spyware infection, confused

hk415 · 06-15-2008, 05:29 PM

I've been searching the net trying to learn how to solve my own issues but it seems as if it would be safer if i got some help from some more knowledgable people. I beleive i need to created some type of hijackthis thread, but i am confused about what it is and i was wondering if someone could explain that.

For now, i will just state some problems.
-the blue background, which seems quite common
-sometimes, while googling, when i click on links, it opens up a window that says "ERROR"
-there is the red pop up that says i have trojan dowloader
-sometimes there are random ads
-i get a warnign sign-like thing at the bottom of my comp near the time part, and when i click on it, a website pops up advertising spyware removal programs

I just need some help on what to dowload and what to do to fix it. I have tried spybot s&d and it has found many coolwwwsearch files, along with many many others.

thanks in advance

**koala** · 06-15-2008, 05:50 PM

Hi hk415, welcome to TSF

From your description it looks like your computer is infected. Don't click on any popups or adverts or offers for anti-spyware software.

HiJackThis is a scanning tool that security analysts use to detect malware, hijack attempts, etc. It's not for beginners so I recommend that you follow the instructions here (5 pages) and then post all the requested logs in a new thread here for our analysts to look at. If you have any trouble running any of the scans, leave them and move onto the next.

The security forum is always busy, so please be patient and you will receive a reply as soon as possible. If you go to Thread Tools > Subscribe at the top of your new thread you will receive an email as soon as a reply is posted.

hk415 · 06-15-2008, 07:15 PM

thanks for the reply

some new things:
-a window pops up and says something about using spywarescanner2008, cutting edge feature, im guessing its fake...also it beeps when i click cancel
-i also get asked to download spywareisodownload.com

i followed through to the second step where i hit scan computer, but the new window that it opens never seems to load

tetonbob · 06-15-2008, 08:37 PM

Quote:

a window pops up and says something about using spywarescanner2008, cutting edge feature, im guessing its fake...also it beeps when i click cancel

Yes, it's fake. Just Close it with the Red X in the upper right, don't Cancel.

Quote:

If you have any trouble running any of the scans, leave them and move onto the next.

hk415 · 06-16-2008, 02:42 PM

-no task manager
-speakers are frozen at a set volume

ok so i did the panda scan, i registered but could not disinfect. i was just wondering what the log from the panda scan was and if that is the same as the deckard scan, just out of curiousity. So i think the next step would be to get some protection then do the deckard scan. My question is, fgor the hijackthis thread, do i just post the informantion from the deckard scan?

tetonbob · 06-16-2008, 03:48 PM

The logs tell us different things.

Panda will disinfect some items prior to our analysis.

In your HijackThis Log Help forum thread, paste the main.txt from Deckard's System Scanner, attach the extra.txt from Deckard's System Scanner, and attach the Panda log.

Instructions on how to attach are in Step 5.

hk415 · 06-16-2008, 04:28 PM

thanks, i get it now, but for some reason i cant click the disinfect button. I will probably be told to skip it but i want to see if it would help, any thoughts? im signed in.

tetonbob · 06-16-2008, 06:20 PM

For some items, the disinfect button will not be available on the free scan. That's ok. We use the log from that scan to help with our analysis, and remove what Panda does not during the course of a fix.

hk415 · 06-16-2008, 07:37 PM

Ok thanks, ill proceed with the other scan once i have time and see what happens.

tetonbob · 06-16-2008, 08:00 PM

Deckard's System Scanner (DSS) only takes a few minutes. It's not near as time consuming as an online scan.

