Click here to get back home

www.free-virusscan.com
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.security.virus    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
www.free-virusscan.com Donbabalu 06-27-2008
Get Chitika Premium
Posted by Donbabalu on June 27, 2008, 4:54 pm
Please log in for more thread options
 I believe I got infected with a trojan virus that is re-directing my Internet
Explorer browser to www.free-virusscan.com.
(www.free-virusscan.com/id/492933/4/1/). I also get a message indicating
that my Microsoft programs may have been corrupted and wont let me access any
program folders. I am, however, allowed to access my Microsoft Word files.
I have conducted the Live One Care scans twice. However, I receive a message
indicating that there are no viruses or spyware on my computer.

Any help?

Posted by David H. Lipman on June 27, 2008, 7:08 pm
Please log in for more thread options
| I believe I got infected with a trojan virus that is re-directing my Internet
| Explorer browser to www.free-virusscan.com.
| (www.free-virusscan.com/id/492933/4/1/). I also get a message indicating
| that my Microsoft programs may have been corrupted and wont let me access any
| program folders. I am, however, allowed to access my Microsoft Word files.
| I have conducted the Live One Care scans twice. However, I receive a message
| indicating that there are no viruses or spyware on my computer.

| Any help?



1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap:
In Notepad.exe; Format --> uncheck; "Word wrap"

3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post in one of
the below
expert forums...


{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's
System Scanner
Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/index.php?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Posted by Majestick on June 30, 2008, 9:58 am
Please log in for more thread options
wrote:
>
> | I believe I got infected with a trojan virus that is re-directing my In=
ternet
> | Explorer browser towww.free-virusscan.com.
> | (www.free-virusscan.com/id/492933/4/1/). =A0I also get a message indica=
ting
> | that my Microsoft programs may have been corrupted and wont let me acce=
ss any
> | program folders. =A0I am, however, allowed to access my Microsoft Word =
files.
> | I have conducted the Live One Care scans twice. =A0However, I receive a=
message
> | indicating that there are no viruses or spyware on my computer.
>
> | Any help?
>
> 1. Download and execute HiJack This! (HJT)http://www.trendsecure.com/port=
al/en-US/threat_analytics/HJTInstall.exe
>
> 2. Disable Notepad's word wrap:
> In Notepad.exe; =A0Format --> uncheck; "Word wrap"
>
> 3. Download/run Deckard's System Scanner:http://www.techsupportforum.com/=
sectools/Deckard/dss.exe
>
> 4. Save the scan results (Main.txt and Extra.txt)
>
> 5. And then post the contents of Main.txt and Extra.txt in your post in o=
ne of the below
> expert forums...
>
> { Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }
>
> Forums where you can get expert advice for HiJack This! (HJT) and Deckard=
's System Scanner
> Logs.
>
> NOTE: Registration is REQUIRED in any of the below before posting a log
>
> Suggested primary:http://www.thespykiller.co.uk/index.php?board=3D3.0
>
> Suggested secondary:http://www.bleepingcomputer.com/forums/forum22.htmlht=
tp://castlecops.com/forum67.htmlhttp://www.malwarebytes.org/forums/index.ph=
p?showforum=3D7
>
> Suggested tertiary:http://www.dslreports.com/forum/cleanuphttp://www.cybe=
rtechhelp.com/forums/forumdisplay.php?f=3D25http://www.atribune.org/forums/=
index.php?showforum=3D9http://www.geekstogo.com/forum/Malware_Removal_HiJac=
kThis_Logs_Go_Her...http://gladiator-antivirus.com/forum/index.php?showforu=
m=3D170http://forum.networktechs.com/forumdisplay.php?f=3D130http://forums.=
maddoktor2.com/index.php?showforum=3D17http://www.spywarewarrior.com/viewfo=
rum.php?f=3D5http://forums.spywareinfo.com/index.php?showforum=3D18http://f=
orums.techguy.org/f54-s.htmlhttp://forums.tomcoyote.org/index.php?showforum=
=3D27http://forums.subratam.org/index.php?showforum=3D7http://www.5starsupp=
ort.com/ipboard/index.php?showforum=3D18http://aumha.net/viewforum.php?f=3D=
30http://makephpbb.com/phpbb/viewforum.php?f=3D2http://forums.techguy.org/5=
4-security/http://forums.security-central.us/forumdisplay.php?f=3D13
>
> --
> Davehttp://www.claymania.com/removal-trojan-adware.html
> Multi-AV -http://www.pctipp.ch/downloads/dl/35905.asp

this makes no sense. why would posting a scan results on a forum
remove malware from my systems HD and registry? It seems kinda bogus
to me.

