euros, second HD in frame 50-60 euros - "und gut is'. " just do not leave the image HD connected to the computer, so that it cannot get infested. Physical separation/interruption is always a million times better than any software solution to protect a device from something - every software code can be beaten.
__________________
If you feel nuts, consult an expert.
Skybird is offline   Reply With Quote
Old 07-22-08, 03:08 AM   #12
d@rk51d3
Sea Lord
 
Join Date: Sep 2006
Location: Adelaide, South Australia
Posts: 1,933
Downloads: 207
Uploads: 0
Default

Also, try booting into "safe mode" first , THEN run your scans. You'll usually detect even more nasties.
d@rk51d3 is offline   Reply With Quote
Old 07-22-08, 04:11 AM   #13
SteveW1
Watch Officer
 
Join Date: Dec 2005
Location: Melbourne, Australia
Posts: 331
Downloads: 75
Uploads: 0
Default

I had this same situation recently myself, every time I opened up explorer an advert would load instantly telling me to download their program.

I tried multiple adware programs as well as virus scanners, they wouldn't pick up diddly squat so in the end I backed up 8 DVD's worth of data and reformatted my hard drive.

No problems now after formating and reinstalling.

Hope you get your problem sorted nikimcbee.

Steve
__________________
SteveW1 is offline   Reply With Quote
Old 07-22-08, 04:17 AM   #14
kiwi_2005
Eternal Patrol
 
Join Date: May 2004
Location: Aeoteroa
Posts: 7,382
Downloads: 223
Uploads: 1
Default

Hijacked. I got a similar one once, Spybot killed it.
__________________
RIP kiwi_2005



Those who can't laugh at themselves leave the job to others.



kiwi_2005 is offline   Reply With Quote
Old 07-22-08, 05:07 AM   #15
Skybird
Soaring
 
Skybird's Avatar
 
Join Date: Sep 2001
Location: the mental asylum named Germany
Posts: 41,432
Downloads: 9
Uploads: 0


Default

Quote:
Originally Posted by SteveW1
I tried multiple adware programs as well as virus scanners, they wouldn't pick up diddly squat so in the end I backed up 8 DVD's worth of data and reformatted my hard drive.
You must be aware that it holds a risk to create backups from the time your system already has been affected. It is better to do regular backups, or incremental backups, of your wokring files, and have three sets of them from the past three (or how many you want) timestamps, so that you can always go back to a backup originating from a time when everything still was in order. else you reinstall your system, copy your infested data back to it - and you are were you started, in the middle of the mess.
__________________
If you feel nuts, consult an expert.
Skybird is offline   Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 06:42 PM.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright © 1995- 2024 Subsim®
"Subsim" is a registered trademark, all rights reserved.