Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cleanmgr/temp Files/web Page Re-direct


  • Please log in to reply
3 replies to this topic

#1 godmode88

godmode88

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:09:16 PM

Posted 08 September 2008 - 01:28 PM

Hello,
I am running XP media center edition with Service Pack 2 on an HP Pavilion a1340n with 190GB of free space and a Pentium 4 processor. I recently noticed that whenever I click on a link of any type, I am sent to some random web page(like yellowbook or click2find) when the link is for an ESPN web page. I am currently running Avira Antispyware and I am being told I have a "TR/Spy.Gen" and it seems to transform into another file when I try to delete it. I have also tried to locate the files manually but when I trace the path, the file where the virus seems to be located doesn't exist. I went to the step-by-step section that says to run cleanmgr to delete temp files and then says to install ad-ware protection and so on but I ran into a few problems. First is that Cleanmgr runs for about 5 seconds before I get the "Disk Space Cleanup Manager for Windows has encountered a problem and needs to close. We are sorry for the inconvenience." This message comes up every time. So I tried to just install the recommended ad-ware tool and was successful, but when I try to update the defenitions, I am told that I can't connect and to check my connection. My connection is good because I downloaded the installer. I proceeded to open up the temp files manually with START->RUN->%TEMP%, and then just delete those files manually but some would not delete because they were in use by another person or program. The name of the file was "Perflib_Perfdata_f68" which is just a DAT file. No one else is logged on and I am not running any other programs. The trojan appears in a Symantec folder or Norton folder but I removed Norton from my CPU a while back and I can't seem to get rid of or even locate the source. I try to update Windows but Microsoft cannot validate my CPU, even when I try it manually because windows doesn't recognize publisher. Therefor, I can't use the microsoft online scanner.Any help?

Edited by godmode88, 08 September 2008 - 01:33 PM.


BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:03:16 AM

Posted 08 September 2008 - 01:41 PM

Can you download and run the Norton Anti-Virus Uninstaller?

#3 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:11:16 PM

Posted 08 September 2008 - 01:52 PM

I'd suggest one of these free online scans to ensure that you're not infected:
(Be advised that some of these scanners will pickup things in "quarantine" from other anti-virus programs - so review the results carefully)

http://housecall.trendmicro.com
http://www.pandasecurity.com/homeusers/solutions/activescan/
http://www.kaspersky.com/virusscanner Scan Only - no removal
http://www.bitdefender.com/scan8/ie.html
http://support.f-secure.com/enu/home/ols.shtml
http://us.mcafee.com/root/mfs/default.asp
http://onlinescan.avast.com/
http://ca.com/us/securityadvisor/virusinfo/scan.aspx
http://www.eset.com/onlinescan/



Perhaps post in the Am I Infected? forum
http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#4 godmode88

godmode88
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:09:16 PM

Posted 08 September 2008 - 07:04 PM

First I ran the norton uninstall. Next I ran the first few online scanners suggested which just ended up causing the internet explorer to crash without ANY warning or error messages. Then I went to the "Am I infected?" forum and there was a thread discussing a program called Malewarebytes, which I proceeded to install, updated, and scan. I had trojan downloader of sorts which I deleted. Disk Cleanup works. No more highjacked links, and all TEMP files were able to be deleted. I then ran the Avira Antivirus scan which found a few other trojans but none as malicious and all appear to be deleted. Thanks guys. On to SPORE.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users