I'm infected again

[Neo]

Some nasty shit out there these days, I think I'm going to stay away from Google images from now on as I think a lot of the crap is hiding in jpg files... anyway..

I've got an infection, one of the ones that detects keywords and hyperlinks them to crap commercials and fake eastern euro porn to drag you further in. You know what I mean, it highlights the word in green like date london etc

I've done everything I can so far, cleared cookies, cache, Ccleaner, Avast, Malwarebytes, DrWeb CureIt, Spybot S&D, and it's still there and very well hidden, I'm also getting slowdown on the puter, which is very unusual and together it suggests there's more to this than just a few tacky links, suggestions please? (not you butterfly)

[nigelandjan]

what AV you using mate ??

[Neo]

Avast.. I'm happy with it though. I picked up a few bits with the S&D scan and one with DrWeb which are both usually very reliable, but this bug is still in there which suggests it's well engineered.

[nigelandjan]

sorry mate can,t help with that one I use Maccyfeeeeeeee but you do need a good spec lappy to soak up the load it deals it ,,,,,,,,,,, I,m off this soon anyway I,ve had enuf of windows I got a Mac pro book on order ,gonna be all Appley soon

[Sailing into trouble]

MAc's do work great. At the moment Macs outsell any other brand of comp. At some point they will become targets. However the more people stick to Windows the more profitable target will remain the Windows format.

[harrybarracuda]

Some nasty shit out there these days, I think I'm going to stay away from Google images from now on as I think a lot of the crap is hiding in jpg files... anyway..

I've got an infection, one of the ones that detects keywords and hyperlinks them to crap commercials and fake eastern euro porn to drag you further in. You know what I mean, it highlights the word in green like date london etc

I've done everything I can so far, cleared cookies, cache, Ccleaner, Avast, Malwarebytes, DrWeb CureIt, Spybot S&D, and it's still there and very well hidden, I'm also getting slowdown on the puter, which is very unusual and together it suggests there's more to this than just a few tacky links, suggestions please? (not you butterfly)

No good having AV if you install it on top of clever malware, which will quietly hook everything as it installs and hide itself.

You need to boot into a clean environment and scan it with nothing loaded into memory off the hard disk.

As it's Sunday tomorrow and you probably don't have to work, try going through one of these, and if you need a hand, just ask.

Link
Link
Link
Link
Link

[Neo]

Yes I've got a feeling it's going to have to be booted off a disc as you say...
I'll have a look and see if I can rip something from those links.. the S&D one is $30

Cheers

[jizzybloke]

If you do a full virus scan in safe mode, will that help?

I know feck all about computers so anything on here will probably come in handy for me at some point!

[Neo]

I don't know either, but I'll give it a try later when I log off.

[nigelandjan]

anything on here will probably come in handy for me at some point!

follow me Jizz and get a Mac

[sabaii sabaii]

I've got an infection, one of the ones that detects keywords and hyperlinks them to crap commercials and fake eastern euro porn to drag you further in. You know what I mean, it highlights the word in green like date london etc

Have you tried using a different browser ?

[Latindancer]

When all else has failed, I've always had a great result from A-squared (free edition), which is now called Emsisoft. Boot up in safe mode and run it.

[harrybarracuda]

Safe mode is not the solution. You need to boot into a clean environment. Safe Mode is not necessarily clean, because it uses the bootloader and stuff on the infected disk to start itself up. If this has been hijacked it will merely hide itself while you run the scan.

You need to boot from a CD, and the links I provide are for downloads of ISO images which are simple to burn.

This is the best way to ensure you are scanning the disk from a clean environment.

Trust me, I'm a doctor.

[Neo]

I tried safe mode last night and thought I'd trashed the computer for a while.
Don't think I'll try that again, bad experience. I also uninstalled Spybot S&D, which I used to rate as anti-malware, but it's now very bloated and seems very intrusive to the general running configuration, you know something isn't right when it asks you 5 different ways "are you sure you want to un-install?" A security system with insecurity.

I'll look at getting rid of this virus later today or tomorrow, I've got some work I need to finish on it first, just in case it gets trashed in the process. I'm tempted to move some of my user files to an external drive as back up, but then I risk moving the virus with it I guess. Anyway your help will be appreciated when I get around to it Harry.

[bsnub]

Malwarebytes is most excellent at solving these problems.

Malwarebytes Anti-Malware - Reviews and free Malwarebytes Anti-Malware downloads at CNET Downloads

[sabaii sabaii]

Maybe the virus is inside that "Don't Panic" animated gif , as a pisstake

[Neo]

Mmmmm... how about you copy and paste it to your browser and see..?

[sabaii sabaii]

What exactly is happening in your browser ?

Is your browser Firefox ?

Have you tried Chrome ?

Does this problem happen in the address bar or the google search or both ?

Have you looked if any add ons have been installed ?

Or Toolbars ?


I don't understand why Malwarebytes or Spybot are not picking it up ?

Look in your add/remove programs for any installed progs

Look at what apps and processes are working in Task Manager











































Have You tried turning it off then back on again ?

[harrybarracuda]

Computer says "No"....

[Mickmac]

Correct me if I am wrong, but I always thought a virus could only be spread via an executable file. Or are there new improved models out there now ?

[sabaii sabaii]

Are the gay porn vids he downloads exe files ?

[harrybarracuda]

Viruses are just a small portion of what is generally known as malware.

A lot of the shit that infects these days comes through visiting dodgy websites and clicking on pop-ups that deceive you into thinking they do something useful.

[Neo]

I am going to get round to this soon, had some stuff to clear up and just making time to do it, as I need to take the puter away with me at the weekend.

[Mickmac]

I swear on my Mother's grave I do not know what type of file a gay porn vid is.

[sabaii sabaii]

^ hahahahaha