SITEBAR TB.EXE problem

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by nueve, Oct 25, 2005.

  1. nueve

    nueve Private E-2

    Hello, I'm currently having a very big problem with a browser hijack, hopefully that's all I have, it's bad enough as it is. Well I'm using someone elses computer to type this because my internet is dead, I can connect sometimes, but I can't browse with any type of browser, netscape, IE, firefox etc... What happens is, If I don't connect to the net the hijacker usually won't pop up, here's what happens. Command prompt opens up for no reason (cmd.exe) then this popup comes up asking me if I want to upgrade my internet explorer toolbar, I always close it of course, I find out where it's coming from and what it is but even after I delete it and all the files with it, it keeps coming back! The file that cmd.exe loads is called "tb.exe", istbars have been found on computer searches and the files that are put with the tb.exe on my C: Drive are these:
    is.exe
    low.exe
    mmxateam.exe
    sw.exe
    xe.exe
    zxvcc73x.exe

    theyre all applications and I believe they are all exe files, I've used various spyware/adware programs but nothing has helped, ive used spybot, ad-ware, spydoctor, cleanup etc..... I've even looked for these certain files in the registry and deleted anything with their names on it.
    I really don't want to start from scratch with this computer, it's brand new. Please, someone help me, this getting extremely frustrating.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please try to follow the steps below to the best of your ability. Note if you do get to the point of attaching a HijackThis log, you will not be able to attach it if the cmd.exe process is running in the process list. Just edit the line to change text cmd.exe to say command executable. This is a bug in th vB system.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

    Downloading, Installing, and Running HijackThis

    .
     
  3. nueve

    nueve Private E-2

    :cool: I realized that out of everything the best thing to do was install ZoneAlarm, it's perfect now. The hijacker is still on my computer but it can't run, I'd like to still get rid of it though, when I do the tutorial I will get back to you and post my results, thanks.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay! Just come back and post your results in this thread.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds