Suspect trojan

[Bikeless]

Hi,

I've recently been getting full page pop ups for oyyy.co.uk,ebay,mybet etc.Pop up blocker doesn't sort it neither my antivirus or registry clean,any ideas people,

Thanks muchly.

[simk2]

give this a go always worked for me

https://www.safer-networking.org/en/mirrors/index.html
____________________
I Really Need Parts For My Bike

[TheMundy]

[Stoo]

I use search and destroy as linked to in the safer-notworking above. I've recently been very impressed with MalwareBytes at quickly getting rid of the shiet from folks computers.

[Deano]

download a copy of Malware Bytes and run a full scan, I work on a busy 1st line helpdesk and this piece of software seems to be the best of the bunch at the moment.

you can always check you HOST file to check if the DNS is hijacked which is located c:\\windows\system32\drivers\etc\HOST. the file should only hold one example entry.

[Finglonga]

Update Malwarebytes before you do the scan though.
____________________
Andy Sez....
F.Y.Y.F.F.

[Bikeless]

Thanks everyone,i'm just running through it all now,the spybot found a couple of trojans and PUP's but i'm still getting the virus.

[Finglonga]

Have you used Malwarebytes yet? Much better than Spybot S&D at finding nasties. Also turn off system restore as it may be hidden in the recovery files.
____________________
Andy Sez....
F.Y.Y.F.F.

[Bikeless]

Just running malwarebytes now.

[Bikeless]

Cannot acces it to turn it off,is that cos malware is running?

[Bikeless]

Right,tried spybot,didn't work,managed to turn off system restore and run malware,hopefully fixed.

Deano,i can find system32 but not drivers,i can find sytem drivers but do not know what to open it with or what to do with it.

[Deano]

what OS you running?
you may need to check your folder options to make sure that protected files are not hidden.

to check, go to:
open windows explorer(my computer)> tools>folder options>view tab> then untick hidden files and system files, should be two options but cant remember as I run vista on laptop.

this should let you see system32 folder.

you can also run a free anitvirus scan and removal at:www.eset.com/onlinescan
If you don't have any antivirus then download a copy of free antivirus software called AVG here: https://free.avg.com/download-avg-anti-virus-free-edition , make sure you configure a daily scan at a time when you dont use the PC/laptop and disable on-access scan.

Its not the best outhere but its minimal protection and does catch viruses and remove them unlike some anitvirus that you pay over the odds money for and do absolutely nothing.


good luck.

[Bikeless]

Thanks for that,i have found the HOST files,there are 5 of them(1KB each) and they haven't been modified for 2 years so i assume they are fine.

I've run malwarebytes and that seems to have sorted the trojans out.

I have got Norton AV because i had trouble with Mcafee but they are both as crap as each other really.

[NexusDragon]

[NexusDragon]

Ignore. Double post.
____________________
DAS Passed 19th April 08. 07' YBR125 > Yamaha FZ6 S2 '08 > 1998 YZF600R ThunderCat

[Finglonga]

[Flip]

Norton are sh1te. Doesn't do f*ck all. I only have 'cause it was free with the pc. I won't be renewing it.

AGV, Spyware doctor and super anti spyware are doing a better job for me than Norton ever did.

[GodzGift]

[Jamrock]

Can't believe no one has mentioned ComboFix, it's the main tool inside the PC 'business'

Smitfraud will help a lot but run a ComboFix from the root of your C: drive in safe mode.