Infected Internet Explorer

Discussion in 'Malware Help (A Specialist Will Reply)' started by GBaxterWilson, Oct 10, 2008.

  1. GBaxterWilson

    GBaxterWilson Private E-2

    Help - my PC has infected internet explorer - can only access net through ISP home page and then search function but unable to navigate, & explorer crashes or opens multiple blank windows. When I can get onto Major Geeks.com unable to download files or upload logs - system just opens blank windows and then stops responding. Have tried the Windows XP cleaning procedure but the problems persist. Can anybody point me in the right direction - any help is greatly appreciated. Thanks.
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi and Welcome

    From the Windows XP Cleaning guide, their will have been some logs gained, to allow our malware experts to review these you will have to attach them, then they will be able to review them, work out what if malware related is infecting you and post some removal instructions, it maybe wise to run the guide below again as malware and what scans you may have done subsequently will have changed things.


    Welcome to Major Geeks!

    Please follow the instructions in the below link and attach the requested logs when you finish these instructions.


    • If something does not run, write down the info to explain to us later but keep on going.
    • Do not assume that because one step does not work that they all will not.
    Notes:

    1. If you run into problems trying to run theREAD & RUN ME or any of the scans in normal boot mode. You can running steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
    2. If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.


    plus a guide on how to attach the logs HOW TO: Attach Items To Your Post
     
  3. GBaxterWilson

    GBaxterWilson Private E-2

    Dear Halo,

    Thanks - I had already followed the useful Windows XP guide & ran CCleaner, Superantispyware, Spybot S&D, MBAM and Combofix and MGTools but Internet Explorer still infected and blocks uploading the logs to Major Geeks when online. It also blocks downloads through internet explorer as internet explorer hangs/goes blank or opens many blank windows - I had to use friend's pc to download cleaning software to CD and then load to my PC. any further help & advice greatly appreciated - is it possible to cut & paste & email the logs ?
     
  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Hi there GBaxterWilson:wave

    I would like to suggest to you that if you have been using a friends clean PC to download the tools onto the infected machine ----> then you could also transfer the 4 logs to friends PC via flashdrive to then upload to us from the clean PC for reviewal? Or...I could also suggest burning to a CD if you are afraid to plugin a flash drive for fear of infecting the other PC.

    Does the email program still work from the PC you believe to be infected?

    I would like to ask if you have tried using Windows Explorer instead of Internet Explorer to for browsing... It will work.
    What browsers are you using there?


    Thanks
    Kestrel13!
     
  5. GBaxterWilson

    GBaxterWilson Private E-2

    Hi Kestrel 13,

    Thanks for your reply - I did not want to risk infecting my friend's PC by transfering anything from the infected PC either by USB or CD. Do you know if it is 100% safe to save & transfer the logs by CD - the last thing we need is another infected PC ! If this is safe then will try to upload logs by this method.

    For internet I am using Windows Internet Explorer v6 - if I click on the icon it does not launch the program but simply produces another shortcut for Windows Internet explorer on my desktop - this repeats itself each time you click on the icon. To get online I have to go through my ISP home page, then use the search function & then navigate but uploads and downloads are blocked and navigation is problematic and often end up with multiple blank windows explorer screens.

    As always any advice/help gereatly appreciated.

    Thanks

    GBW
     
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Your logs will not be infected, so I suggest that you save them to your desktop and put them on CD.....you will not infect the other computer ( and we cannot help you without them...:()

    If you go to the folder for IE...( C:\Program Files\Internet Explorer), can you start iexplore.exe from there?

    Can you download to another computer a diff. browser such as FireFox and install it on your computer? Can you get on the web with it?
     
    Last edited by a moderator: Oct 17, 2008
  7. GBaxterWilson

    GBaxterWilson Private E-2

    Dear TimW,

    Thanks - MG & Combofix logs attached - I will also upload the Super Anti Spyware & MBAM logs although nothing flagged on these logs.

    I can get onto internet thru' the Program Files & IE Explorer.exe - it opens internet to my ISP home page from where I can navigate to other sites but still have the same problems uploading and downloading files and with internet hanging and opening multiple blank screens. Your further help and suggestions greatly appreciated.

    Thanks again,

    GBW
     

    Attached Files:

  8. GBaxterWilson

    GBaxterWilson Private E-2

    Dear TimW,

    SAS and MBAM logs attached - thanks again

    GBW
     

    Attached Files:

  9. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    What is this in your add/remove programs:
    Anti-spyware

    You can Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    After clicking Fix, exit HJT.

    Tell me what is happening and whether you did install a different browser and if you have the same issues with it.
     
  10. GBaxterWilson

    GBaxterWilson Private E-2

    Dear TimW,

    Thanks for your help & to answer your questions - Add/remove Anti-spyware - as part of infection had bogus anti-spyware pop up and removed this to try to fix the problem.

    I ran HJT & fixed the indicated file with all browsers closed but still have same problems with internet explorer when navigating and trying to upload/download files - new browser window opens but is blank and freezes or opens multiple blank browser windows and freezes and so have to close out through end task.

    I just installed Firefox (had to download via friend's PC & install from CD) and this seems to work better (only just tried it) but worried that whatever infection is blocking internet explorer is still lurking on my PC and so as always would appreciate your further advice.

    Thanks in advance,

    GBW
     
  11. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Have you tried uninstalling your version of IE and installing a newer version?

    Have you removed all add-ons and toolbars? Have you cleaned out the cache and run CCleaner?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds