this web site safe?

S

shah

Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend under
'IE Antivirus 3.3' and gave numerous results and under its 9th item quote
'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE Antivirus
3-3-a.html

May I know if this website is safe? Anyone been to this site...?. Appreciate
if you can advice, as scared stiff trying to go sone unfamiliar sites.
.......thanks
 
A

AlmostBob

EVERYTHING that 'pop up'-s on your computer on its own is bad,
malware typically behaves in this fashion,
a small almost innocuous piece of software that tries to trick you into
installing a worse one
begin with adaware or spybot and a full scan with a reliable AV

--
Adaware http://www.lavasoft.de
spybot http://www.safer-networking.org
AVG free antivirus http://www.grisoft.com
Etrust/Vet/CA.online Antivirus scan
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/
Catalog of removal tools (1)
http://www.pandasoftware.com/download/utilities/
Catalog of removal tools (2)
http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?CID=40387
Blocking Unwanted Parasites with a Hosts file
http://mvps.org/winhelp2002/hosts.htm
links provided as a courtesy, read all instructions on the pages before use

Grateful thanks to the authors and webmasters
_
 
S

shah

Many thanks and at the moment, I am scanning using Adaware 2007, Spybot 1.52.
I have AVG 8.0 in my other pc but somehow its seems to take up a lot of the
cpu resources. So not keen to install on this infected pc.
Reading from the google result, it appears the pc in question been Hjacked?
So I was wondering if the site I mentioned is it safe to click and see how
they resolve the issue as I don't want to create another problem(infected)
for this pc. Thanks
 
M

Malke

shah said:
Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend
under 'IE Antivirus 3.3' and gave numerous results and under its 9th item
quote 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE
Antivirus 3-3-a.html

May I know if this website is safe? Anyone been to this site...?.
Appreciate if you can advice, as scared stiff trying to go sone unfamiliar
sites. ......thanks

No. Your computer is infected with the IE Antivirus malware and probably
lots of other malware besides. You need to clean it up.

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Find the IE Antivirus removal steps here:

Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

If you can't find it or need further help, register at Bleeping Computer or
one of the other specialty forums listed below in no particular order. Read
its posting FAQ and post whatever log they require. PLEASE DO NOT POST LOGS
IN THE MS NEWSGROUPS.

http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/

If you can't do the work yourself (and there is no shame in admitting this
isn't your cup of tea), take the machine to a professional computer repair
shop (not your local equivalent of BigComputerStore/GeekSquad). Please be
aware that not all local shops are skilled at removing malware and even if
they are, your computer may be so infested that Windows will need to be
clean-installed. If possible, have all your data backed up before you take
the machine into a shop.

Malke
 
S

Still learning

Malke said:
No. Your computer is infected with the IE Antivirus malware and probably
lots of other malware besides. You need to clean it up.

I've been to that site before and got help with malware.

(snipped)
 
D

Daave

Still learning said:
I've been to that site before and got help with malware.

Agreed. The forums at http://forums.techguy.org/ are very helpful and
recommended for cleaning up the OP's infection. Perhaps Malke didn't
read shah's entire post and thought she asked if it was okay to download
and install IE ANTIVIRUS 3.3.
 
S

shah

Many thanks for the responses. I have just started the SuperAntispyware scan
(hope I am not choking the pc as the other scans are still running). I am now
more assure that the forums.techguy.org is safe to peep. Will post the HJ log
to the appropriate forum, thanks
 
N

nass

shah said:
Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend under
'IE Antivirus 3.3' and gave numerous results and under its 9th item quote
'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE Antivirus
3-3-a.html

May I know if this website is safe? Anyone been to this site...?. Appreciate
if you can advice, as scared stiff trying to go sone unfamiliar sites.
......thanks


Your computer been hijacked and you need to perform a thorough scan for both
malware and viruses.
Yoy may have Zalop or Vundo variants on your machine.

BTW the techguy website is safe and will help you to clean up your machine
and guide step-by-step to solve it.

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Lots of tools to download and disinfect your machine (off-line scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

You may have a bad RAM try to test your RAM by running Memory test by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://oca.microsoft.com/en/windiag.asp.

