Since I don't have the original problem anymore I suggest we close this topic. I do have a problem with the computer freezing up but I can open another topic in the appropriate forum.
One question, would running system restore to a date prior to the freezing up problem undo any of the malware removal that we have accomplished? Would it fix the problem?
Thanks for your help,
Dan
Hello BiggDan.System restore would undo all the malware removal we have done.As for closing the topic and starting a new one in another forum,we need first to make sure you are free of malware so please run the online scan suggested in my previous post.
Then we can clean up the tools we have ran here.
Sorry, I didn't see that post when I suggested closing this topic. I'm the post wasn't there. Could be because I am going to the page from my history file and it pulls up the old page only.
Dan
Moman,
I can not run Eset. The computer freezes up long before the scan is finished.
Since the problem with google redirecting was solved by clearing the temp internet files, I would like to restore to a time in the past to get rid of that problem and then begin again with the malware removal. What do you think? If the restore doesn't fix the problem we can always undo the restore and continue from where we left off with malware removal. But again, Eset will not complete on this machine at the moment.
Dan
Hello BiggDan.
It is your decision what you choose to do,i can only offer recommendations
I would certainly back up any important information from your machine while you are able.You should also consider a reformat as it is very doubtful that system restore would solve your issues.
Let me know what you decide to do.
Mowman,
I think I solved the freezing up problem. I got the computer running and was able to run ESET finally. After more than 4 hours of scanning here are the results:
C:\Qoobox\Quarantine\C\Documents and Settings\Dan\Application Data\SystemProc\lsass.exe.vir a variant of Win32/Kryptik.EHK trojan
C:\Qoobox\Quarantine\C\WINDOWS\system32\DOCOBJ32.dll.vir a variant of Win32/Kryptik.EHK trojan
H:\Data\Downloads\megamanager.exe probably a variant of Win32/TrojanDropper.Agent trojan
Let's continue with the malware removal.
Dan
FYI: The freezing up always seemed to be associated with using USB ports. If I connected the wireless internet adapter the computer would freeze up in a minute or two. If I turned on the external hard drive, same thing. It also always seemed to freeze while moving the mouse (a USB device) so I disconnected it and installed a wireless mouse I had laying around and the computer is running fine. The old mouse was quirky too, after I scrolled a page and began working on it the page would jump another half of a page all by itself and I would have to scroll back. I am hoping a bad mouse was the source of the computer freezing up.
Dan
Make sure you are running a FIREWALL.The windows firewall is not sufficient to protect your system. It doesn't monitor outgoing traffic and this is a must. Please read this article 'Safe Computing Practices'. So how did I get infected in the first place.
Preventing Infections in the Future
Please also have a look at the following links, giving some advice and Tips to protect yourself against malware and reduce the potential for re-infection:
Avoid gaming sites, underground web pages, pirated software sites, and peer-to-peer (P2P) file sharing programs. They are a security risk which can make your computer susceptible to asmörgåsbord of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks, gaming and underground sites. Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and Flash ads that install viruses, Trojans and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users. The best way to reduce the risk of infection is to avoid these types of web sites and not use any P2P applications. Read P2P Software User Advisories and Risks of File-Sharing Technology.
Update Non-Microsoft Programs
It is also a good idea to check for the latest versions of commonly installed applications that are regularly patched to fix vulnerabilities. You can check these by visiting Secunia Software Inspector and Calendar of Updates.
