BleepingComputer.com: Unable to Locate/Remove Malware [Moved]

Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Unable to Locate/Remove Malware [Moved]

#1 User is offline   ncsugrad07 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 1
  • Joined: 03-July 09

Posted 03 July 2009 - 02:11 PM

Hi all,

I was recently plagued with the AntivirusPlus trojan, and thankfully have been able to remove (I hope) almost all of it from my system. However I'm still having trouble with my internet browser. I am having 2 problems.

1. I cannot access my google mail. This is the only webpage I'm having trouble with. First I get a message saying there is a problem with the security certificate, but when I choose to ignore the message and continue anyway I receive the HTTP 404 message saying the webpage cannot be found. The date and time on my computer are correct (I've seen some forums about resetting those to take care of the problem with the security certficate).

2. On certain browser searches, when I click on a link I am redirected to an unrelated page, usually an advertisement. This happens about half the time.

I have done system sweeps with Norton, Spybot S&D, and MBAM. Each program has removed a couple of unwanted files, but the 2 problems listed above still exist. I also downloaded the Windows XP Service Pack, and still no change.

I followed the directions listed and ran Combofix and have a log file ready to post if that information will help.

Any suggestions?

Thanks so much!

#2 User is offline   Orange Blossom 

  • OBleepin Investigator
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 29,400
  • Joined: 14-July 06
  • Gender:Not Telling
  • Location:Bloomington, IN

Posted 03 July 2009 - 09:43 PM

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.

==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

Quote

I followed the directions listed and ran Combofix


Please note that ComboFix is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert." It is NOT for private use. Please read Combofix's Disclaimer. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.

View PostPapakid, on Mar 1 2009, 09:30 PM, said:

Running ComboFix by yourself is like performing open heart surgery on yourself--the scalpel and other surgical tools that is ComboFix is meant to be wielded by a highly trained surgeon only in emergencies or dire circumstances. When the surgeon is thru s/he leaves the room. So combofix should be removed from a system once it has accomplished its job, unlike an AV that is there to protect you from future infections.

. . . CF does make some alterations to your system if you run it. Even if you had no malware removed and run the uninstall command, some things may be different now on your system. I can tell you that one thing is that all your restore points will be flushed out and a new one created. There is a good reason to do that when you have a severe infection--but if you aren't infected you might need those restore points.

Read and abide by the disclaimer people. It's there for a reason. Stick to running and protecting yourself with a good AV and firewall and an anti-malware scanner or two. If you feel you need a second opinion, try running online scans. If you feel you might need surgery, come here to BC and ask for help--that is what we're here for.


From: http://www.bleepingcomputer.com/forums/ind...t&p=1159014

That said:

Quote

On certain browser searches, when I click on a link I am redirected to an unrelated page, usually an advertisement. This happens about half the time.


Which browser(s) does this occur in?

What kinds of ads are you redirected to? Please do not post live links.
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom
An ounce of prevention is worth a pound of cure
SuperAntiSpyware, SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users