This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Backdoor Poison Variant [Closed]

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi.  I am writing for help with removing the above malware or whatever it is.  I am currently still using Vista and primarily use Firefox browser, with Chrome as a backup when FF gets glitchy.  Anyway, I used my computer (Dell Inspiron Laptom) at about 7 am and things seemed fine, logged on to a website and everything was working.  Then around 8:30 or so, I tried to log on to another website and noticed auto-fill-in wasn't working and long story, short, I couldn't get the menu in the top right corner to open.  Through tools I found that all my extensions and add-ons seemed to be missing.  I also wasn't able to bookmark a webpage.  I did a virus scan with Malwarebytes and that found nothing.I think did a scan with Superantispyware trial edition and it found the following:  Backdoor Poison Variant - 5 items; Adware Tracking Cookie, 1013 items.  I had closed all browsers while doing the second scan and when I reopened FF, it is now working again - I can now open the menu, extensions and add-ons are back, auto-fill-in is back, everything seems to be working again.  I am of course concerned about this scan finding of the Backdoor Poison Variant.

 

The only thing I can think of that may have put it on my computer is an email from several days ago.  I received something from an insurance agent who has been calling and emailing me over the past few weeks.  I do believe she's for real but still, when I tried to reply to her email, my cursor starting doing really odd things, blinking really fast and bouncing around.  I closed the whole thing out and did two scans at the time that found nothing but I'm wondering now it that may have put something on my computer.  Anyway, my question is how do I get this off my computer.  I'd be grateful for any help anyone can give me.

 

Thanks.

:welcome:

 

I am trying to follow what you said, is your computer fine now ?  It looks like SuperAntiSpyware may have removed it.  I dont use it myself , I dont have it on this machine so i cant give you any instructions for running it. Open SAS up, check for updates and run a new scan and see if it still finds it or if its gone.

 

After you do that run these programs and post the logs so I can see whats going on. Be sure to download these programs to your desktop .

 

 

[external image: 1QYkxTZ.jpg] Please download aswMBR to your DESKTOP <<<<<
 
  • Right click the aswMBR icon and select Run as Administrator
  • XP users just Double Click it to run
  • If it says that this computer supports VIRTUALIZATION TECHNOLOGY do you want to use it say Yes
  • Click the Scan button to start scan.
  • Select Quickscan on the dropdown list
  • If you are asked to update the Avast Virus database please allow it to do so.
  • The scan could take 20 minutes or more , please be patient and let it finish
  • It will say Scan Finished when its done.
  • When it finishes, press the save log button, save the logfile to your desktop and post its contents in your next reply.
  •  
    I just want to see the report….Please Do Not Fix Anything
     
    ============================================================================
     
     
    Please download Farbar Recovery Scan Tool and save it to your DESKTOP<<<<<<
     
    Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
     
    How to determine whether a computer is running a 32-bit version or 64-bit version of the Windows operating system
    A simple way to check your system: Start –> Computer (right click) –> Properties
     
    [external image: FRST_zps5d956a1a.jpg]
     
     
    • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
    • Just keep the defaults as in the picture checkmarked
    • Press Scan button.
    • It will produce a log called FRST.txt in the same directory the tool is run from.
    • Please copy and paste log back here.
    • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
    • Ask AI

      AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

      Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI