Links4all.biz

ivanhoe222 · Dec 3, 2006

Help everytime i start computer internet explorer opens on this page(links4all.biz),i run avg and Ad-aware se personal which when run reveal trojanAF and installer exe cleaned i have also tried spybot, trojan hunter and cc cleaner all to no avail although i can then use computr normally.any assistance on this matter would be appreciated while i still have some remmants of hair left system is windows XP

DavidGP · Dec 3, 2006

Welcome to Majorgeeks!

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:

CounterSpy

AVG Antispyware log - ONLY IF NEEDED you were not able to run CounterSpy

Bitdefender - from step 6

Panda Scan - from step 6

runkeys.txt - the log from GetRunKey.bat

newfiles.txt - the log from ShowNew.bat

HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!

ivanhoe222 · Dec 4, 2006

hi thanks for quick reply,have carried out all steps in sticky link and counterspy seems to have resolved the problem computer now starts up as
normal,i was getting a pop up message that an attempt to add a startup program to your registry is being made (winstall.exe),have run avg and adaware se and both have come up clean apart from the odd tracking cookie ,Have attached counterspy and hijack this log i would be extremely grateful if you could take a look at them and advise on further action
regards and extremely grateful jim

chaslang · Dec 4, 2006

You are more than likely still infected. It would be in your best interest to complete all the steps given and attach all logs as reqested. You had files from a Spy Sheriff infection which typically brings along other baggage and it could also cause problems with your Desktop and wallpaper. You also IGNORED a whole bunch of other problems that CounterSpy detected.

I also see Messenger Plus! in your CounterSpy log! We HIGHLYrecommend that this be uninstalled. It is the cause of tens of thousands of PCs being infected with malware.

Note: You did not install HijackThis into the correct folder. You installed it exactly where we specify not to put it.

ivanhoe222 · Dec 8, 2006

i thanks for reply have been away for a few days so sorry for late reply,have gotten rid of spy sherrif and taken action on items counterspy detected also deleted messenger plus as directed,apologies regarding hijack this as i am a complete novice at this,when i get a few spare hours will run scans and post logs as advised once again many thanks

chaslang · Dec 9, 2006

You're welcome. Just attach the logs as soon as you finish running all steps.

Log in or Sign up

Links4all.biz

ivanhoe222 Private E-2

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

ivanhoe222 Private E-2

Attached Files:

counterspy.txt

hijackthis.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

ivanhoe222 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member