Posted by Kayman on June 30, 2008, 10:11 am
Please log in for more thread options
On Mon, 30 Jun 2008 06:58:58 -0700 (PDT), Majestick wrote:

> wrote:
>>
>>| I believe I got infected with a trojan virus that is re-directing my Internet
>>| Explorer browser towww.free-virusscan.com.
>>| (www.free-virusscan.com/id/492933/4/1/).  I also get a message indicating
>>| that my Microsoft programs may have been corrupted and wont let me access any
>>| program folders.  I am, however, allowed to access my Microsoft Word files.
>>| I have conducted the Live One Care scans twice.  However, I receive a message
>>| indicating that there are no viruses or spyware on my computer.
>>
>>| Any help?
>>
>> 1. Download and execute HiJack This!
(HJT)http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe
>>
>> 2. Disable Notepad's word wrap:
>> In Notepad.exe;  Format --> uncheck; "Word wrap"
>>
>> 3. Download/run Deckard's System
Scanner:http://www.techsupportforum.com/sectools/Deckard/dss.exe
>>
>> 4. Save the scan results (Main.txt and Extra.txt)
>>
>> 5. And then post the contents of Main.txt and Extra.txt in your post in one
of the below
>> expert forums...
>>
>> { Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }
>>
>> Forums where you can get expert advice for HiJack This! (HJT) and Deckard's
System Scanner
>> Logs.
>>
>> NOTE: Registration is REQUIRED in any of the below before posting a log
>>
>> Suggested primary:http://www.thespykiller.co.uk/index.php?board=3.0
>>
>> Suggested
secondary:http://www.bleepingcomputer.com/forums/forum22.htmlhttp://castlecops.com/forum67.htmlhttp://www.malwarebytes.org/forums/index.php?showforum=7
>>
>> Suggested
tertiary:http://www.dslreports.com/forum/cleanuphttp://www.cybertechhelp.com/forums/forumdisplay.php?f=25http://www.atribune.org/forums/index.php?showforum=9http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Her...http://gladiator-antivirus.com/forum/index.php?showforum=170http://forum.networktechs.com/forumdisplay.php?f=130http://forums.maddoktor2.com/index.php?showforum=17http://www.spywarewarrior.com/viewforum.php?f=5http://forums.spywareinfo.com/index.php?showforum=18http://forums.techguy.org/f54-s.htmlhttp://forums.tomcoyote.org/index.php?showforum=27http://forums.subratam.org/index.php?showforum=7http://www.5starsupport.com/ipboard/index.php?showforum=18http://aumha.net/viewforum.php?f=30http://makephpbb.com/phpbb/viewforum.php?f=2http://forums.techguy.org/54-security/http://forums.security-central.us/forumdisplay.php?f=13
>>
>> --
>> Davehttp://www.claymania.com/removal-trojan-adware.html
>> Multi-AV -http://www.pctipp.ch/downloads/dl/35905.asp
>
> this makes no sense.

Than Google and educate yourself.

> why would posting a scan results on a forum remove malware
> from my systems HD and registry?

The friendly and knowledgable person(s) of the fora will after, careful
examination of the scan result, advice an appropriate course of action.

> It seems kinda bogus to me.

Google is your friend.

Posted by David H. Lipman on June 30, 2008, 4:50 pm
Please log in for more thread options

< snip >

| this makes no sense. why would posting a scan results on a forum
| remove malware from my systems HD and registry? It seems kinda bogus
| to me.

HJT and Deckard's utility create log files of startup loactions where malware
use to load
themselves.

The forums I posted have personnel who are trained at a malware university of
sorts. They
are trained on how to interpret the logs and how suggest a set of tools that can
be used
by the infected poster where the tools can remove the malware.

Additionally, they may have the infected user post the malware files to the
forums where
the forum administrator(s) can then provide the malware files to the various
anti malware
companies such that they can be identified and the files can then be used to
generate anti
amlware signatures.

This system is far from bogus and all the expert forums I suggested are trusted
and
vetted.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp




Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap