Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Remove trkme virus


  • Please log in to reply
9 replies to this topic

#1 allywdb

allywdb

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:57 PM

Posted 28 March 2013 - 02:45 PM

I am plagued with the trikme virus which appears when hovering over hyperlinks. It displays an ad for a competition to win an Iphone or Ipad. I have tried Norton Power Eraser, Hitman pro, Malwarebytes, adwcleaner, tdsskiller but none have cleared the problem. I am running Win7 Home Edition. Can someone come to my rescue please?  Allywdb

 

*Moderator Edit: Moved topic from AntiVirus, Firewall and Privacy Products and Protection Methods to the more appropriate forum. ~ Queen-Evie*


Edited by Queen-Evie, 28 March 2013 - 02:55 PM.


BC AdBot (Login to Remove)

 


#2 allywdb

allywdb
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:57 PM

Posted 28 March 2013 - 03:31 PM

To which forum have you moved it?



#3 Animal

Animal

    Bleepin' Animinion


  • Site Admin
  • 35,552 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Where You Least Expect Me To Be
  • Local time:08:57 AM

Posted 28 March 2013 - 04:09 PM

The forum you followed the link to as shown at the top of the page: Am I infected? What do I do?

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown (1938-1994)


A learning experience is one of those things that say, "You know that thing you just did? Don't do that." Douglas Adams (1952-2001)


"Imagination is more important than knowledge. Knowledge is limited. Imagination circles the world." Albert Einstein (1879-1955)


Follow BleepingComputer on: Facebook | Twitter | Google+

#4 allywdb

allywdb
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:57 PM

Posted 28 March 2013 - 05:26 PM

thank you



#5 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,430 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:57 AM

Posted 28 March 2013 - 07:51 PM

Welcome ,,this sounds to me to be a Text Enhance malware. This hijacker  usually attacks thru add- ons and/or cookies.
 
So lets do this.
 
I don't know your browser so....
 
Clear my web browser's cache, cookies, and history?
 
In FireFox it may be the Add ons/Plugins. try disabling them one at a time and see which one was at fault.
[url="How[/url] to disable extensions and plugins
Keeping your third-party plugins up to date
In Chrome it may be the Add ons/Plugins. try disabling them one at a time and see which one was at fault.
OR Disable All Extensions ,see if that worked,then you need to go back to one by one to see which ps the culprit.


Edited by boopme, 28 March 2013 - 07:52 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,430 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:57 AM

Posted 28 March 2013 - 07:54 PM

Due to coding issues I'm having I'm posting this separate.
 
Run SAS next ...
 
 
Please download and scan with SUPERAntiSpyware Free
  • Double-click SUPERAntiSypware.exe and use the default settings for installation. For instructions with screenshots, please refer to the How to use SUPERAntiSpyware to scan and remove malware from your computer Guide.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If it will not start, go to Start > All Prgrams > SUPERAntiSpyware and click on Alternate Start.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.
  • )
  • In the Main Menu, click the Preferences... button.
  • Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
  • Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all other options as they are set):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.
  • Click the "Close" button to leave the Control Center screen.
    • Back on the main screen, under "Select Scan Type" check the box for Complete Scan.
    • If your computer is badly infected, be sure to check the box next to Enable Rescue Scan (Highly Infected Systems ONLY).
    • Click the Scan your computer... button.
    • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
    • Make sure everything has a checkmark next to it and click "Next".
    • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
    • If asked if you want to reboot, click "Yes" and reboot normally.
  • To retrieve the scan log after reboot, launch SUPERAntiSpyware again.
    • Click the View Scan Logs button at the bottom.
    • This will open the Scanner Logs Window.
    • Click on the log to highlight it and then click on View Selected Log to open it.
    • Copy and paste the scan log results in your next reply.
    -- Some types of malware will disable security tools. If SUPERAntiSpyware will not install, please refer to these instructions for using the SUPERAntiSpyware Installer. If SUPERAntiSpyware is already installed but will not run, then follow the instructions for using RUNSAS.EXE to launch the program.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 allywdb

allywdb
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:57 PM

Posted 31 March 2013 - 08:02 AM

Hi Boopme

Followed instructions and no errors found. Problem Remains

Log attached:-

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 03/31/2013 at 01:38 PM

Application Version : 5.6.1014

Core Rules Database Version : 10201
Trace Rules Database Version: 8013

Scan type       : Complete Scan
Total Scan Time : 00:26:36

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned      : 807
Memory threats detected   : 0
Registry items scanned    : 75244
Registry threats detected : 0
File items scanned        : 12798
File threats detected     : 0



#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,430 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:57 AM

Posted 31 March 2013 - 01:17 PM

Hi allywdb

Appears that it must be beig protected by a driver or a service. To remove it, I think we should get a deeper look. Please follow this Preparation Guide and post in a new topic.
Let me know if all went well.


Include this link back to here... http://www.bleepingcomputer.com/forums/t/490081/remove-trkme-virus/


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 allywdb

allywdb
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:57 PM

Posted 03 April 2013 - 09:41 AM

Hi Guys

The problem turned out to be a package called PCSPEEDUP. I discovered the problem when looking at Addons to IE. This has now been recognised by Malwarebytes as a Malware package. Having uninstalled the package the problem has gone. Hopefully other AV providers will take note and add it to their list. Thanks a bunch Alastair



#10 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,430 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:57 AM

Posted 03 April 2013 - 07:44 PM

OK, that's cool to know. Thanks for that update. :thumbup2:


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users