CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 934
Comments: 25
block bottom
spacer spacer

Help! Spware/Trojans takes control of computer

 
Post new topic   Reply to topic       All -> FavForums -> MIRT Discussion [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
NRDCOMM

Trooper
Trooper


Joined: Apr 14, 2008
Posts: 10
Location: USA

PostPosted: Mon Apr 14, 2008 2:52 am    Post subject: Help! Spware/Trojans takes control of computer
Reply with quote

Spyware has taken over my girlfriends computer. Just get a blue screen on the desktop, warning that spyware has infected the computer with a link to click on. Cannot open IE, running Windows XP. I downloaded SpyDoctor (to a memory stick from another computer) and installed it. Came up with 15 threats and 353 infections. Here is what it found.

Application.trackingcookies
Trojan.Virtumonde
Adware.advertising
RogueAntiSpyware.winperf
Adware.Hotbar
Adware.Rabio
Adware.Conducent_TimeSink
Spyware.wehhancer
Backdoor.TSADBOT
Trojan.FakeAlert
Adware.2020Search_com
Trojan.2ndthought_com
Adware.MediaTickets
Adware.When_U_Savenow
Trojan.PurityScan


Please advise on next steps. I probably need to run HJT...please provide link and instructions....it's been a few years....I had a problem with my own computer a few years ago and castlecops saved the day! Looking for help again.

Also, are there any free spyware programs that also remove found files without having to "register" (buy) it?

Back to top
View users profile Send private message
AlphaCentauri

SIRT Handler
Premium Member

Joined: Nov 20, 2003
Posts: 2626

Premium

PostPosted: Mon Apr 14, 2008 3:21 am    Post subject:
Reply with quote

The first link is http://wiki.castlecops.com/MRP (Hard to find, I know; I always have trouble finding the link, too).
That's the do-it-yourself part. Follow all the steps in order to get the bulk of the crap off.

After that, it will guide you to where to download HJT and where to post results on these forums. (There's a dedicated forum.)

Don't click on that link warning you about spyware, by the way, it's probably "hostageware," some program that claims to find malware then wants you to pay money to find out how to get rid of it. Some of those will even dream up nonexistent infections to get your money.

You might want to get your GF involved throughout this whole process so she is less easily victimized in the future. Malware is big business, and the criminals alter their programs frequently to avoid detection by AV programs. You can't assume something is safe to do just because your AV program doesn't complain and your web-safety software doesn't identify sites as dangerous. It's important to be as net-savvy as possible.

Everyone here is happy to share information to help you both. Just clicking around the site and reading posts will really open your eyes, and don't be afraid to ask questions just because a lot of posters are computer experts. I knew about zero when I started coming here, and most people are very good about not making you feel stupid when you ask questions.

Back to top
View users profile Send private message
NRDCOMM

Trooper
Trooper


Joined: Apr 14, 2008
Posts: 10
Location: USA

PostPosted: Sat Apr 26, 2008 11:13 pm    Post subject:
Reply with quote

Finally got to this, no better off than before. Here is my post:

CastleCops Link/p1082954-Did_Malware_Removal_amp_Prevention_Need_More_Help.html#1082954

Back to top
View users profile Send private message
AlphaCentauri

SIRT Handler
Premium Member

Joined: Nov 20, 2003
Posts: 2626

Premium

PostPosted: Sun Apr 27, 2008 12:11 am    Post subject:
Reply with quote

There are several volunteer forum staff who work these HijackThis logs to help people who still have issues after completing the MRP procedure. One of them should get to yours within 5 days (depending on how difficult the problems are and who is available). If your log isn't picked up by then, go here: CastleCops Link/p629342-Unhandled_Logs.html#629342

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> MIRT Discussion All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer