Internet Explorer and a Trojan - I think

[Oakridge]

Wouldn't it be Christmas Eve.

Some wicked external source has managed to get what I believe must be a
Trojan onto my machine. At start-up about 50 web pages open spontaneously
in new windows.

I have uninstalled IE7 and then IE6 but this program manages to scrape up
IE6 from somewhere to open the pages. Norton Anti-virus doesn't find
anything. SpyBot finds nasties but removing them each time doesn't solve
the problem.

Any help, please.

Malcolm

 

[Guest]

Wouldn't it be Christmas Eve.

Some wicked external source has managed to get what I believe must be a
Trojan onto my machine. At start-up about 50 web pages open spontaneously
in new windows.

I have uninstalled IE7 and then IE6 but this program manages to scrape up
IE6 from somewhere to open the pages. Norton Anti-virus doesn't find
anything. SpyBot finds nasties but removing them each time doesn't solve
the problem.

Any help, please.

Malcolm

There is a Script runing on your Computer causing this behavior to occur,
try to Press these set of Key together and see what processor is taken the
most of the CPU usage and also what application is runing and User Profile
too.
what need is just a file of 30-50 Bytes to make all these pop-ups comes back
and invite them for Christmas Dinner <g>.
Send your findings back here in your next msg.
Happy Christmas to all.
HTH
Regs,
nass

 

[Oakridge]

What key press combination should it be? Wait to reply till after Christmas
and enjoy.

Thanks for your reply.

Malcolm

 

[Guest]

Oh,Joy, sorry, DEL + ALT + CTRL to open the task manager.
Have a nice Xmas.
nass

 

[Oakridge]

Hope you are still watching this.

The process occupying 90+% is 'system idle process'.

Hope this helps.

Malcolm

PS What I cannot understand is that even though I have uninstalled Internet
Explorer this Trojan or whatever it is still manages to open it.

 

[Ken Blake, MVP]

Hope you are still watching this.

The process occupying 90+% is 'system idle process'.

You didn't quote anything of the previous messages, so I have no idea what
this is about. However, "System Idle Process" is not any problem at all.
That's just the name for what the system is doing when it's not doing
anything. It's there to make the total add up to 100%.

 

[Guest]

Hope you are still watching this.

The process occupying 90+% is 'system idle process'.

Hope this helps.

Malcolm

PS What I cannot understand is that even though I have uninstalled Internet
Explorer this Trojan or whatever it is still manages to open it.

Hi Malcolm,
It is Normal the Idle Process to occupy between 90 -98%, which you shoulkd
be worry about is another process runing High.
I think you have Viral malwares on your computer with a little script that
causing this Multi Pop-Ups two steps to try if any one manage to clean the
malware and get rid of the Pop-Up you don't need to perform the secon:
1- The best is to scan your computer with online scanner from here in
Both(Safe Mode and Normal Mode):
http://www.pandasecurity.com/activescan
http://www.trendmicro.com
And also for malwares from here:
http://www.lavasoft.com/products/ad-aware_se_personal.php
http://www.safer-networking.org ; for Spybot S&D
Then try to Disable the Add-Ons on your Browser somehow your browser been
hooked by Add-ons or Plug-ins which act as an ear/spy for that site to direct
you to where they want you to go and causing the Pop-Ups.
On how to disable the Add-ons follow this:
Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons and click [OK] to confirm your
Changes.
Reboot your machine.

2= If all fail download the Hijackthis and send the report to one of many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.
Please perform one step (1,2) at a time and see if that will help your
issue.
HTH.
Please let us know.
Regards,
nass

 

[Oakridge]

Thanks for your message, I'm working through it.

I have found that:

http://www.pandasecurity.com/activescan

has now moved to:

http://www.pandasoftware.com/?track=31135&idioma=EN&pais=63

Malcolm

Hope you are still watching this.

The process occupying 90+% is 'system idle process'.

Hope this helps.

Malcolm

PS What I cannot understand is that even though I have uninstalled
Internet
Explorer this Trojan or whatever it is still manages to open it.

Hi Malcolm,
It is Normal the Idle Process to occupy between 90 -98%, which you shoulkd
be worry about is another process runing High.
I think you have Viral malwares on your computer with a little script that
causing this Multi Pop-Ups two steps to try if any one manage to clean the
malware and get rid of the Pop-Up you don't need to perform the secon:
1- The best is to scan your computer with online scanner from here in
Both(Safe Mode and Normal Mode):
http://www.pandasecurity.com/activescan
http://www.trendmicro.com
And also for malwares from here:
http://www.lavasoft.com/products/ad-aware_se_personal.php
http://www.safer-networking.org ; for Spybot S&D
Then try to Disable the Add-Ons on your Browser somehow your browser been
hooked by Add-ons or Plug-ins which act as an ear/spy for that site to
direct
you to where they want you to go and causing the Pop-Ups.
On how to disable the Add-ons follow this:
Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
click on Programs Tab and then click the Manage Add-Ons Button there
Disable
the None/Not Verified Plug-ins/Add-ons and click [OK] to confirm your
Changes.
Reboot your machine.

2= If all fail download the Hijackthis and send the report to one of many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.
Please perform one step (1,2) at a time and see if that will help your
issue.
HTH.
Please let us know.
Regards,
nass