1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Do you have Adware, Spyware, Virus/Trojan or a Browser Hijacker?

Discussion in 'Windows - Virus and spyware problems' started by CJC, Nov 21, 2004.

Thread Status:
Not open for further replies.
  1. eLeCTR0n

    eLeCTR0n Regular member

    Joined:
    Mar 26, 2003
    Messages:
    121
    Likes Received:
    0
    Trophy Points:
    26
    I am sure we all can come up with excuses but the idea is don't be too picky with people because they will be picky with you.
     
  2. dude845

    dude845 Regular member

    Joined:
    Jan 6, 2005
    Messages:
    675
    Likes Received:
    0
    Trophy Points:
    26
    HELP ME!!!!!

    my pc keeps getting hacked i think.
    my mouse starts to move around for no reason, and then program start opening, my zone alarm pro is on too. wat can i do!!


    i alsohave somthing called WORM_MUGLY.I
    its a worm how do i remove it!
     
    Last edited: Aug 28, 2005
  3. ddp

    ddp Moderator Staff Member

    Joined:
    Oct 15, 2004
    Messages:
    39,167
    Likes Received:
    136
    Trophy Points:
    143
  4. dude845

    dude845 Regular member

    Joined:
    Jan 6, 2005
    Messages:
    675
    Likes Received:
    0
    Trophy Points:
    26
    no i tried to scan it, it said undeletable
     
    Last edited: Aug 28, 2005
  5. ddp

    ddp Moderator Staff Member

    Joined:
    Oct 15, 2004
    Messages:
    39,167
    Likes Received:
    136
    Trophy Points:
    143
    does it tell you the location & if so than try to delete it manually either in normal mode or safe mode. what windows are you using??
     
  6. dude845

    dude845 Regular member

    Joined:
    Jan 6, 2005
    Messages:
    675
    Likes Received:
    0
    Trophy Points:
    26
    ill have to scan again and see the location
    i probably should delete it fast cuz it hasn't spreed to far yet.
     
  7. ddp

    ddp Moderator Staff Member

    Joined:
    Oct 15, 2004
    Messages:
    39,167
    Likes Received:
    136
    Trophy Points:
    143
    what anti-virus program are you using besides the 1 i posted??
     
  8. eLeCTR0n

    eLeCTR0n Regular member

    Joined:
    Mar 26, 2003
    Messages:
    121
    Likes Received:
    0
    Trophy Points:
    26
    it looks like your Windows isnt up to date. So the first thing you should do is install all the critical updates because that's what the worm is using to get on your system. The reason I am saying you should update first is even if you get rid of it now, you will get it again from other infected computers.

    You can do this by just opening Internet Explorer and then go to the Tools menu and click on Windows Updates.

    The other thing you need to do is make sure you have a good firewall, I saw you had ZoneAlarm but you might want to enable the Windows firewall anyway. Sometimes you need more than one.

    As with almost everything you can do this in many ways and one way is to open the Networking properties from Control Panel or right click on the My Network Places then click on properties. Afterwards, right click on the Network Connection that you use to connect to the Internet and click properties and from the Advanced tab check the box to enable to firewall.

    Then you need to stop the worm from executing at startup and you can do this in different ways too, if you know your way around the Registry then go ahead and do it that way else just run [bold]msconfig[/bold] from Start-> Run and from the Startup tab uncheck anything you dont recognize.

    After you stop the worm from starting at startup reboot and do the virus scan again and it should get rid of it.

    Let us know what happens.
     
  9. eLeCTR0n

    eLeCTR0n Regular member

    Joined:
    Mar 26, 2003
    Messages:
    121
    Likes Received:
    0
    Trophy Points:
    26
    Now that I looked at the trendMicro site, it looks like the file is called winit.exe so just search for the file and delete it wherever you see it.

    But again it might be running right now so you cant delete it, you have to close it first and you can do this with the Task Manager from the Processes tab.

    Or if you stop it from opening at startup and reboot then delete it.


     
  10. dude845

    dude845 Regular member

    Joined:
    Jan 6, 2005
    Messages:
    675
    Likes Received:
    0
    Trophy Points:
    26
    wow i re scanned and it found no traces of it..... and task manager can't find winit.exe so i think it was a mistake can that happen?
     
