Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Internet Explorer And Possible Malware


  • Please log in to reply
8 replies to this topic

#1 Coyote Commander

Coyote Commander

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:04 AM

Posted 19 April 2008 - 10:59 PM

A few days ago I ran into some problems with a potential Trojan Horse/malware. Normally my course of action would be to identify the Trojan process in Task Manager, stop it, and restore my computer to an earlier date.

Unfortunately, I was not able to identify the process. Through searching my hard-drive, I was able to determine that the following files were created at the time of infection:

qaszpurn
iifddAQK.dll
jfiehayd.dll
ljJAQJCv.dll

I read your help topics and installed SDFix. This removed the qaszpurn file, as well as other spyware. I also installed AD-AWARE which found a previously unknown Trojan.

However, as soon as I open Internet Explorer, it seems as if the problem returns: pop-ups telling me that my computer is infected and that I should visit certain sites to solve the problem. This was not a huge dilemma as I mostly use Firefox for my internet needs.

Now, as well, when I surf on Firefox, Google search results, as well as Facebook are not loading. It is constantly "waiting on Facebook/Google".

In short, I am extremely worried that I am still infected and am afraid to access critical personal sites (I.e. Banking, etc.)

Any help or comments are welcome.

Thanks again.

BC AdBot (Login to Remove)

 


#2 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:03:04 PM

Posted 20 April 2008 - 10:28 AM

may we assume you are on an XP machine?
if you look at the spyware removal section on this topic

http://www.bleepingcomputer.com/forums/topic3616.html

you can find links to several programs you may not as yet have tried?

try a few of them to start with, if they flag up anythng post the reports here for the experts to check over ?

you might also wish to give the report from the SDfix you ran for the Experts to examine?

#3 Coyote Commander

Coyote Commander
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:04 AM

Posted 20 April 2008 - 12:42 PM

Thanks Ruby, I'll try those out.

And yes, it is an XP operating system.

Edited by Coyote Commander, 20 April 2008 - 12:42 PM.


#4 Coyote Commander

Coyote Commander
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:04 AM

Posted 20 April 2008 - 01:19 PM

OK,

I installed and ran Spybot Search and Destroy, as well as Spyblaster.

It was insane how many files S-S&D picked up. But there were two files that it was unable to fix and an error message reading "Unable to run DelZip179.dll" and (Out of Memory) came up.

These messages are quite troubling, anyone else had this problem?

#5 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:03:04 PM

Posted 20 April 2008 - 05:12 PM

from this link; http://www.bleepingcomputer.com/forums/topic3616.html

have you tried a2 and superantispyware yet?

you might run both of them and post back their logs for the team to check out?

once you post a report or a log from one of these scans it can give the experts a clue as to what may be amiss and advise on appropriate tools to use to clean you :thumbsup:

#6 Coyote Commander

Coyote Commander
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:04 AM

Posted 20 April 2008 - 09:06 PM

I think I got rid of it. Thanks to all!

#7 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,917 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:04 AM

Posted 20 April 2008 - 10:37 PM

If you no longer are having the symptoms..
Now you should Set a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since System Restore is a protected directory, your tools can not access it to delete these bad files which sometimes can reinfect your system. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:
  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then use Disk Cleanup to remove all but the most recently created Restore Point.
  • Then go to Start > Run and type: Cleanmgr
  • Click "OK".
  • Click the "More Options" Tab.
  • Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#8 Coyote Commander

Coyote Commander
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:04 AM

Posted 08 May 2008 - 08:47 AM

Ok, after many attempts, I thought I had beaten this infection, but I think I have it narrowed down to the Virtumonde program/virus/trojan.

Any ideas on how to kill it?

#9 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,917 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:04 AM

Posted 08 May 2008 - 09:41 PM

Please run thru this BC slf help tutoeial
How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users