This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

browser hijacking and trojan virus

47 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hello JonTom I tried the second method you suggested. CODE @echo off for %%g in ( "C:\Qoobox\Quarantine\c\program files\Common Files\OnlineFilesManager.dll.vir" "C:\Qoobox\Quarantine\c\Program Files\Common Files\Data\hd39_module.dat.vir" "C:\Qoobox\Quarantine\c\windows\system32\19153993741.dll.vir" ) do zip Files_for_submission %%g del %0 Save this as grab.bat Choose to "Save type as - All Files" Save it on your desktop. Files_for_submission.zip will be created on your desktop. Please upload that file here: It produced no file on the Desktop or any where else. Files_for_submission.zip I searched the computer and found no file created I tried it twice – no file created. Does the second method make the file smaller than the first method, Because the problem with the first upload was the size of the zipped file. It was Zipped. “The folder is 11 mega-bytes zipped. The max size for uploaded files is 5 mega-bytes. So. I got an error trying to send the folder” Boffo
Hello boffo123

Does the second method make the file smaller than the first method

The bat file only collects the files we require rather than the whole folder so it will be much smaller.

I am not sure why the previous batch file failed. Please try again with the following (do not copy the word "code"):

@echo off
for %%g in (
C:\Qoobox\Quarantine\c\program files\Common Files\OnlineFilesManager.dll.vir
C:\Qoobox\Quarantine\c\Program Files\Common Files\Data\hd39_module.dat.vir
C:\Qoobox\Quarantine\c\windows\system32\19153993741.dll.vir
) do zip Files_for_submission %%g
del %0

Please let me know if the file is created this time, and if you are able to upload it.

Thank you for your patience :)
Hello JonTom Tried again twice. I did not use the word "code" before in the script. Nothing produced on desktop. Searched comp for "Files_for_submission" or a "zip" file created today nothing. What now. Boffo
Hello boffo123

It is possible that the files are no longer present on your system.

If you would not mind, I would like you to confirm if this is indeed the case.

Please navigate to C:\qoobox and see if you can find the following files:

C:\Qoobox\Quarantine\c\program files\Common Files\OnlineFilesManager.dll.vir
C:\Qoobox\Quarantine\c\Program Files\Common Files\Data\hd39_module.dat.vir
C:\Qoobox\Quarantine\c\windows\system32\19153993741.dll.vir


NOTE Please be Very carefull when looking in the qoobox folder. Do Not under any circumstances double click on any files that you find inside.

If the requested files are indeed absent, let me know and we will continue :)
Hello JonTom The files must be missing. I searched for each file name with it's path and they could not be found. Things are still working good. Don't have to sign in every time online - no redirecting. Boffo
Hello boffo123

The files must be missing

Thank you for checking.

If you are no longer experiencing any problems I believe we are almost done :) Please work your way through the following cleanup procedures and respond back one more time so we can consider this thread resolved:


  • Please Uninstall Combofix


    • Click on "Start" and then on "Run".
    • Now type combofix /uninstall in the run box and click "OK". Please note the space between the "x" and the "/Uninstall", it needs to be there.
  • Please perform the following cleanup procedure


    • Double click on OTL.exe to run the program. (Note: If you are running Vista/Windows 7, right-click on the file and choose Run As Administrator).
    • Once OTL has opened, click on the "CleanUp!" button.
    • Follow any prompts that you receive.
  • Removal of Tools

    • You no longer need TDSSKiller, Security Check, MBRCheck or GooredFix. Please delete them from your machine.

    I need an Adobe reader. I will wait for now on downloading a newer version till you give me the OK.

  • Adobe


    • You can obtain the latest version of Adobe Reader from here, and the latest version of Flash Player from here.
    • For more information and links to Adobe updates and downloads click here.


    Once you have completed the above steps you should be good to go! If you have any further questions, please feel free to ask.

  • Finally, please take the time to read through the information provided below:

    Enhance your System Security

    • For an excellent list of free anti virus software, free online virus scanners, free spyware detection/removal and free firewalls, click here.

    • IMPORTANT! Please make sure you only have ONE firewall and ONE real-time antivirus installed on your system. When using "on demand" scanners, first update the detection signature files, then disconnect from the internet and disable your resident security program before running the scan.
    • Once complete, remember to re-engage your resident security before going online.

    Web Browsers and Browser Security

    Firefox
    • Firefox is generally considered to have greater browsing security in comparison to other popular programs. You can download Firefox 3.0 from here.

    No-Script
    • If you use Firefox as your default browser, No-Script can provide additional security by preventing malicious scripts from being executed on your system.
    • You can download No-Script by clicking here.

    Internet Explorer
    • The newest version of Internet Explorer is available from here.

    SpywareBlaster
    • If you use Internet Explorer as your default browser, SpywareBlaster would be a valuable addition to your online security.
    • SpywareBlaster prevents malicious ActiveX objects from being downloaded onto your system.
    • You can download SpywareBlaster by clicking here.

    Web of Trust
    • When using search engines, Web of Trust provides you with an easy way of telling the good sites from the bad and is compatible with both Firefox and Internet Explorer.
    • Coloured symbols are displayed next to search results, giving you more confidence in the links you choose to click on: Green (To go), Yellow (Caution) and Red (Stop).
    • You can download Web of Trust by clicking here.

    Keep your Software Updated
    • Outdated software can sometimes have vulnerabilities that are exploitable by malware.
    • Check if there are available updates for your installed software with Secunia's Online Software Inspector by clicking here.

    Passwords
    • Learn how to create strong passwords by clicking here and test the strength of the passwords you already use by clicking here.

    General Reading

    Learn How To Combat Malware
    • Would you like to learn how to fight back against malware and help others? Enroll at the What The Tech (Formerly Tom Coyotes) Malware Classroom by clicking here.
Hello JonTom I read your last post and removed the items you mentions. I also downloaded FireFox and No Script. Will give them a try. I want to thank you for your help. Your computer expertise and patience was invaluable to solving my computer problem. I know my problem was a difficult challenge and you conquered it. Thank You Again Boffo
Hello boffo123

I want to thank you for your help

You are Very Welcome :)

I also downloaded FireFox and No Script. Will give them a try.

No Script take a little getting used to but it is a very good application.

I know my problem was a difficult challenge and you conquered it

This was indeed an interesting case, but I cannot take all of the credit. A fix would not have been possible without some excellent assistance from a number of Helpers and Malware Experts (you know who you are, and I thank you all :notworthy: ).

I am glad we could help with your problem.

As your problem appears to be resolved, this thread is now closed.

Best wishes
JonTom

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI