Trojan horse - TR/startpage.qr.dll

[Guest]

First of all i would like to apologise for the LONG explanation that im about
to start but if you could please bare with me & help me i can tell you i
would be more than GREATLY appreciated!!

*First of all i have the above named virus (in which in the symantec web
site i can not find it with the same extensions that i have) im guessing that
it is this Trojan that is giving me the about.blank web page as well (but
that is a guess)
* 2 days ago my anti virus detected it but could not access it therefore i
could not quaratine it or delete it or anything!!!

* last night in SAFE mode i ran the following in this exact order: spybot
destroyer (in which i deleted all that it found) then i ran cwshredder (that
found nothing) then i ran adware in which froze up 2 times on me right near
the end so i had to abort each time.

* i checked my registry for trojan extensions and found nothing.

* i then rebooted into normal mode and ran my anti virus program in which
detected this virus and deleted it.
* then i tried to open my web page and the virus popped up again on my
screen and there was the about:blank page again
* i then ran hijacker in which i deleted al l files that were related to
about:blank and even clicked on config and changed all that to ninemsn.com
and as soon as i opened the page again all that i had deleted came back again.

if anyone can please help me i would love it!!

Im not sure if i should run the anti virus in safe mode too but as i said it
found the virus and said it had delected it but each time i click on anything
my anti virus system tells me it has found this trojan and can NOT ACCESS it.
its the SELL file

i can not update my anti virus system and i can not run an online scan or
anything as no web page can be displayed due to all of this, i can not
connect to servers to download virus definitions everything has to be done
from my work computer (like now) and saved to disc and i have to run it from
the disc drive, so if i have to register or update anything i can not do that
as all i get is the "this page can not be displayed error"

im running xp pro on a dial up!

by the way i had to download a free anti virus program due to the fact that
this trojan put errors all threw my norton so i had no other choice but to
delete norton for the time being and i can not re install it until this
trojan is gone.

oh this sucks soooooooooooooo big time

im at my wits end here ppl i really am - its driving me insane!!!!!!!!!


PLEASE PLEASE PLEASE PLEASE PLEASE HELP

A HUGE THANKS IN ADVANCE AND HUGE HUGS TOO

 

[Mary Sauer]

This forum may help

http://forums.thatcomputerguy.us/lofiversion/index.php/t11772.html

 

[Gerry Cornell]

emoving about:blank Homepage Hijacker
http://www.securityfaqs.com/securityreviews/5RP0L0UD5U.html

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

You think you have a trojan, but also had some viruses and spyware.

Until everything is 'cleaned out' you can expect further problems.

If you have the Norton's Installation CD and can manage to reinstall this:
then I'd suggest the following steps:
1. Download AVG anti virus [free edition] from
www.grisoft.com/us/us_dwnl_free.php
2. Uninstall Nortons
3. Reboot the PC
4. Install AVG and get latest updates
5. Run AVG and delete any suspicious entries
6. Reboot to safe mode
7. Run Spybot
8. Reboot to Normal mode
9. Attempt to get to the internet

If you still have probs and live in Sydney, you can get me on + 61 2 9969 6215

regards
Brian

 

[Guest]

Thanks Brian
but i have one small prob with what you have suggested. I can not connect to
any servers or any pages on the internet what so ever so i can not download
the latest virus definitions to this update. But a huge t hank you anyway, i
will just have to wait till i get home tonight and try to give it a go

if you think of anything else please let me know huns and thanks to you and
the others for helping me and reading my overly long questions!!!!!

 

[Gerry Cornell]

Acknowledgements to Noel Paton for what follows:

Download the Stinger from here and run it to make sure that
A-V-disabling
viruses are not present on your PC
http://download.nai.com/products/mcafee-avert/stinger.exe

- update your virus scanner and run a full system scan of all files.

Reboot to Safe Mode and run CWShredder - to remove variants of the
CoolWebSearch hijacker.
http://www.merijn.org/cwschronicles.html

Use CWShredder, the removal tool:
http://www.merijn.org/files/cwshredder.zip
http://www.merijn.org/files/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe
http://www.zerosrealm.com/downloads/CWShredder.zip

download AdAware SE Personal Edition from www.lavasoftusa.com, install,
update, and run it to remove spyware, adware, and other such nasties
from
your system.


NOTE _ ALL operations should preferably be carried out in Safe Mode -
including the AV scan (if the installed AV won't work in Safe Mode, get
rid
of it and install another!)

End of advice from Noel Paton

Another free anti-virus

http://free.grisoft.com/doc/8/lng/us/tpl/v5/nid/3001#3001

A number of these will fit on a floppy. I suggest you start with
Stinger.