06-15-2008, 05:29 PM	#1 (permalink)
hk415 Registered User Join Date: Jun 2008 Posts: 7 OS: xp	spyware infection, confused I've been searching the net trying to learn how to solve my own issues but it seems as if it would be safer if i got some help from some more knowledgable people. I beleive i need to created some type of hijackthis thread, but i am confused about what it is and i was wondering if someone could explain that. For now, i will just state some problems. -the blue background, which seems quite common -sometimes, while googling, when i click on links, it opens up a window that says "ERROR" -there is the red pop up that says i have trojan dowloader -sometimes there are random ads -i get a warnign sign-like thing at the bottom of my comp near the time part, and when i click on it, a website pops up advertising spyware removal programs I just need some help on what to dowload and what to do to fix it. I have tried spybot s&d and it has found many coolwwwsearch files, along with many many others. thanks in advance

06-15-2008, 05:50 PM	#2 (permalink)
koala Moderator Hardware Team Join Date: Mar 2005 Location: UK Posts: 9,143 OS: XP/UBUNTU My System	Re: spyware infection, confused Hi hk415, welcome to TSF From your description it looks like your computer is infected. Don't click on any popups or adverts or offers for anti-spyware software. HiJackThis is a scanning tool that security analysts use to detect malware, hijack attempts, etc. It's not for beginners so I recommend that you follow the instructions here (5 pages) and then post all the requested logs in a new thread here for our analysts to look at. If you have any trouble running any of the scans, leave them and move onto the next. The security forum is always busy, so please be patient and you will receive a reply as soon as possible. If you go to Thread Tools > Subscribe at the top of your new thread you will receive an email as soon as a reply is posted. __________________ New members: Subscribe to your thread (Thread Tools) to receive an instant email notification when you get a reply. TSF Folding@Home Team 85015 - details here

06-15-2008, 07:15 PM	#3 (permalink)
hk415 Registered User Join Date: Jun 2008 Posts: 7 OS: xp	Re: spyware infection, confused thanks for the reply some new things: -a window pops up and says something about using spywarescanner2008, cutting edge feature, im guessing its fake...also it beeps when i click cancel -i also get asked to download spywareisodownload.com i followed through to the second step where i hit scan computer, but the new window that it opens never seems to load

06-16-2008, 02:42 PM	#5 (permalink)
hk415 Registered User Join Date: Jun 2008 Posts: 7 OS: xp	Re: spyware infection, confused -no task manager -speakers are frozen at a set volume ok so i did the panda scan, i registered but could not disinfect. i was just wondering what the log from the panda scan was and if that is the same as the deckard scan, just out of curiousity. So i think the next step would be to get some protection then do the deckard scan. My question is, fgor the hijackthis thread, do i just post the informantion from the deckard scan?

06-16-2008, 03:48 PM	#6 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 25,395 OS: 2000 Pro; XP Pro; XP Home	Re: spyware infection, confused The logs tell us different things. Panda will disinfect some items prior to our analysis. In your HijackThis Log Help forum thread, paste the main.txt from Deckard's System Scanner, attach the extra.txt from Deckard's System Scanner, and attach the Panda log. Instructions on how to attach are in Step 5. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Our help is voluntary, but this site needs donations to operate. Please consider Donating to the Forum. Please do not ask for help via Private Message. Ask in the forums, so all may gain from the experience.

06-16-2008, 04:28 PM	#7 (permalink)
hk415 Registered User Join Date: Jun 2008 Posts: 7 OS: xp	Re: spyware infection, confused thanks, i get it now, but for some reason i cant click the disinfect button. I will probably be told to skip it but i want to see if it would help, any thoughts? im signed in.

06-16-2008, 06:20 PM	#8 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 25,395 OS: 2000 Pro; XP Pro; XP Home	Re: spyware infection, confused For some items, the disinfect button will not be available on the free scan. That's ok. We use the log from that scan to help with our analysis, and remove what Panda does not during the course of a fix. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Our help is voluntary, but this site needs donations to operate. Please consider Donating to the Forum. Please do not ask for help via Private Message. Ask in the forums, so all may gain from the experience.

06-16-2008, 07:37 PM	#9 (permalink)
hk415 Registered User Join Date: Jun 2008 Posts: 7 OS: xp	Re: spyware infection, confused Ok thanks, ill proceed with the other scan once i have time and see what happens.

06-16-2008, 08:00 PM	#10 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 25,395 OS: 2000 Pro; XP Pro; XP Home	Re: spyware infection, confused Deckard's System Scanner (DSS) only takes a few minutes. It's not near as time consuming as an online scan. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Our help is voluntary, but this site needs donations to operate. Please consider Donating to the Forum. Please do not ask for help via Private Message. Ask in the forums, so all may gain from the experience.