Default broswer page changed

Discussion in 'Malware Help (A Specialist Will Reply)' started by KittyM, Oct 25, 2005.

  1. KittyM

    KittyM Private E-2

    My IE default page changed to www.warningmessage.com. Before it loads up that page. It says... "res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm" I tried looking for that file, but I can't find it :mad: I'm getting random pop ups once in awhile that advertise dating, and gambling. Also whenever I start up my computer while loading it keeps installing PSGuard. On the website www.warningmessage.com it says my computer is infected with W32.Sinnaka.A@mm. I'm running out of ideas. I've tried running avast, and ad aware se. Of course they keep detecting the files, but they won't delete permanently. Even when going into safe mode it says I can NOT delete the file.
     
    KittyM, Oct 25, 2005
    #1
  2. KittyM

    KittyM Private E-2

    Okay after awhile of scanning over and over... avast on the start up scan deleted wininet.dll is there a way I can replace that file? because I can't do anything at the moment but log in and have that msg and nothing else shows up =/
     
    KittyM, Oct 25, 2005
    #2
  3. KittyM

    KittyM Private E-2

    Okay I was able to replace the wininet.dll file, but i'm back at square 1 :(
     
    KittyM, Oct 25, 2005
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please follow the steps below:

    - first run the procedure in another one of our Special Cleaning threads: Smitfraud and PSGuard Removal Save posting the smitfiles.txt log for later.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

    Downloading, Installing, and Running HijackThis

    Also remember to attach your smitfiles.txt log.
     
    chaslang, Oct 26, 2005
    #4
  5. KittyM

    KittyM Private E-2

    I attached both the HJT and Smitrem file.
     

    Attached Files:

    KittyM, Oct 26, 2005
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay it appears that we fixed Smitfraud and PSGuard.

    Next time please run the READ & RUN ME steps (ALL of them). You did not run them.

    Note we do not recommend using MessengerPlus! 3. It is a sneaky piece of software that can install loads of bad stuff including LOP onto your PC if you are not very careful when installing it.

    Other than that you are clean! Are you still having problems?
     
    chaslang, Oct 26, 2005
    #6
  7. KittyM

    KittyM Private E-2

    Ya... The only thing left is the random pop ups that I get once in awhile about gambling and what not... but so far it hasn't appeared.
     
    KittyM, Oct 26, 2005
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What random popups about gambling?

    When do you get them? Is it only when connected to certain websites?
     
    chaslang, Oct 26, 2005
    #8
  9. KittyM

    KittyM Private E-2

    No it's when I'm online in general. I don't even have to be on Aim or MSN or be browsing any sites what so ever, but I don't know that could be part of what I have had earlier... That doesn't seem to be happening now... So I guess it's gone, but it's not so good to guess. Ultimately I think it isn't there anymore. I think it happened with I had that stuff in my computer earlier. No more surfing for me just games now. Don't really wanna risk having more problems... Though it is possible even if you're just online not doing anything or just playing games. Surfing I think is the easiest way and so is downloading. Are there any ways to block bad scripts and unnotified DLs? I'm using mozilla now... It seems to be ok though the blocking pop ups is kind of annoying because many sites open up a new window to view further details of a topic and such...
     
    KittyM, Oct 28, 2005
    #9
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    chaslang, Oct 28, 2005
    #10
  11. KittyM

    KittyM Private E-2

    Ya thanks they're not coming back anymore
     
    KittyM, Oct 30, 2005
    #11
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome! Then follow the steps in the How to protect link.
     
    chaslang, Oct 30, 2005
    #12

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds