Trojan.Start Page

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
my computer just removed a virus which changed ie's start up page. Symantecs
window displayed this info..
Icon Installer.exe
Trojan.Start Page

How do I get the Start page to reset? Its not responding to the usual
changes when applied under tools/options.
When I restart ie it takes me to symantecs security site with these same
instructions which are not working.
thanks mc



Re: Trojan.Start Page


| my computer just removed a virus which changed ie's start up page. Symantecs
| window displayed this info..
| Icon Installer.exe
| Trojan.Start Page
|
| How do I get the Start page to reset? Its not responding to the usual
| changes when applied under tools/options.
| When I restart ie it takes me to symantecs security site with these same
| instructions which are not working.
| thanks mc
|

Are you sure you got everything ?


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal
Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the
PC.

You can choose to go to each menu item and just download the needed files or you
can
download the files and perform a scan in Normal Mode. Once you have downloaded
the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode
[F8 key
during boot] and re-run the menu again and choose which scanner you want to run
in Safe
Mode.  It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive
PDF help
file.  http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * *   Please report back your results  * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Trojan.Start Page

 Is there a way to reinstall ie? It will open if I click a link in the news
group but it will not open if I use the start menu.
If I look at tools/options, there are a lot of ?????? in the start url
window.
I will run the AV tool later this week...
thanks mc



Re: Trojan.Start Page

 Thanks for the link David, I've been playing with Kaspersky in normal mode
and the only thing so far was Symantec spotted a file "adware.savenow"
during the dos scan. Does this utility scan the registry?
mc



Re: Trojan.Start Page


|  Thanks for the link David, I've been playing with Kaspersky in normal mode
| and the only thing so far was Symantec spotted a file "adware.savenow"
| during the dos scan. Does this utility scan the registry?
| mc
|
No.  The Kaspersky scanner only scans files using the Kaspersky signature "bases"

"adware.savenow" is obviously adware.  You need to scan with a non-viral anti
spyware
application such as...

* SuperAntiSpyware
  http://www.superantispyware.com/superantispywarefreevspro.html

This amy also be able to fix your home page setting problem as well.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Trojan.Start Page

 David
I ran the sophos engine, no viruses, but it saw over 400 errors and this
part of the log I do not completely understand....?
thanks mc

Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads43311593jtun_nav2k6en60322007.m25.seg1.zip\TCSCAN8.996
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads43311593jtun_nav2k6en60322007.m25.seg1.zip
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads44597982jtun_nav2k6en60406006.m25.seg1.zip\TCSCAN7.996
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads44597982jtun_nav2k6en60406006.m25.seg1.zip
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads55584720jtun_nav2k6en60812004.m25.seg1.zip\CCERASER.998
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads55584720jtun_nav2k6en60812004.m25.seg1.zip
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads56435321jtun_nav2k6en60823022.m25.seg1.zip\CCERASER.999
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads56435321jtun_nav2k6en60823022.m25.seg1.zip
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads58162632jtun_nav2k6en60911037.m25.seg1.zip\VIRSCAN5.985
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads58162632jtun_nav2k6en60911037.m25.seg1.zip
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads66201497jtun_nav2k6en61214017.m25.seg1.zip\V.989
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads66201497jtun_nav2k6en61214017.m25.seg1.zip
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads68457847jtun_nav2k6en70109019.m25.seg1.zip\VIRSCAN5.985
(corrupt)
Could not check c:\Documents and Settings\All Users\Application
Data\Symantec\LiveUpdate\Downloads68457847jtun_nav2k6en70109019.m25.seg1.zip
(corrupt)



Re: Trojan.Start Page


|  David
| I ran the sophos engine, no viruses, but it saw over 400 errors and this
| part of the log I do not completely understand....?
| thanks mc
|

< snip >

You can safely ignore those entries.
Please scan the system using SuperAntiSpyware as I prescribed.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Trojan.Start Page

 I just finished using the superspyware and nothing was shown. I had to
manually insert the current list files for the program. Is this normal for
the free version?
mc



Re: Trojan.Start Page


|  I just finished using the superspyware and nothing was shown. I had to
| manually insert the current list files for the program. Is this normal for
| the free version?
| mc
|

What do you mean by,  "...manually insert the current list files..." ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Trojan.Start Page

 I downloaded the updates, since it did not update itself but rather
directed me to the web page.  so I moved the 2 files "processlist.db" &
processlistrelatd.db to an 'old folder' and inserted the new unzipped files.
mc



Re: Trojan.Start Page


|  I downloaded the updates, since it did not update itself but rather
| directed me to the web page.  so I moved the 2 files "processlist.db" &
| processlistrelatd.db to an 'old folder' and inserted the new unzipped files.
| mc
|

That is not normal.  You should be able to click on "check for updates" and it
should be
able to download them and install them.

