Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trojan Virus


  • Please log in to reply
2 replies to this topic

#1 mikol1225

mikol1225

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:04:25 AM

Posted 15 August 2007 - 10:00 AM

Hello,
My fiancee's moms computer have been infected with a few trojan virus...Trojan startpage 19992, Trojan virtumod, Trojan Ezuland and Trojan Downloader 24772. I have search through this forum but have not come across and cases similar to mine. Most of the solutions seem simple enough, but my problem is that every time I try to open up Internet Explore a different homepage is opened up you know kind of like pop ups...download free music or get something else free. It never opens up to the original homepage. And when I try to type in an address and and go to another page I get the error message from Internet explorer...the one that asks if you want to sent the error report or not. How to I go about solving this problem. I'm not computer illiterate but i am not a genius either. But I have common sense and some basic knowledge.
Thank you
Mike

Edited by KoanYorel, 15 August 2007 - 10:36 AM.
Moved from Win XP forum


BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,300 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:03:25 AM

Posted 15 August 2007 - 10:47 AM

Use the Vundofix tool in the link below.
http://www.atribune.org/content/view/24/2/

Follow up with directions below.

Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/

Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.
http://www.bitdefender.com/scan8/ie.html

--------------------------------------------------------------------------------

Post a Hijack This log in the Hijack This Forum by following the directions in the link below. DO NOT post the log in this forum.
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
--------------------------------------------------------------------------------

How to Start Windows in Safe Mode:
http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,726 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:25 AM

Posted 15 August 2007 - 12:23 PM

Some variants of vundo may not be detected by vundofix so the "add more files" option is another way of ridding this malware. However, these files need to be identified and posting a hijackthis log will enable an expert to advise you which files to add if you continue to have problems.

Also some variants of this malware will hide certain entries in a hijackthis log to prevent detection so you need to rename HijackThis before before using it. After installation, open the HijackThis Folder, find the HijackThis.exe file, right-click on it and select "rename". Type Analyze.exe and hit "Enter". Double-click on Analyze.exe (which is still HijackThis) run a scan, save the logfile and copy/paste it into the new thread you start in the HJT forum.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users