Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


IE and Firefox redirecting and cannot post form data on web pages

  • This topic is locked This topic is locked
2 replies to this topic

#1 Inge1


  • Members
  • 2 posts
  • Local time:03:21 PM

Posted 25 February 2009 - 07:42 AM

Hi !
I have had some strange days with my Windows XP Pro SP3 computer having problems downloading all web pages.
Sometimes 100% of the page is coming to the web browser, sometimes nothing, and mostly something in between. Often the style sheet is missing which makes the page to look different...
I have also found out that I cannot post for instance the username and password (any HTML POST) so it is not possible to login at all forums etc (even this, now I am on another computer). GET method is working.

I have run scanning by AVG Free 8.0 without finding anything.

Have tried to install Malwarebytes Anti-Malware, but it will not be installed.
The Spybot S&D was installed successfully, seemed to run since it was visible in the systray, but it was impossible to open the GUI and do any scanning...
I also had problem installing HJT, but finally I got it in and it worked.

I have run the instructions "Preparation guide...." on this forum, and have now come to the step wher I shall post a new Topic...

Here is the result from the DDS execution.
Hope for a quick reply and solution.

RGDS / Inge

Attached Files

  • Attached File  DDS.txt   13.61KB   16 downloads

BC AdBot (Login to Remove)


#2 Inge1

  • Topic Starter

  • Members
  • 2 posts
  • Local time:03:21 PM

Posted 26 February 2009 - 05:32 AM

Hi, this is Inge1 again!
I finally got MalwareBytes Anti-Malware up and running by just changing the name of the .exe file, and then it ran nicely.

I made a full scan and found the Rootkit.TDSS/Trojan.Agent that had infected 8 files (see logfile below).
I could successfully use MB's suggested "Delete infected items" button and then reboot, and now I have re-run the full-scan without any found malware.
This issue is closed for me, you don't need to continue working with it...

/ Inge

Malwarebytes' Anti-Malware 1.34
Database version: 1805
Windows 5.1.2600 Service Pack 3

2009-02-26 09:23:37
mbam-log-2009-02-26 (09-23-37).txt

Scan type: Full Scan (C:\|)
Objects scanned: 186219
Time elapsed: 32 minute(s), 10 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 9

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\inge\Local Settings\Temp\UAC2f1d.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\UACiromyutu.dll (Rootkit.TDSS) -> Delete on reboot.
C:\WINDOWS\system32\UACldvwxvaq.dll (Trojan.TDSS) -> Delete on reboot.
C:\WINDOWS\system32\UACpsghlnyn.dll (Rootkit.TDSS) -> Delete on reboot.
C:\WINDOWS\system32\drivers\UACpjyonsae.sys (Rootkit.TDSS) -> Delete on reboot.
C:\WINDOWS\system32\uacinit.dll (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\UACbejeonhx.dll (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\UACcwybfyyb.dat (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\UACxuxdnroa.log (Trojan.Agent) -> Delete on reboot.

#3 KoanYorel


    Bleepin' Conundrum

  • Members
  • 19,461 posts
  • Gender:Male
  • Location:65 miles due East of the "Logic Free Zone", in Md, USA
  • Local time:10:21 AM

Posted 26 February 2009 - 09:31 AM

Thanks for informing us.

This Topic is closed.

Should you need it reopened, please contact a Forum Moderator. Include the address of this thread in your request.

If you have a new issue, please start a New Topic.

This applies only to the original poster. Everyone else please begin a New Topic.

The only easy day was yesterday.

...some do, some don't; some will, some won't (WR)

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users