OnClickSupport trojan?

bobrancher · 04-22-2009, 03:26 AM

Hello,
I have been experiencing issues with my computer and would like some advice, if anyone would be willing to offer some! This is very long… but the story is complicated! I am not inexperienced with computers….but this one has got me worried. I am using Windows Vista.

I have been having frequent problems with my computer, after about an hour of being online, suddenly no longer being able to access any webpage, and I receive the following error when I try to access a webpage: “ www.msn.com is not set up to establish a connection on port "World Wide Web servce (HTTP)" with this computer. " I must restart the computer in order to gain access. However, I am able to ping addresses such as www.yahoo.com, and my network connection is shown as “Local and Internet.” The other computers on my home network experience no problem, and are able to access the internet at the same time I get this error.

Also, my computer has recently taken longer to start up immediately after I log in, before the “Welcome” sign shows up.. It stays on the log in screen for about 20 seconds longer than it used to.

Then, about five days ago, while I was away from home, somebody called for me but I was not home at the time. They told a family member that something was wrong with my computer and to call them back at the following number DO NOT post phone numbers in an open forum. Unfortunately when I was first given this number, it was misspelled”. I was suspicious, but I looked up the number and found nothing, so I just ignored it. I looked at the caller ID, and the entry said “Out of Area”. Also, about nine minutes before this phone call, we had received a phone call from Allstate.

Then, about 2 ago, I received another call from these people and took it myself. It was man an Indian accent who said he was from Allstate and asked if there was something wrong with my computer. I said no but he said that I had a virus on my computer and he had been alerted about it and that any moment it could corrupt my hard drive. I said that this sounded suspicious and hung up.

But afterwards I began to worry, and tried to look up that phone number again, this type I somehow entered the right number in Google and came up with a whole bunch of stories of people who have been contacted by these people, OnClickSupport, and have had similar phone encounters. However, none of the other people mentioned anything about the people claiming to be from Allstate, which is odd because we received a phone call from Allstate right before the original phone call. Two people online have mentioned that they began having problems with their computers right before the phone calls began, and some people believe that this company is somehow getting Trojans onto people’s computers, and then calling people up and charging to remove these problems over the phone.
The following sites describe other people’s encounters with OnClickSupport: http://800notes.com/Phone.aspx/1-347-289-3770
http://www.dslreports.com/forum/r222...scareware-scam
http://whocallsme.com/Phone-Number.aspx/3472893770
http://www.theregister.co.uk/2009/04...careware_scam/

Then I became very worried that OnClickSupport had somehow got a Trojan horse on my computer. I already had AVG Antivirus and ZoneAlarm and Windows Defender installed on my computer. To be safe, I performed scans with AVG and Defender, and found nothing. I scanned my computer with Malwarebytes, Spybot S&D and Adaware after downloading them, and they found nothing but cookies. I scanned my computer online with Norton online scanner (virus & internet security scanners) and found nothing. I even scanned it with Panda online and found nothing. However, when I tried to scan my computer with Trend Micro House Call, it claims that I do not have the Java runtime environment when in fact I have the latest version, and it won’t let me see the option to use another type of kernel to scan my computer. I googled this problem, and at least one person thinks that these kinds of symptoms are caused by Trojans blocking access to antivirus sites.

Then today, I received another call from these people. Again, a man with an Indian accent he said that he had received information through his “research” that I had a problem on my computer. He said that he knew that my computer was slow in starting up and I had received “errors.” I quickly said goodbye and hung up. Pretty ambiguous description of my problems, but also accurate.

I feel that my computer is probably safe, because none of the scanners I have used have detected anything on my computer. But combine the weird phone calls, the fact that my system delays a little in starting up, the weird reference to Allstate when I had received a phone call from Allstate, the warnings about OnClickSupport putting Trojans on computers, my internet occasionally not working for some reason, and the failure of Trend Micro House Call to work, I have this nagging feeling that there is a Trojan on my system sending info to OnClickSupport. Can anyone tell me how to determine beyond what I have already done if there is a secret Trojan on my system, and what else should I do next? Or am I being over paranoid? Thanks for any help!