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html
http://www.bleepingcomputer.com/forums/
Or other appropriate
forums for expert analysis, not here.
Let us know your progress.
nass
 
H

HeyBub

shah said:
Many thanks and at the moment, I am scanning using Adaware 2007,
Spybot 1.52. I have AVG 8.0 in my other pc but somehow its seems to
take up a lot of the cpu resources. So not keen to install on this
infected pc.
Reading from the google result, it appears the pc in question been
Hjacked? So I was wondering if the site I mentioned is it safe to
click and see how they resolve the issue as I don't want to create
another problem(infected) for this pc. Thanks

You're essentially asking "Is it safe to go to a site recommended by a bit
of malware?"

No, of course not. It is not safe. The site will download something that
turns off the nag but converts your machine into a trojan, a member of a
botnet, and soon you'll be sending out child porn spam to the universe.
 
A

AlmostBob

hijackthis is a repair tool. it creates a log of what is loading and when,
you post the log to a forum similar to this one (the one in the google
answer was at techguys.org) for hijackthis gurus to explain what is wrong
and how to fix it.
some hijackthis gurus are also msMVPs
That the program appears in a hijackthis forum as 'solved' suggests it is
malware.
AVG8 may use resources dunno I have 7.5 on win98 win98se winme and 8.0 on XP
and Vista boxes, (never throw anything away till it dies) and never notice
any slowdown
- that malware which you have may cause more 'interesting' effects than just
popups,
which do you prefer,
slightly slowed,
or dead.


--
Adaware http://www.lavasoft.de
spybot http://www.safer-networking.org
AVG free antivirus http://www.grisoft.com
Etrust/Vet/CA.online Antivirus scan
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/
Catalog of removal tools (1)
http://www.pandasoftware.com/download/utilities/
Catalog of removal tools (2)
http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?CID=40387
Blocking Unwanted Parasites with a Hosts file
http://mvps.org/winhelp2002/hosts.htm
links provided as a courtesy, read all instructions on the pages before use

Grateful thanks to the authors and webmasters
_
 
S

shah

Many thanks and went through the various scanners and manage to get rid of
tons of trojan etc and back to working condition.

nass said:
shah said:
Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend under
'IE Antivirus 3.3' and gave numerous results and under its 9th item quote
'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE Antivirus
3-3-a.html

May I know if this website is safe? Anyone been to this site...?. Appreciate
if you can advice, as scared stiff trying to go sone unfamiliar sites.
......thanks


Your computer been hijacked and you need to perform a thorough scan for both
malware and viruses.
Yoy may have Zalop or Vundo variants on your machine.

BTW the techguy website is safe and will help you to clean up your machine
and guide step-by-step to solve it.

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Lots of tools to download and disinfect your machine (off-line scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

You may have a bad RAM try to test your RAM by running Memory test by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://oca.microsoft.com/en/windiag.asp.

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html
http://www.bleepingcomputer.com/forums/
Or other appropriate
forums for expert analysis, not here.
Let us know your progress.
nass
 
K

Ken Blake, MVP

Many thanks and went through the various scanners and manage to get rid of
tons of trojan etc and back to working condition.



You say "tons of trojans." If you really had many infections, there's
a pretty good change you are still infected. On a system with multiple
infections, the best course is always to reformat and reinstall
Windows. Anything less is likely to be only a partial fix.

nass said:
shah said:
Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend under
'IE Antivirus 3.3' and gave numerous results and under its 9th item quote
'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE Antivirus
3-3-a.html

May I know if this website is safe? Anyone been to this site...?. Appreciate
if you can advice, as scared stiff trying to go sone unfamiliar sites.
......thanks


Your computer been hijacked and you need to perform a thorough scan for both
malware and viruses.
Yoy may have Zalop or Vundo variants on your machine.

BTW the techguy website is safe and will help you to clean up your machine
and guide step-by-step to solve it.

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Lots of tools to download and disinfect your machine (off-line scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

You may have a bad RAM try to test your RAM by running Memory test by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://oca.microsoft.com/en/windiag.asp.

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html
http://www.bleepingcomputer.com/forums/
Or other appropriate
forums for expert analysis, not here.
Let us know your progress.
nass
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top