Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Infected with viruses/trojans, pls help

  • This topic is locked This topic is locked
2 replies to this topic

#1 lalindsey


  • Members
  • 2 posts
  • Local time:01:17 PM

Posted 07 October 2008 - 10:31 AM

Hey guys!

I'm having some issues with my desktop. I'm not sure how long exactly it's been going on, so I'll give you some details and maybe you can help.

I just started working at home last week so I don't know if these problems have been going on before this or not. Last Thursday I was woke out of a dead sleep at 7am because my desktop speakers were blaring a rock song. I got up, a little scared ( :thumbsup: ) and logged onto my computer. The sounds kept switching, from the rock song, to some type of comedy tv show with a laugh track, to a cartoon sounding tv show. These clips stayed on for anywhere between 10-15 seconds. I thought at first my husband had been watching youtube and forgot to shut the browser window, but there were NO programs running. So I opened up the processes tab in task manager and saw IEXPLORE.EXE was running (even though no one EVER uses it - and it was not listed on the running programs tab). I ended the process and the sounds stopped.

As soon as it happened I researched this but couldn't find anything about a virus/trojan that plays random tv/radio sounds. Next while I was searching all of the sudden when i tried to click a link in google i was redirected (a new tab was opened in firefox instead of the link I clicked) to random other pages. I figured out after that one problem I had was the Antivirus 2009 trojan and downloaded the Mbam program, and ran it and it deleted several things. I reran it in the full scan mode the next morning where it found some more.

Than I ran three antiviruses that I have on my computer and each picked up several things that were quarantined and deleted.

In a perfect world my problem would have been resolved, but unfortunately it's not. My computer is still randomly playing music/sounds throughout the day. The google problem is back so that if i search something i have to copy the url below the listing instead of clicking the google link. This site (bleepingcomputer) as well as others (trend micro, etc) are blocked and I'm told I can't access them. Also, I now cannot update my Avira antivirus program OR the MBAM program.

I've managed to download hijack this by using a proxy server and have run it. I've emailed myself and I'm attaching my logs for hijack this, and the two scans I ran with MBAM from my laptop. Any help would be forever appreciated!

I really, really don't want to reformat so if I can go in and delete/edit/fix this myself I'd really like to.


Attached Files

Edited by lalindsey, 07 October 2008 - 10:34 AM.

BC AdBot (Login to Remove)


#2 Billy O'Neal

Billy O'Neal

    Visual C++ STL Maintainer

  • Malware Response Team
  • 12,304 posts
  • Gender:Male
  • Location:Redmond, Washington
  • Local time:10:17 AM

Posted 15 October 2008 - 10:58 PM

:thumbsup: to BleepingComputer.com

I want to apologise that it has taken so long to get back to you. We on the HJT Team are working as fast as possible to get your log answered.

If you do not still need help, please let me know, so that I can move on to other users who still need help.

Please take note of the following:
  • While a HJT Team member is working with you, please refrain from making any changes to your computer.
  • Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself. :)
  • If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
  • Please reply using the Posted Image button in the lower left hand corner of your screen.
  • Old topics are closed after 3 days with no reply, and working topics are closed after 5 days. If for any reason you cannot complete instructions within that time, that's fine, just put a post here so that I know you're still here. We get a lot of people who simply leave, and if there is no contact for that amount of time I will have to assume you have "vanished" :).
If you would still like help, please follow the instructions below:

We need to create an OTViewIt Report
  • Please download OTViewIt by OldTimer.
  • Save it to your desktop.
  • Double click on the Posted Image icon on your desktop.
  • Click the "Scan All Users" checkbox.
  • Push the Posted Image button.
  • Two reports will open, copy and paste them in a reply here:
  • OTViewIt.txt <-- Will be opened
  • Extra.txt <-- Will be minimized
Please do an online scan with Kaspersky WebScanner.
  • Please visit the Kaspersky Online Scanner website.
    Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.
  • Click on the Accept button and install any components it needs.
  • The program will install and then begin downloading the latest definition files.
  • After the files have been downloaded on the left side of the page in the Scan section select My Computer
  • This will start the program and scan your system.
  • The scan will take a while, so be patient and let it run.
  • Once the scan is complete, click on View scan report
  • Now, click on the Save Report as button.
  • Save the file to your desktop.
  • Copy and paste that information in your next post.
In your next reply, please include the following:
  • OTViewIt.txt
  • Extra.txt
  • Kaspersky's Log

Twitter - My statements do not establish the official position of Microsoft Corporation, and are my own personal opinion. (But you already knew that, right?)
Posted Image

#3 Billy O'Neal

Billy O'Neal

    Visual C++ STL Maintainer

  • Malware Response Team
  • 12,304 posts
  • Gender:Male
  • Location:Redmond, Washington
  • Local time:10:17 AM

Posted 18 October 2008 - 08:37 PM

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please send me or another moderator a PM.

Everyone else please begin a new topic.
Twitter - My statements do not establish the official position of Microsoft Corporation, and are my own personal opinion. (But you already knew that, right?)
Posted Image

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users