Virus

[dpc]

So I got a computer problem and need some advice. The other day I was on a site and my ad-aware popped up and said something along the lines of something was attempting to attack my computer. I left the internet and immediately started my virus scan and the ad-aware scan. The ad-aware scan said it found a trogan and malware and removed it. That was this morning. Since then though my computer is doing weird things. I use Mozilla and whenever I click on it it doens't open, it just sits there. I have to go to a adobe document I have that has a web link and clink on that to open up the browser.

Once I'm on the browser, little weird thigns are happening. I googled "weather", and usually it just gives me the weather for my local area, but today it didn't. It just gave me results for weather. So I googled "weather fargo" and it popped up like normal, giving me the next few days weather, but it was in Celsius and the wind meter was in metric. Also, sometimes if I click on a link in google, it sends me to some other website. I tried to click on weather.com for my weather and it sent me to some other website.

My virus scan that I'm running right now says so far it hasn't found anything. And I re-ran ad-aware and it said there is nothing on my computer.

Any thoughts?

 

[44Thrilla]

uninstall and reinstall mozilla

 

[OSUBlazerfan]

Download MalwareBytes and rkill.exe

from bleepingcomputer.com

run both.... kills and removes malware/spyware/etc

 

[Wheels]

for nasty viruses that Adaware and Spybot and them dont seem to catch... Combofix worked really well for me. I've had to use it twice in the last couple years.

 

[Wheels]

never heard of rkill. My last one I had to run malwarebytes in safe mode and it still wouldnt rid the problem. I musta had a nasty one.

 

[dpc]

Stupid thing just logged me out of S2 for no reason

 

[Wheels]

is it one of those nasty viruses that blocks a lot of virus removal software from running?

 

[dpc]

is it one of those nasty viruses that blocks a lot of virus removal software from running?

So far it hasn't blocked anything. It's jsut messing with me in little ways like I mentioned above. But the virus scanners are saying nothing is there anymore. But I'm about to run those ones that were recommended.

 

[44Thrilla]

I thought he said he removed it

 

[44Thrilla]

So far it hasn't blocked anything. It's jsut messing with me in little ways like I mentioned above. But the virus scanners are saying nothing is there anymore. But I'm about to run those ones that were recommended.

are you sure the removal didn't just mess up your settings in mozilla? sometimes when they scan, they alter some vital browser files. thats why I recommended to reinstall.

 

[Wheels]

yeah I'm not trying to knock the other ones as I havent tried them.. but for viruses that dont seem to register or whatever Combofix really worked for me. Hope it works out for you.

 

[dpc]

are you sure the removal didn't just mess up your settings in mozilla? sometimes when they scan, they alter some vital browser files. thats why I recommended to reinstall.

I can see it changing some settings but I can't use google at all now. Like if I do and I click on a link it sends me to some ad website offering me to sell crap. I can't click on any links. Would the removal process cause something like that?

 

[44Thrilla]

I can see it changing some settings but I can't use google at all now. Like if I do and I click on a link it sends me to some ad website offering me to sell crap. I can't click on any links. Would the removal process cause something like that?

no but maybe you can physically remove that with an uninstall

 

[dpc]

no but maybe you can physically remove that with an uninstall

Yeah. I'm going to try some of this stuff out. Let you guy knows how it worked out.

 

[3RA1N1AC]

erase your computer and install linux

 

[magnifier661]

So I got a computer problem and need some advice. The other day I was on a site and my ad-aware popped up and said something along the lines of something was attempting to attack my computer. I left the internet and immediately started my virus scan and the ad-aware scan. The ad-aware scan said it found a trogan and malware and removed it. That was this morning. Since then though my computer is doing weird things. I use Mozilla and whenever I click on it it doens't open, it just sits there. I have to go to a adobe document I have that has a web link and clink on that to open up the browser.

Once I'm on the browser, little weird thigns are happening. I googled "weather", and usually it just gives me the weather for my local area, but today it didn't. It just gave me results for weather. So I googled "weather fargo" and it popped up like normal, giving me the next few days weather, but it was in Celsius and the wind meter was in metric. Also, sometimes if I click on a link in google, it sends me to some other website. I tried to click on weather.com for my weather and it sent me to some other website.

My virus scan that I'm running right now says so far it hasn't found anything. And I re-ran ad-aware and it said there is nothing on my computer.

Any thoughts?

You could also run de-frag and norton disc doctor to. Sometimes the virus fucks with the "permissions" and it just needs to be re-organized.

 

[dpc]

So I ran malwarebytes (was having issues with combofix) and it came back with results saying I had like 7 trogans and spyware and yada yada. I deleted them all and restarted. Now I can turn on Mozilla just by clicking on it. Google is working completely normal now, and it seems its all back to normal. I'm going to re-scan to make sure its all clean.

Thanks all for help.

 

[DaLincolnJones]

You could also run de-frag and norton disc doctor to. Sometimes the virus fucks with the "permissions" and it just needs to be re-organized.

I have seen this "virus". Once it gets enough control of your puter it will want you to buy the "fix" from the fucktards that sent the problem. It will not allow you to run a full scan, and when you get to the remove part it will start to do crazy stuff like shut down etc.

The only thing I could do was to restart in safe and had the puter reconfigure to about a week before I acquired the bug. Yeah, I lost some stuff, but it was not a two hounded dollar comp guru bill.

 

[Wheels]

glad it worked out for ya. Sorry Combofix didnt run wasnt trying to lead you astray lol

 

[THE HCP]

Buy a MacBook Pro like THE HCP!

 

[dpc]

glad it worked out for ya. Sorry Combofix didnt run wasnt trying to lead you astray lol

Naw its cool. It said it wanted me to stop running my virus scanner.. which makes sense.. but at the same time made me nervous because the virus was doing weird things. I tried to use yahoo search at one time and it just said that a virus was preventing me from doing it. I jsut got nervous lol.

 

[dpc]

Buy a MacBook Pro like THE HCP!

Buy? You're mexican, you know you stole it.

 

[DaRizzle]

Buy a MacBook Pro like THE HCP!

yes...be a lemming and pay at least 2 times for a computer because its shiny and has neat-o commercial...then be stuck with that computer for longer than you should because you gotta save up for the next $2000 macbook. (which cost you 400-600 if it was a laptop)

 

[Wheels]

Naw its cool. It said it wanted me to stop running my virus scanner.. which makes sense.. but at the same time made me nervous because the virus was doing weird things. I tried to use yahoo search at one time and it just said that a virus was preventing me from doing it. I jsut got nervous lol.

oh yeah I completely forgot it asks you to do that my bad.

 

[Paxil]

Fake alert is a bitch. Once it gets installed it also acts as a back door for other malware to install (in fact... I do believe money is changing hands between malware authors there)

There most likely was some sort of exploit that allowed it to get installed in the first place... something where just browsing a page may have allowed it to be installed. Make sure you OS is updated and all add ons Flash etc... are up to date.

Change your PW to your Email and facebook etc... verify you didn't spam your friends unknowingly. =)

Sometimes malware will change your DNS settings to send you through a bad DNS server that starts sending you random crap when you search etc... so you might want to check that too.

 

[Paxil]

Here is another free tool that is cool. http://us.mcafee.com/virusInfo/default.asp?id=stinger When you run this choose preferences and set the Hueristic check for network files to medium or higher.

 

[MickZagger]

Facebook has a virus. It sent a bunch of people a bunch of shit talk.

 

[Natebishop3]

I would run a restore if I were you. Just go back a few days and then run all your anti-virus stuff again.