  11. ddp

    ddp Moderator Staff Member

    Joined:
    Oct 15, 2004
    Messages:
    39,167
    Likes Received:
    136
    Trophy Points:
    143
    possible but re-run the scan in both safe & normal mode to make certain
     
  12. eLeCTR0n

    eLeCTR0n Regular member

    Joined:
    Mar 26, 2003
    Messages:
    121
    Likes Received:
    0
    Trophy Points:
    26
    did you try searching for the file?

    Making a mistake like that is very rare, what could of happened is may be the worm is not currently running so that's why it didnt detect it.
     
  13. dude845

    dude845 Regular member

    Joined:
    Jan 6, 2005
    Messages:
    675
    Likes Received:
    0
    Trophy Points:
    26
    searched the file not found, looked on task manager not found lol
     
  14. eLeCTR0n

    eLeCTR0n Regular member

    Joined:
    Mar 26, 2003
    Messages:
    121
    Likes Received:
    0
    Trophy Points:
    26
    Do you have Windows Explorer showing hidden and system files?

    What windows are you using? Do you have all critical updates installed?

    If you're running windows xp select the option to include hidden and system files in the search.

    If you open My Computer or any windows explorer window go to the Tools menu and click on options then in the View tab check show hidden files and uncheck hide system files.

     
  15. dude845

    dude845 Regular member

    Joined:
    Jan 6, 2005
    Messages:
    675
    Likes Received:
    0
    Trophy Points:
    26
    all critical updates i probably need them were do i get them from.

    houscall said i need these ones

    MS05-025
    MS05-026
    MS05-027
    MS05-032
    MS05-033
    MS05-036
    MS05-037
    MS05-038
    MS05-039
    MS05-040
    MS05-041
    MS05-042
    MS05-043


    were do i find them?



    btw: how do i remove haackers? my mouse starts to move programs open

    its anoying.
     
    Last edited: Aug 28, 2005
  16. eLeCTR0n

    eLeCTR0n Regular member

    Joined:
    Mar 26, 2003
    Messages:
    121
    Likes Received:
    0
    Trophy Points:
    26
    They either are windows updates or some other Microsoft program updates like Office.

    For Windows updates you can get them from here:
    http://windowsupdate.microsoft.com

    For Office updates go here:
    http://office.microsoft.com/officeupdate/

    those are the most important ones, if you still need more updates, you can find all the information you need from the TrendMicro site. It'll tell you what it's about and also link you to the Microsoft page that discusses the issue.


    About the hacking thing, it looks like you have something like sub7 or BackOrffice running on your computer.

    Have you went through the Registry hive Run to make sure you dont have any spyware or trojans running at startup or used msconfig?

    You also need to use some antispyware programs like:

    Ad-aware: http://www.download.com/3000-2144-10045910.html

    SpyBot: http://www.download.com/Spybot-Search-Destroy/3000-8022_4-10401314.html

    SpywareDoctor: http://www.pctools.com/spyware-doctor/

    I would use all three because each one is going to catch some and miss some.

    You should also run the Microsoft Malware Remover found here:
    http://www.microsoft.com/security/malwareremove/
     
    Last edited: Aug 28, 2005
  17. kelw26

    kelw26 Member

    Joined:
    Sep 1, 2005
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    11
    Okay, I really do not know alot about computers, other than how to screw them up apparently, so this may be a stupid question. Lately this computer has been having major issues. When I start Ad Aware, it starts the scan, and then shuts down my system in about 10 seconds. Also, Norton Antivirus is finding Trojan.Elitebar, but says that it cannot be cleaned or quarantined. Please help!!!
     
  18. ddp

    ddp Moderator Staff Member

    Joined:
    Oct 15, 2004
    Messages:
    39,167
    Likes Received:
    136
    Trophy Points:
    143
  19. kelw26

    kelw26 Member

    Joined:
    Sep 1, 2005
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    11
    I ran CCleaner, CW Shredder and Spybot. Doing Housecall now. But I still cannot run Ad Aware. Everytime I start the scan, it goes for about 20 seconds and then causes some type of fatal error and restarts my computer. And I'm still getting pop ups from Norton about the Trojan.Elitebar saying it has quarantined it, or left it alone.
     
  20. DVDBack23

    DVDBack23 Administrator Staff Member

    Joined:
    Jun 19, 2005
    Messages:
    2,443
    Likes Received:
    5
    Trophy Points:
    68
    ddp,

    you forgot microsoft anti spyware, in your list, it should be run after cc cleaner and cwshredder but before the rest.
     
Thread Status:
Not open for further replies.

Share This Page