**TheBruce1** · 04-22-2009, 05:46 AM

Hello and welcome to TSF

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a

Quote:

Having problems with spyware and pop-ups? First Steps

link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please start a new thread in our Virus/Trojan/Spyware forum along with the required logs

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

04-22-2009, 03:26 AM	#1 (permalink)
bobrancher Registered User Join Date: Apr 2009 Posts: 12 OS: Windows Vista SP1	OnClickSupport trojan? Hello, I have been experiencing issues with my computer and would like some advice, if anyone would be willing to offer some! This is very long… but the story is complicated! I am not inexperienced with computers….but this one has got me worried. I am using Windows Vista. I have been having frequent problems with my computer, after about an hour of being online, suddenly no longer being able to access any webpage, and I receive the following error when I try to access a webpage: “ www.msn.com is not set up to establish a connection on port "World Wide Web servce (HTTP)" with this computer. " I must restart the computer in order to gain access. However, I am able to ping addresses such as www.yahoo.com, and my network connection is shown as “Local and Internet.” The other computers on my home network experience no problem, and are able to access the internet at the same time I get this error. Also, my computer has recently taken longer to start up immediately after I log in, before the “Welcome” sign shows up.. It stays on the log in screen for about 20 seconds longer than it used to. Then, about five days ago, while I was away from home, somebody called for me but I was not home at the time. They told a family member that something was wrong with my computer and to call them back at the following number DO NOT post phone numbers in an open forum. Unfortunately when I was first given this number, it was misspelled”. I was suspicious, but I looked up the number and found nothing, so I just ignored it. I looked at the caller ID, and the entry said “Out of Area”. Also, about nine minutes before this phone call, we had received a phone call from Allstate. Then, about 2 ago, I received another call from these people and took it myself. It was man an Indian accent who said he was from Allstate and asked if there was something wrong with my computer. I said no but he said that I had a virus on my computer and he had been alerted about it and that any moment it could corrupt my hard drive. I said that this sounded suspicious and hung up. But afterwards I began to worry, and tried to look up that phone number again, this type I somehow entered the right number in Google and came up with a whole bunch of stories of people who have been contacted by these people, OnClickSupport, and have had similar phone encounters. However, none of the other people mentioned anything about the people claiming to be from Allstate, which is odd because we received a phone call from Allstate right before the original phone call. Two people online have mentioned that they began having problems with their computers right before the phone calls began, and some people believe that this company is somehow getting Trojans onto people’s computers, and then calling people up and charging to remove these problems over the phone. The following sites describe other people’s encounters with OnClickSupport: http://800notes.com/Phone.aspx/1-347-289-3770 http://www.dslreports.com/forum/r222...scareware-scam http://whocallsme.com/Phone-Number.aspx/3472893770 http://www.theregister.co.uk/2009/04...careware_scam/ Then I became very worried that OnClickSupport had somehow got a Trojan horse on my computer. I already had AVG Antivirus and ZoneAlarm and Windows Defender installed on my computer. To be safe, I performed scans with AVG and Defender, and found nothing. I scanned my computer with Malwarebytes, Spybot S&D and Adaware after downloading them, and they found nothing but cookies. I scanned my computer online with Norton online scanner (virus & internet security scanners) and found nothing. I even scanned it with Panda online and found nothing. However, when I tried to scan my computer with Trend Micro House Call, it claims that I do not have the Java runtime environment when in fact I have the latest version, and it won’t let me see the option to use another type of kernel to scan my computer. I googled this problem, and at least one person thinks that these kinds of symptoms are caused by Trojans blocking access to antivirus sites. Then today, I received another call from these people. Again, a man with an Indian accent he said that he had received information through his “research” that I had a problem on my computer. He said that he knew that my computer was slow in starting up and I had received “errors.” I quickly said goodbye and hung up. Pretty ambiguous description of my problems, but also accurate. I feel that my computer is probably safe, because none of the scanners I have used have detected anything on my computer. But combine the weird phone calls, the fact that my system delays a little in starting up, the weird reference to Allstate when I had received a phone call from Allstate, the warnings about OnClickSupport putting Trojans on computers, my internet occasionally not working for some reason, and the failure of Trend Micro House Call to work, I have this nagging feeling that there is a Trojan on my system sending info to OnClickSupport. Can anyone tell me how to determine beyond what I have already done if there is a secret Trojan on my system, and what else should I do next? Or am I being over paranoid? Thanks for any help! Last edited by TheBruce1; 04-22-2009 at 05:44 AM.