Trojans

betiniam · 03-25-2008, 05:16 PM

Like numerous others have stated, I have picked up an error box on IE. System error - infected by an unknown trojan. etc..... then asks if i want to download recommended fix. the download is coming from 89.149.227.195 a site called files-secure.com[/url] but it doesn't download. this a.m. the computer was acting like it was updating active x but i don't think that was really what it was. also having problems with goggle not going to the right places. I have Nortons 360 at a high security level and ran detailed scans which found nothing. after much trouble with nortons ( not going to pay 100.00 to fix something that it should have found and fixed.) please help. I read some of the other responses to the problem but became confussed. Thank you for your time.

Jacee · 03-26-2008, 10:18 AM

files-secure.com is a 'rogue' domain site that has infected your computer. What was the last application you downloaded? That should give you a clue as to the validity of the program.....

You're going to need help getting this variant of FakeAlert/Smitfraud/Zlob off your computer.

Please do this:
Download HijackThis™ here:
http://www.trendsecure.com/portal/en...hijackthis.php

Right click on it and choose "Run as Administrator". Click 'Do a System Scan and Save logfile'.
The HJT log will open in notepad.

Copy and paste the contents of the HJT log into a "NEW THREAD" located here:
http://www.techsupportforum.com/secu...this-log-help/

Do Not post your HJT log in this thread.

betiniam · 03-27-2008, 08:49 PM

Thank you so much for answering my post, however i did pay nortons to remove it and they did but they have messed up this 6 month old lap top. rundll32 has stopped and vista utlity system keeps closing and it is a mess i do not know what to do because i demanded they fix thier mistakes.(they kept changing things and thats when errors started) but because they dont have vista they couldnt fix it. do you have any idea what i should do next?(besides sue nortons) i have tried the quick fixes recomended by microsoft and i did manage get vista utility back on but under managing add-ons it turns back off so does rundll32. They say I will get my money back but it is the principal. The nortons division in india sucks and now i will shut up except to tell you that they had remote acess for 14 hrs total i really need help.

Jacee · 03-27-2008, 10:44 PM

betiniam, please follow my instructions above.

Norton/Symantec can't remove or cure this Trojan. There really isn't an antivirus program (that I know of) that will.

Like I said.... you will need help to get rid of this infection. Our 'trained' security advisors in the security-center/hijackthis-log-help forum, have the tools to help you.

03-25-2008, 05:16 PM	#1 (permalink)
betiniam Registered User Join Date: Mar 2008 Posts: 4 OS: vista	Trojans Like numerous others have stated, I have picked up an error box on IE. System error - infected by an unknown trojan. etc..... then asks if i want to download recommended fix. the download is coming from 89.149.227.195 a site called files-secure.com[/url] but it doesn't download. this a.m. the computer was acting like it was updating active x but i don't think that was really what it was. also having problems with goggle not going to the right places. I have Nortons 360 at a high security level and ran detailed scans which found nothing. after much trouble with nortons ( not going to pay 100.00 to fix something that it should have found and fixed.) please help. I read some of the other responses to the problem but became confussed. Thank you for your time. Last edited by betiniam : 03-25-2008 at 05:19 PM.

03-26-2008, 10:18 AM	#2 (permalink)
Jacee Analyst / Expert, Security Team Join Date: Jan 2008 Posts: 126 OS: Vista Ultimate	Re: Trojans files-secure.com is a 'rogue' domain site that has infected your computer. What was the last application you downloaded? That should give you a clue as to the validity of the program..... You're going to need help getting this variant of FakeAlert/Smitfraud/Zlob off your computer. Please do this: Download HijackThis™ here: http://www.trendsecure.com/portal/en...hijackthis.php Right click on it and choose "Run as Administrator". Click 'Do a System Scan and Save logfile'. The HJT log will open in notepad. Copy and paste the contents of the HJT log into a "NEW THREAD" located here: http://www.techsupportforum.com/secu...this-log-help/ Do Not post your HJT log in this thread. __________________ MS MVP-Security 2006~2008

03-27-2008, 08:49 PM	#3 (permalink)
betiniam Registered User Join Date: Mar 2008 Posts: 4 OS: vista	Re: Trojans Thank you so much for answering my post, however i did pay nortons to remove it and they did but they have messed up this 6 month old lap top. rundll32 has stopped and vista utlity system keeps closing and it is a mess i do not know what to do because i demanded they fix thier mistakes.(they kept changing things and thats when errors started) but because they dont have vista they couldnt fix it. do you have any idea what i should do next?(besides sue nortons) i have tried the quick fixes recomended by microsoft and i did manage get vista utility back on but under managing add-ons it turns back off so does rundll32. They say I will get my money back but it is the principal. The nortons division in india sucks and now i will shut up except to tell you that they had remote acess for 14 hrs total i really need help. Last edited by betiniam : 03-27-2008 at 08:54 PM.

03-27-2008, 10:44 PM	#4 (permalink)
Jacee Analyst / Expert, Security Team Join Date: Jan 2008 Posts: 126 OS: Vista Ultimate	Re: Trojans betiniam, please follow my instructions above. Norton/Symantec can't remove or cure this Trojan. There really isn't an antivirus program (that I know of) that will. Like I said.... you will need help to get rid of this infection. Our 'trained' security advisors in the security-center/hijackthis-log-help forum, have the tools to help you. __________________ MS MVP-Security 2006~2008