Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Please Help, 404 error nginx won't go away


  • Please log in to reply
1 reply to this topic

#1 dryan1976

dryan1976

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:10:20 PM

Posted 04 April 2012 - 12:55 PM

i'm at the end of my rope, here. i too have this damn 404 error nginx trojan (i think it might also be called the qhost trojan, but i'm not sure), but my situation is a little different. i actually removed it for about 5 minutes, but after leaving and coming back after the fix, my computer had an "unexpected error" and nginx was back. making it worse, the cmd method (changing the hosts file in the win32 folder) that worked before, now doesn't work. here's what i tried:

in my first try, i downloaded Norton Power Eraser and ran a scan, but i haven't found any specific directions of how to use it other than just running a scan. of course, this didn't work.

then i found a method to use the cmd line program to fix the hosts file. i did this, and magically it worked! i was truly amazed. i was using a different computer because i couldn't work on my infected computer. when i left and came back, that was when the nginx trojan came back. like i said, i tried the same cmd method as before, but no luck.

i found another "solution" that said that PC Doctor should find it and fix it, but after downloading it and running it, it didn't find anything.

i'm incredibly p*ssed off about this, and should i ever find the person that did this, God help them because i'd end up doing something bad and ending up in jail for it! PLEASE, PLEASE, HELP. i'm proficient enough with computers, but i can't seem to find the answer. any help would be GREATLY appreciated. thanks.

by the way, i found out an easy way to test for this trojan (at least on my computer). for some reason, the trojan won't do searches for anything in quotations. so if you search for "404 error" and hit enter, it will search and search but nothing will come up. if you type something before it, like - how to fix "404 error" it will come up with the search results only for the - how to fix part. just an FYI for anyone not sure if they've got this trojan.

Edit: Moved topic from Web Browsing/Email and Other Internet Applications to the more appropriate forum. ~ Animal

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:09:20 PM

Posted 06 April 2012 - 11:36 PM

Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)


Please download GMER from here(doesnot work on 64 bit OS)

http://www2.gmer.net/download.php

Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.

GMER will open to the Rootkit/Malware tab and perform an automatic Full Scan when first run. (do not use the computer while the scan is in progress)

If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.
Now click the Scan button. If you see a rootkit warning window, click OK.
When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.
Click the Copy button and paste the results into your next reply.


Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users