|
Posted by Corey on December 3, 2008, 11:48 pm
Please log in for more thread options
I got 'hit' by the Koobface worm, I stupidly allowed a program called
Flash_updater.exe to run. I immediatly realized the problem, removed
Flash_updater, and Bolivar25.exe and then ran my anitvirus progem, eset.
Eset found 4 items it removed, I then ran AVG Rootkit remover which found
nothing, and I've looked for any and all references on google to this worm
and manually looked for all file names mentioned anywhere on the net.
But cannot find this symptom, or how to fix it.
Within a minute or so of getting infected, Firfox stopped working. Same
with IE, and Safari. I have a good internet connection, I'm writing this on
outlook express, and I can get and send email with Eudora. but if I open a
web browser I get "Page Load Error, Connection Interrupted" for Firefox, or
"This page cannot be displayed" for IE. This even happens if I try to go to
my router configuration page on my local network (192.168.1.1). All of
these things work on another computer, on the same network.
I've rebooted a few times, manually searched the registry, even tried to
'repair' my internet connection.
Any thoughts?
|
|
Posted by Corey on December 4, 2008, 12:07 am
Please log in for more thread options
Update: I did a system restore point from three days ago, and it didn't
help.
For what that's worth.
show/hide quoted text
>I got 'hit' by the Koobface worm, I stupidly allowed a program called
>Flash_updater.exe to run. I immediatly realized the problem, removed
>Flash_updater, and Bolivar25.exe and then ran my anitvirus progem, eset.
>Eset found 4 items it removed, I then ran AVG Rootkit remover which found
>nothing, and I've looked for any and all references on google to this worm
>and manually looked for all file names mentioned anywhere on the net.
> But cannot find this symptom, or how to fix it.
> Within a minute or so of getting infected, Firfox stopped working. Same
> with IE, and Safari. I have a good internet connection, I'm writing this
> on outlook express, and I can get and send email with Eudora. but if I
> open a web browser I get "Page Load Error, Connection Interrupted" for
> Firefox, or "This page cannot be displayed" for IE. This even happens if
> I try to go to my router configuration page on my local network
> (192.168.1.1). All of these things work on another computer, on the same
> network.
> I've rebooted a few times, manually searched the registry, even tried to
> 'repair' my internet connection.
> Any thoughts?
>
|
|
Posted by Corey on December 4, 2008, 2:58 am
Please log in for more thread options In case anyone is interested...
I noticed teh "help and Support" page thought my internet was not set up.
When I ran the wizard, IE started working (but not Firefox). I went into
Firefox and discovered that the worm had set up a proxy server directed to
127.0.0.1 (local). I switched that to no proxy server, and Firefox is
working. I imagine Safari will be similar.
show/hide quoted text
>I got 'hit' by the Koobface worm, I stupidly allowed a program called
>Flash_updater.exe to run. I immediatly realized the problem, removed
>Flash_updater, and Bolivar25.exe and then ran my anitvirus progem, eset.
>Eset found 4 items it removed, I then ran AVG Rootkit remover which found
>nothing, and I've looked for any and all references on google to this worm
>and manually looked for all file names mentioned anywhere on the net.
> But cannot find this symptom, or how to fix it.
> Within a minute or so of getting infected, Firfox stopped working. Same
> with IE, and Safari. I have a good internet connection, I'm writing this
> on outlook express, and I can get and send email with Eudora. but if I
> open a web browser I get "Page Load Error, Connection Interrupted" for
> Firefox, or "This page cannot be displayed" for IE. This even happens if
> I try to go to my router configuration page on my local network
> (192.168.1.1). All of these things work on another computer, on the same
> network.
> I've rebooted a few times, manually searched the registry, even tried to
> 'repair' my internet connection.
> Any thoughts?
>
|
|
Posted by Mikki220 on December 22, 2008, 11:53 am
Please log in for more thread options I had to un-install my IE and I am still trying to get internet access,
hopefully re-installation will work. A friend sent his PC to Geeksquad and
got it up and running.
"Corey" wrote:
show/hide quoted text
> I got 'hit' by the Koobface worm, I stupidly allowed a program called
> Flash_updater.exe to run. I immediatly realized the problem, removed
> Flash_updater, and Bolivar25.exe and then ran my anitvirus progem, eset.
> Eset found 4 items it removed, I then ran AVG Rootkit remover which found
> nothing, and I've looked for any and all references on google to this worm
> and manually looked for all file names mentioned anywhere on the net.
>
> But cannot find this symptom, or how to fix it.
>
> Within a minute or so of getting infected, Firfox stopped working. Same
> with IE, and Safari. I have a good internet connection, I'm writing this on
> outlook express, and I can get and send email with Eudora. but if I open a
> web browser I get "Page Load Error, Connection Interrupted" for Firefox, or
> "This page cannot be displayed" for IE. This even happens if I try to go to
> my router configuration page on my local network (192.168.1.1). All of
> these things work on another computer, on the same network.
>
> I've rebooted a few times, manually searched the registry, even tried to
> 'repair' my internet connection.
>
> Any thoughts?
>
>
>
>
|
| Similar Threads | Posted | | HTML.ObjectDataHTA | January 4, 2006, 2:35 am |
| trojan-spy.html.smitfraud.c | June 18, 2005, 1:40 pm |
| C:\WINDOWS\secure32.html | October 16, 2005, 12:05 pm |
| Trojan-Spy.HTML.Fraud.gen | May 14, 2008, 2:02 pm |
| Trojan-Spy.HTML.Fraud.gen | August 8, 2008, 12:55 pm |
| HTML/scripted.gen virus | August 16, 2008, 8:31 pm |
| IE home pg stuck as msblank.html | October 17, 2005, 5:46 pm |
| Re: Pagefile.sys infected by HTML.PHishing.Pay-131 | August 31, 2006, 4:36 pm |
| Lost HTML for Running Active Desktop | July 31, 2005, 4:20 pm |
| New Windows virus attacks PHP, HTML, and ASP scripts | February 12, 2009, 3:12 am |
|
XML Sitemap
>Flash_updater.exe to run. I immediatly realized the problem, removed
>Flash_updater, and Bolivar25.exe and then ran my anitvirus progem, eset.
>Eset found 4 items it removed, I then ran AVG Rootkit remover which found
>nothing, and I've looked for any and all references on google to this worm
>and manually looked for all file names mentioned anywhere on the net.
> But cannot find this symptom, or how to fix it.
> Within a minute or so of getting infected, Firfox stopped working. Same
> with IE, and Safari. I have a good internet connection, I'm writing this
> on outlook express, and I can get and send email with Eudora. but if I
> open a web browser I get "Page Load Error, Connection Interrupted" for
> Firefox, or "This page cannot be displayed" for IE. This even happens if
> I try to go to my router configuration page on my local network
> (192.168.1.1). All of these things work on another computer, on the same
> network.
> I've rebooted a few times, manually searched the registry, even tried to
> 'repair' my internet connection.
> Any thoughts?
>