Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I Got This Too88.80.7.66, A.doginhispen, B.skitodayplease


  • Please log in to reply
11 replies to this topic

#1 cosp600rr

cosp600rr

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:56 PM

Posted 05 February 2008 - 03:06 PM

I have read through some of the other post about this and wondered if I should follow there steps or get help from some one. Thanks for the help

I am using windows xp. It opens those pages all by itself and also kicks me off line when ever it wants. Please help.

BC AdBot (Login to Remove)

 


#2 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:03:56 AM

Posted 05 February 2008 - 03:36 PM

What scan have you run that has shown you this item / infection and what protection programs have you got on there? when did you last fully update and run them ?

#3 cosp600rr

cosp600rr
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:56 PM

Posted 05 February 2008 - 03:56 PM

Those pages show up when I open another page. I can see them on the tabs at the top of the page. All I have for protection is spyware docter. But some times the page I am on will shut off all by itself. Like I closed the page.

it happens most right after I start the computer

#4 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:03:56 AM

Posted 05 February 2008 - 04:02 PM

to start with you could try running these FREE programs on full deep scans

http://www.superantispyware.com/

http://www.emsisoft.com/en/software/free/

do you not have an antivirus program installed?

download, fully update, reboot and run each separately to see what they find?

do you have SP2 installed on that XP machine? and are all your Windows updates fully up TO date?

also try running Trend on line scan; it may take a time to first download and update the definitions file but worth it
http://housecall.trendmicro.com/

Edited by ruby1, 05 February 2008 - 04:05 PM.


#5 cosp600rr

cosp600rr
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:56 PM

Posted 05 February 2008 - 04:43 PM

windows is full up to date. am running super anti spyware now. might take a while.

#6 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:03:56 AM

Posted 05 February 2008 - 05:29 PM

what is your antivirus program?





you many also wish to try

spybot

http://www.spybot.info/en/mirrors/index.html
adaware 2007
http://www.lavasoftusa.com/products/ad_aware_free.php

and
this stand- alone Stinger (does NOT require an update)

http://vil.nai.com/vil/stinger/


http://vil.nai.com/vil/stinger/

ALL of these are FREE

see how you get on with those and report back

thsi lot may take a few hours to run ON full deep scans so be aware :thumbsup:

#7 cosp600rr

cosp600rr
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:56 PM

Posted 05 February 2008 - 05:53 PM

I ran the first 2 you recomended and the super anti spyware found 574 risky files. got rid of those and then ran a-squared and found 5 more. got ride of those and rebooted. So far so good. Havent seen those windows pop up and hasn't kicked me off line. maybe got them.

How come I didn't have to do what everybody slde is having to do with the same symptoms. Maybe it will come back and I will have to do them later. I'll keep you up to date with it. Thanks for your help

PS I have symantic anti virus

Edited by cosp600rr, 05 February 2008 - 05:54 PM.


#8 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:03:56 AM

Posted 05 February 2008 - 06:05 PM

if you look at this

http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/


these are basic scans you need to run to start the clean up process and to allow the specialists on here to see what the infection might be and how to treat it :thumbsup:

#9 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,011 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:10:56 PM

Posted 06 February 2008 - 12:14 AM

Hello cosp600rr and welcome to BC,

Before running off to the HJT forum, which is extremely busy, let's see what else we can do here.

You have difficult infection to get rid of. It is related to downloader.awf and it replaces many legitimate files with bad ones. The good ones are put into backup files. The bad ones are put where the good ones should be and when you run the programs, the malware runs instead. To see if you are infected

Download FindAWF.exe by noahdfear and save to your desktop.
  • Double-click on FindAWF.exe to start.
  • If a "Security Alert" shows, allow the program to run.
  • A command prompt will open and ask you to "Press any key to continue...".
  • You will be presented with a Menu.
  • Press 1 then 'Enter' to scan for bak folders
  • When complete, it will open a text file in notepad called AWF.txt which will automatically be saved to your desktop.
  • Copy and paste the contents of the awf.txt file in your next reply.
Also you should read "How can I clear browser history? IE, Firefox, Mozilla, Netscape, Opera".

(Thanks quietman7)

Orange Blossom :thumbsup:

Edited by Orange Blossom, 06 February 2008 - 12:15 AM.

Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#10 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:03:56 AM

Posted 06 February 2008 - 03:59 AM

Hello cosp600rr and welcome to BC,

Before running off to the HJT forum, which is extremely busy, let's see what else we can do here.





just to perhaps clarify; I was in no way suggesting you DO post a Log at this point in time but my link was intending to indicate the variety of scans that should be run as a preamble TO enable the Team to see what type of infection IS/or is NOT on board :thumbsup:

#11 cosp600rr

cosp600rr
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:56 PM

Posted 06 February 2008 - 08:13 AM

This is what I did........Deleted all cookies and temp files and passwords and history. Cam on the website here and asked for help. Got a bunch of links to try and did that. I did the super anti spyware first. robooted computer. Then I downloaded the second link, emsisoft, ran it and then rebooted computer. Then I deleted my history and cookies and everything again and now I show no signs of it returning. Its not in my history and my computer is not leaving websites on its own.....nothing. So for so good. I'll keep you up to date on it. Thanks for the help. Later

#12 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,011 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:10:56 PM

Posted 06 February 2008 - 05:13 PM

Hello cosp600rr

Just to be sure that you are not still infected, please run the AWF program I mentioned in my previous post. This infection is stubborn and has been known to reappear after folks thought it vanquished. Please be sure to post the log in your reply.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users