--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

Thanks Brian
but i have one small prob with what you have suggested. I can not
connect to
any servers or any pages on the internet what so ever so i can not
download
the latest virus definitions to this update. But a huge t hank you
anyway, i
will just have to wait till i get home tonight and try to give it a go


if you think of anything else please let me know huns and thanks to
you and
the others for helping me and reading my overly long questions!!!!!

You think you have a trojan, but also had some viruses and spyware.

Until everything is 'cleaned out' you can expect further problems.

If you have the Norton's Installation CD and can manage to reinstall
this:
then I'd suggest the following steps:
1. Download AVG anti virus [free edition] from
www.grisoft.com/us/us_dwnl_free.php
2. Uninstall Nortons
3. Reboot the PC
4. Install AVG and get latest updates
5. Run AVG and delete any suspicious entries
6. Reboot to safe mode
7. Run Spybot
8. Reboot to Normal mode
9. Attempt to get to the internet

If you still have probs and live in Sydney, you can get me on + 61 2
9969 6215

regards
Brian

 

[Guest]

And then how are you managing to get to this site and post information?

Anyhow, you should be able to buy a current PC magazine with SPybot or Adare
on the cover CD.

That will overcome your download problem.

ALso if your have Norton Internet Security, it may have been triggered to
prevent downloads or other things 'unknown' to you.

I'd suggest getting rid of any Norton's [Symantec] products from the PC and
start the rescue process from that point.

again, you casn call me for more information if your are in australia - 02
9969 6215

Thanks Brian
but i have one small prob with what you have suggested. I can not connect to
any servers or any pages on the internet what so ever so i can not download
the latest virus definitions to this update. But a huge t hank you anyway, i
will just have to wait till i get home tonight and try to give it a go

if you think of anything else please let me know huns and thanks to you and
the others for helping me and reading my overly long questions!!!!!

You think you have a trojan, but also had some viruses and spyware.

Until everything is 'cleaned out' you can expect further problems.

If you have the Norton's Installation CD and can manage to reinstall this:
then I'd suggest the following steps:
1. Download AVG anti virus [free edition] from
www.grisoft.com/us/us_dwnl_free.php
2. Uninstall Nortons
3. Reboot the PC
4. Install AVG and get latest updates
5. Run AVG and delete any suspicious entries
6. Reboot to safe mode
7. Run Spybot
8. Reboot to Normal mode
9. Attempt to get to the internet

If you still have probs and live in Sydney, you can get me on + 61 2 9969 6215

regards
Brian

 

[Guest]

Allo again!
Im managing to get this site and post this information because i am at work
at the moment and im downloading all that i can to disc so when i get home i
can try these ideas!
As i said before i honestly can not update anything or connect to any server
or website!!

I have adware and i also have spybot on disc and its already on my computer
but i will uninstall and reinstall it again tonight and see how i go!

I have no norton or symantec programs or files on my computer at all
anymore, i deleted everything even all the hidden files. and nope to symantec
security.

im going to try again tonight and if i cant succeed i might have to take you
up on that offer of your phone number. And yeap im Melbourne girl.
thanks again sooo much i appreciate your time and efforts and that goes to
everyone that has answered my query
please keep fingers crossed that i can fix it tonight before i get grey hair
and have a stroke from stress from this damn thing

And then how are you managing to get to this site and post information?

Anyhow, you should be able to buy a current PC magazine with SPybot or Adare
on the cover CD.

That will overcome your download problem.

ALso if your have Norton Internet Security, it may have been triggered to
prevent downloads or other things 'unknown' to you.

I'd suggest getting rid of any Norton's [Symantec] products from the PC and
start the rescue process from that point.

again, you casn call me for more information if your are in australia - 02
9969 6215

Thanks Brian
but i have one small prob with what you have suggested. I can not connect to
any servers or any pages on the internet what so ever so i can not download
the latest virus definitions to this update. But a huge t hank you anyway, i
will just have to wait till i get home tonight and try to give it a go

if you think of anything else please let me know huns and thanks to you and
the others for helping me and reading my overly long questions!!!!!

You think you have a trojan, but also had some viruses and spyware.

Until everything is 'cleaned out' you can expect further problems.

If you have the Norton's Installation CD and can manage to reinstall this:
then I'd suggest the following steps:
1. Download AVG anti virus [free edition] from
www.grisoft.com/us/us_dwnl_free.php
2. Uninstall Nortons
3. Reboot the PC
4. Install AVG and get latest updates
5. Run AVG and delete any suspicious entries
6. Reboot to safe mode
7. Run Spybot
8. Reboot to Normal mode
9. Attempt to get to the internet

If you still have probs and live in Sydney, you can get me on + 61 2 9969 6215

regards
Brian