Trojan Effects

[TheScullster]

Hi all

Can anyone help with a solution to the following please?

A user recently reported problems with IE links and zip files.
These manifested themselves by:
a) Links on IE pages simply result in a blank page, but if the link is
pasted into the browser edit box, the page is displayed.
b) Zip files refuse to extract with an error "Windows has blocked access to
these files to help protect your computer".

I suspect that the problems have been caused by spyware.
A recent scan with Ad-aware revealed win32.trojandownloader.tibs and
cool/websearch, both of which have been deleted.

Despite scan and delete of problems a) and b), the issues with IE and
Windoze zip remain.

Anyone any suggestions to rectify these please?

TIA

Phil

 

[MowGreen [MVP]]

Boot to Safe Mode with Networking


Then, using IE, go here: http://www.kaspersky.com/virusscanner
Click the 'Kaspersky Online Scanner' button
A window will popup. Click Accept.
Allow the installation of the ActiveX control

The system will return to the Agreement page so click Accept once more
Allow the installation of said ActiveX control
The system will now download the latest definitions
When done click Next
Click the Settings button and put a mark next to 'Extended'

Have the scanner scan the ENTIRE system. This will take around an hour
and a half but is well worth the wait <w>
When the scan is finished click the Expand Report button or, click the
Save Report button and save it as a .txt file. Use that as your guide.

Manually remove what you want to remove as the Kaspersky online scanner
only detects malware but does not remove it ... make sure that what is
removed is actual malware. This takes a bit of experience as there may
be False Positives {ex: Reboot.exe is included in certain malware fixes
but is not necessarily malware)

HTH,
MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============

 

[Guest]

hi im having the same trouble dont no whats wrong i keep getting a waring
saying i need to download a anti spy ware program but i have norton anti
viruses on and it is still getting through its saying i have a trojan
attacking the computer so if you have any ideas could you help me thanks
eileen

 

[Malke]

hi im having the same trouble dont no whats wrong i keep getting a waring
saying i need to download a anti spy ware program but i have norton anti
viruses on and it is still getting through its saying i have a trojan
attacking the computer so if you have any ideas could you help me thanks
eileen

Normally you would not want to post a new issue in the middle of someone
else's thread. Your problems are not the same as the Original Poster's.
However, for efficiency's sake here is the answer - you have some
variety of the Smitfraud trojan. Go through the preparatory steps here:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Then do the specific removal steps here:

http://www.elephantboycomputers.com/page2.html#Smitfraud_Trojan

Include scanning with either Sysclean or Multi_AV, plus AVG Anti-Spyware
(formerly Ewido - http://www.ewido.net/en/) and follow instructions to
do all scans in Safe Mode.

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the link above (not here, please).

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigStoreUSA). Please be aware that not all local shops are skilled at
removing malware and even if they are, your computer may be so infested
that Windows will need to be clean-installed. Have all your data backed
up before you take the machine into a shop.

If after you've done all that you want more help, make a new post with
full details per this link:

http://www.dts-l.org/goodpost.htm

Malke