Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows VistaWindows XPWindows MeWindows 98Windows 95Virtual PCInternet ExplorerOutlook ExpressWindows MediaSecurity
Related Topics
MS Server ProductsMS OfficePC HardwareMore Topics ...

Windows Forum / Windows XP / New Users / April 2007

Tip: Looking for answers? Try searching our database.

Trojan Effects

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
TheScullster - 26 Apr 2007 16:15 GMT
Hi all

Can anyone help with a solution to the following please?

A user recently reported problems with IE links and zip files.
These manifested themselves by:
a) Links on IE pages simply result in a blank page, but if the link is
pasted into the browser edit box, the page is displayed.
b) Zip files refuse to extract with an error "Windows has blocked access to
these files to help protect your computer".

I suspect that the problems have been caused by spyware.
A recent scan with Ad-aware revealed win32.trojandownloader.tibs and
cool/websearch, both of which have been deleted.

Despite scan and delete of problems a) and b), the issues with IE and
Windoze zip remain.

Anyone any suggestions to rectify these please?

TIA

Phil
MowGreen [MVP] - 26 Apr 2007 22:26 GMT
Boot to Safe Mode with Networking

Then, using IE, go here: http://www.kaspersky.com/virusscanner
Click the 'Kaspersky Online Scanner' button
A window will popup. Click Accept.
Allow the installation of the ActiveX control

The system will return to the Agreement page so click Accept once more
Allow the installation of said ActiveX control
The system will now download the latest definitions
When done click Next
Click the Settings button and put a mark next to 'Extended'

Have the scanner scan the ENTIRE system. This will take around an hour
and a half but is well worth the wait <w>
When the scan is finished click the Expand Report button or, click the
Save Report button and save it as a .txt file. Use that as your guide.

Manually remove what you want to remove as the Kaspersky online scanner
only detects malware but does not remove it ... make sure that what is
removed is actual malware. This takes a bit of experience as there may
be False Positives {ex: Reboot.exe is included in certain malware fixes
but is not necessarily malware)

HTH,
MowGreen  [MVP 2003-2007]
===============
 *-343-*  FDNY
Never Forgotten
===============

> Hi all
>
[quoted text clipped - 19 lines]
>
> Phil
riva - 27 Apr 2007 17:56 GMT
hi im having the same trouble dont no whats wrong i keep getting a waring
saying i need to download a anti spy ware program but i have norton anti
viruses on and it is still getting through its saying i have a trojan
attacking the computer so if you have any ideas could you help me thanks
eileen

> Hi all
>
[quoted text clipped - 19 lines]
>
> Phil
Malke - 27 Apr 2007 19:19 GMT
> hi im having the same trouble dont no whats wrong i keep getting a waring
> saying i need to download a anti spy ware program but i have norton anti
> viruses on and it is still getting through its saying i have a trojan
> attacking the computer so if you have any ideas could you help me thanks
> eileen

Normally you would not want to post a new issue in the middle of someone
else's thread. Your problems are not the same as the Original Poster's.
However, for efficiency's sake here is the answer - you have some
variety of the Smitfraud trojan. Go through the preparatory steps here:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Then do the specific removal steps here:

http://www.elephantboycomputers.com/page2.html#Smitfraud_Trojan

Include scanning with either Sysclean or Multi_AV, plus AVG Anti-Spyware
(formerly Ewido - http://www.ewido.net/en/) and follow instructions to
do all scans in Safe Mode.

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the link above (not here, please).

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigStoreUSA). Please be aware that not all local shops are skilled at
removing malware and even if they are, your computer may be so infested
that Windows will need to be clean-installed. Have all your data backed
up before you take the machine into a shop.

If after you've done all that you want more help, make a new post with
full details per this link:

http://www.dts-l.org/goodpost.htm

Malke
Signature

Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.