OK -- what about the scan results ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Trojan.Start Page

 David,
just got back from a BSA campout, so now I'll continue to work on this, this
week. The initial scan did not show any results...I wonder if I should
download the program again..
mc



Re: Trojan.Start Page


|  David,
| just got back from a BSA campout, so now I'll continue to work on this, this
| week. The initial scan did not show any results...I wonder if I should
| download the program again..
| mc
|

The Multi AV ?  No.
Just go through each module.  Each module will download their lastest files as
needed.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Trojan.Start Page

David
Well I re-ran super antispyware in safe mode, it did not find anything but
it did see the homepage change and it reset it to the default. I can now see
the change in Tools/options in ie, but ie starts off at this url


http://go.microsoft.com/fwlink/?LinkId=74005

and then ends up at this url which is a blank blue page?

http://runonce.msn.com/runonce2.aspx

Has anyone seen these web addresses before.

thanks mc



Re: Trojan.Start Page


| David
| Well I re-ran super antispyware in safe mode, it did not find anything but
| it did see the homepage change and it reset it to the default. I can now see
| the change in Tools/options in ie, but ie starts off at this url
|
| http://go.microsoft.com/fwlink/?LinkId=74005
|
| and then ends up at this url which is a blank blue page?
|
| http://runonce.msn.com/runonce2.aspx
|
| Has anyone seen these web addresses before.
|
| thanks mc
|

No, I haven't.  Both disply "Error on page" in IE6 SP1 on my Win2K PC.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Trojan.Start Page

David
I was wondering why the mcafee engine gives me this error window after doing
an update...
"SDStbRes.dll  The specified module could not be found"

Do you know if it is safe to manually change the Start Page in the
registry...
this one keeps holding on to a start page 'uk.msn.com'

HKEY_USERS\Default\Software\Microsoft\Internet Explorer\Main
Other areas in the reg show the correct default start page
thanks mc



Re: Trojan.Start Page

Mc I told you how to fix that issue and you posted back and said it worked
however your system was still infected with the spyware that caused your
issue. Since then I'm sure you have been bombarded with emails from people
telling you not to trust me. Since then you have asked in this group and the
MS groups how to fixed your problem. Your first post was what 2 weeks ago?
and no fix yet?. Don't listen to them, who by now are guessing at what may
work. Listen to me and I can fix your problem. Download Spyerase from here
http://www.pcbutts1.com/downloads/spyerasesetup.zip then email me using the
link on this page http://www.pcbutts1.com/downloads Spyerase incorporates
the same technology as my homepage reset tool that you used last time plus
it will remove the spyware that caused your problem.



Feedback is very important to the development of Spyerase.
Let me know how it works. Send feedback here
http://pcbutts1-therealtruth.blogspot.com /

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com , David
H. Lipman, Max M Wachtell III  aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



Quoted text here. Click to load it



Re: Trojan.Start Page

On Wed, 31 Jan 2007 14:00:57 -0800, pcbutts1 wrote:
Quoted text here. Click to load it

Quit stealing content from other vendors to past into your stolen script
that you've modified.

--  
Want to know what PCBUTTS1 is really about?
*** WARNING - these links contain foul/pornographic content of an  
abusive nature created by PCBUTTS1 and still hosted on his public  
website ***
http://www.pcbutts1.com/rlk/rlk.htm ,  
http://www.pcbutts1.com/license.htm ,  
http://www.pcbutts1.com/downloads/max.htm ,  
http://www.pcbutts1.com/downloads/mpv.htm ,  
http://www.pcbutts1.com/downloads/wtcpcb.htm ,  
http://www.pcbutts1.com/cracks.htm ,  
http://www.pcbutts1.com/Loutheasshole.htm  
All while spamming his company website at: http://www.seedsv.com

Re: Trojan.Start Page

pcbutts1 wrote:
Quoted text here. Click to load it
[snip]

since spyerase has crossed over the line into malware territory,
downloading it would not be advisable...

--
"it's not the right time to be sober
now the idiots have taken over
spreading like a social cancer,
is there an answer?"

Re: Trojan.Start Page

Take a look at these videos from yesterday
http://www.msnbc.msn.com/id/10912603/ then go here and vote.
http://www.pcbutts1.com/downloads/pervert.htm


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com , David
H. Lipman, Max M Wachtell III  aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



Quoted text here. Click to load it



Site Timeline