Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

MALWARE - Symatec - Search Engine infected


  • Please log in to reply
9 replies to this topic

#1 Danger_mouse

Danger_mouse

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:07:34 AM

Posted 17 October 2008 - 08:07 PM

I clicked on a website and my Symantec went mad lot off yellow boxes.

Since then, as soon as I connect to the Internet my Symantec Virus Icon has a Red Circle around it and pops up with a Yellow Box saying Auto Protect is disabled.

Sometimes a Yellow ! triangle appears which takes you to the page that caused the problem in the first place.

If I search for the something via an Engine I get results but clicking redirects you to another page, searching and then closing and then pasting the direct URL works.

I have got Spybot, AVG, Symantec Virus but obviously it is going under the radar and starting to annoy somewhat.

I have been advised that there are clever people here that could help me get rid otherwise it is a rebuild

Thanks

DM

BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:02:34 AM

Posted 17 October 2008 - 08:10 PM

I'll move this over to where the clever people hang out! :thumbsup:
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 Danger_mouse

Danger_mouse
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:07:34 AM

Posted 17 October 2008 - 08:14 PM

Thats here, I take it l-)

#4 mme

mme

  • Members
  • 400 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 17 October 2008 - 08:35 PM

Is this Symantec Corporate Edition.
You can repair it but using the symantec cd.
Run malwarebytes and leave the log posted.

http://majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html

I have Symantec Corporate Edition and had the same problem.
But for me it wasnt malware that disabled autoprotect.
But i was able to repair it with The Symantec Corporate Cd.

GOOD LUCK

#5 Danger_mouse

Danger_mouse
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:07:34 AM

Posted 18 October 2008 - 02:30 PM

I would think so as it was loaded by my Company.

Symantec Antivirus 10.1.5.5000

#6 Danger_mouse

Danger_mouse
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:07:34 AM

Posted 18 October 2008 - 03:33 PM

Malwarebytes' Anti-Malware 1.29
Database version: 1280
Windows 5.1.2600 Service Pack 2

10/18/2008 9:21:55 PM
mbam-log-2008-10-18 (21-21-49).txt

Scan type: Quick Scan
Objects scanned: 74264
Time elapsed: 23 minute(s), 37 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 4
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bf (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bk (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\iu (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\mu (Trojan.Agent) -> No action taken.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#7 Danger_mouse

Danger_mouse
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:07:34 AM

Posted 18 October 2008 - 04:27 PM

Second go has sorted it, I ran it in Safe Mode as Administrator and then logged on as me, items were set for delete so logging back on as Administrator has sorted my web problems.


Still an error with Symantec but will re-install, thanks.

#8 Danger_mouse

Danger_mouse
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:07:34 AM

Posted 18 October 2008 - 04:32 PM

Spoke too soon, that last post caused a Yellow ! Triangle system error and it's back!

#9 Danger_mouse

Danger_mouse
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:07:34 AM

Posted 18 October 2008 - 04:43 PM

Searching through a web engine sometimes takes me to related websites.

#10 Danger_mouse

Danger_mouse
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:07:34 AM

Posted 18 October 2008 - 04:44 PM

Please help as it is really getting to be a pain.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users