|
|
|
|
|||||
|
|
|
|
|
|
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| Resolved HJT Threads Resolved spyware and popup issues. |
|
|
LinkBack | Thread Tools |
06-17-2006, 09:27 AM
|
#1 (permalink) |
|
Registered User
Join Date: Jun 2006
Location: Scotland
Posts: 33
OS: XP
|
NewDotNet Virus/Browser Hijacker
Hi all, new here.
I got a NewDotNet virus in my computer last week that wouldnt let me access the net but after running a few different programs i was able to get back online. Im not sure how secure my computer is now so i was wondering if anyone could help me 'clean' it up if i post a Hijack This log? Thanks in advance for any help. |
|
     |
| Sponsored Links |
|
06-17-2006, 09:52 AM
|
#2 (permalink) | |
|
Registered User
Join Date: Jun 2006
Location: Scotland
Posts: 33
OS: XP
|
Here's the log.
Quote:
|
|
|
|
|
|
06-17-2006, 04:34 PM
|
#3 (permalink) |
|
Mentor, Analyst - Security Team
Join Date: May 2006
Location: Oregon
Posts: 2,503
OS: MacOS X, Debian, OpenBSD, Windows
|
Hi and welcome to TSF!
I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem as soon as possible. You may wish to Subscribe to this thread (Thread Tools) so that you are notified when you receive a reply. Please be patient with me during this time.
__________________
The chance to begin again in a golden land of opportunity and adventure. Need HijackThis help? Please read MicroBell's Five Step Process before posting.
Please donate and help keep this site free to all.  UNITE/ASAP: Proud member since 2006 |
|
|
|
|
06-17-2006, 05:07 PM
|
#4 (permalink) |
|
Mentor, Analyst - Security Team
Join Date: May 2006
Location: Oregon
Posts: 2,503
OS: MacOS X, Debian, OpenBSD, Windows
|
Hello chris01,
Your log looks clean but let's run through a few things. Are you currently experiencing any other issues on this computer now that NewDotNet is gone? Please print out or copy this page to Notepad in order to assist you when carrying out the following instructions. If there is anything you don't understand, please ask BEFORE proceeding with the fixes. Please do these steps in order and do not skip any. Multiple Antivirus I see you have two or more antivirus programs installed. Multiple antivirus programs can bog down your system, interfere with each other, and may even cause crashes. I highly recommend you remove all but one of them using the Add/Remove Programs in the Control Panel. Downloads Download and install CleanUp!. *WARNING* CleanUp! deletes EVERYTHING out of temp/temporary folders and does not make backups. Run CleanUp! Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu). Set the program up as follows:
Run Ewido Open Ewido:
Update Java We need to update your Java as it is out of date. Older versions can be a security risk as malware writers have been known exploit the weaknesses the code.
Online Scan Perform an online scan with Internet Explorer with Panda ActiveScan.
With Your Next Post... Please paste the following with your next reply:
__________________
The chance to begin again in a golden land of opportunity and adventure. Need HijackThis help? Please read MicroBell's Five Step Process before posting.
Please donate and help keep this site free to all. UNITE/ASAP: Proud member since 2006 |
|
|
|
|
06-18-2006, 07:00 AM
|
#5 (permalink) | ||
|
Registered User
Join Date: Jun 2006
Location: Scotland
Posts: 33
OS: XP
|
Quote:
Quote:
The Panda Software wouldnt work for me for some reason, the pop up is working but its just a white screen and it says done. Ill try again in a while but here are the other two reports you asked for after scanning. Thanks |
||
|
|
|
|
06-18-2006, 08:14 PM
|
#6 (permalink) |
|
Mentor, Analyst - Security Team
Join Date: May 2006
Location: Oregon
Posts: 2,503
OS: MacOS X, Debian, OpenBSD, Windows
|
Hi chris01,
If you still can't get Panda to work for you, let's try Kaspersky's Online scan: Perform an online scan using Internet Explorer with Kaspersky WebScanner. Click on Launch Kaspersky Anti-Virus Web Scanner. You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
__________________
The chance to begin again in a golden land of opportunity and adventure. Need HijackThis help? Please read MicroBell's Five Step Process before posting.
Please donate and help keep this site free to all. UNITE/ASAP: Proud member since 2006 |
|
|
|
|
06-19-2006, 12:31 PM
|
#8 (permalink) |
|
Mentor, Analyst - Security Team
Join Date: May 2006
Location: Oregon
Posts: 2,503
OS: MacOS X, Debian, OpenBSD, Windows
|
Hi chris01,
Most definitely a good sign. Any more issues? If not, you should be good to go but we still have a few items we'd like to address. Reset System Restore
Microsoft Updates It is very important that you get all of the critical updates for your Operating System and Internet Explorer. Keeping your OS and browser up to date will help make you less susceptible to attacks by malware. Using Internet Explorer, please go to Microsoft's Windows Update and download all of the critical updates to help prevent possible re-infection. Please ensure that you have already patched your system against the recent WMF exploit. Go to this page to get the KB912919 patch. Enable Windows Auto Update:
Malware Prevention This is a good time to set up protection against further attacks. You might want to read Tony Klein's "How Did I Get Infected In The First Place?". At the minimum, you need an antivirus that is continually updated, a good firewall, a spyware blocker such as Spyware Blaster, and a real time spyware program such as Spyware Guard to prevent spyware intrusions. I also recommend IE-Spyad, which places over 4,000 websites and domains in the IE Restricted list, thus helping prevent attempts to re-infect your system. All of these have no-strings-attached free versions available. However, be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use but often have malware in them. Two more articles you may want to read at your leisure are "KRC Anti-Spyware Tutorial" and "Making Internet Explorer Safer". The following is a list of free software we recommend: Firewalls A good firewall is the first-line of defense for your computer and will monitor incoming and outgoing traffic. NOTE: Microsoft's Firewall does not monitor outgoing traffic. If you are unfamiliar with how a firewall works, you can read "Understanding and Using Firewalls". Here are some free firewalls available for personal use:
These programs actively watch your computer for possible malware-related changes and help prevent them. You can run more than one of these at a time.Passive Malware Prevention Tools These programs configure your computer to prevent known malware-related changes. You can have more than one of these at a time and they take up minimal resources.
Here are some alternatives that are worth looking into if you use their features:
Please respond to this thread one more time so we can mark this thread as resolved.
__________________
The chance to begin again in a golden land of opportunity and adventure. Need HijackThis help? Please read MicroBell's Five Step Process before posting.
Please donate and help keep this site free to all. UNITE/ASAP: Proud member since 2006 |
|
|
|
|
06-19-2006, 02:52 PM
|
#9 (permalink) |
|
Registered User
Join Date: Jun 2006
Location: Scotland
Posts: 33
OS: XP
|
Thanks for all your help Deckard, hopefully thats the end of my troubles.
Ive downloaded the patches you mentioned and have adaware, spyware guard and spyware blaster on my computer now. Thanks again, much appreciated.  
|
|
|
|
| Thread Tools | |
|
|
46, on 15/06/2006
