Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Unable to Locate/Remove Malware [Moved]

  • Please log in to reply
1 reply to this topic

#1 ncsugrad07


  • Members
  • 1 posts
  • Local time:02:32 AM

Posted 03 July 2009 - 02:11 PM

Hi all,

I was recently plagued with the AntivirusPlus trojan, and thankfully have been able to remove (I hope) almost all of it from my system. However I'm still having trouble with my internet browser. I am having 2 problems.

1. I cannot access my google mail. This is the only webpage I'm having trouble with. First I get a message saying there is a problem with the security certificate, but when I choose to ignore the message and continue anyway I receive the HTTP 404 message saying the webpage cannot be found. The date and time on my computer are correct (I've seen some forums about resetting those to take care of the problem with the security certficate).

2. On certain browser searches, when I click on a link I am redirected to an unrelated page, usually an advertisement. This happens about half the time.

I have done system sweeps with Norton, Spybot S&D, and MBAM. Each program has removed a couple of unwanted files, but the 2 problems listed above still exist. I also downloaded the Windows XP Service Pack, and still no change.

I followed the directions listed and ran Combofix and have a log file ready to post if that information will help.

Any suggestions?

Thanks so much!

BC AdBot (Login to Remove)



#2 Orange Blossom

Orange Blossom

    OBleepin Investigator

  • Moderator
  • 36,693 posts
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:02:32 AM

Posted 03 July 2009 - 09:43 PM

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.

==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

I followed the directions listed and ran Combofix

Please note that ComboFix is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert." It is NOT for private use. Please read Combofix's Disclaimer. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.

Running ComboFix by yourself is like performing open heart surgery on yourself--the scalpel and other surgical tools that is ComboFix is meant to be wielded by a highly trained surgeon only in emergencies or dire circumstances. When the surgeon is thru s/he leaves the room. So combofix should be removed from a system once it has accomplished its job, unlike an AV that is there to protect you from future infections.

. . . CF does make some alterations to your system if you run it. Even if you had no malware removed and run the uninstall command, some things may be different now on your system. I can tell you that one thing is that all your restore points will be flushed out and a new one created. There is a good reason to do that when you have a severe infection--but if you aren't infected you might need those restore points.

Read and abide by the disclaimer people. It's there for a reason. Stick to running and protecting yourself with a good AV and firewall and an anti-malware scanner or two. If you feel you need a second opinion, try running online scans. If you feel you might need surgery, come here to BC and ask for help--that is what we're here for.

From: http://www.bleepingcomputer.com/forums/ind...t&p=1159014

That said:

On certain browser searches, when I click on a link I am redirected to an unrelated page, usually an advertisement. This happens about half the time.

Which browser(s) does this occur in?

What kinds of ads are you redirected to? Please do not post live links.
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users