Stupid xxx trojen horse saved on comp nearly fixed

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by foofighter, Nov 2, 2004.

  1. foofighter

    foofighter Private E-2

    Hello

    A trojen horse has downloaded it self to my desktop. It is called xxx :)
    anyway i cant delet it, it said i have to remove it form add/remove prgrams. But i cant see a program called 12476 somethign liek that.

    I have read your documnets and advice and they helped me laods.

    Symptoms:

    Internet Explorar wont open ( THis is fixed thanx too your document)

    A xxx program is saved on my desktop ( I NEED HELP WITH THIS)

    my home page has been saved as cool search ( i need help with this, it cant be changed)

    Every 30 minutes Internet explorar opens it self too cool search and another site (cant stop this NEED HELP WITH THIS)

    My comp sis very slow ( this is fixed thanx too your document it is know faster then ever, cause i deletd all crap i dont need)

    when i go on forums i have to refresh every time i open a page too get the update replies ( this is ok, but still anoying after a while.)


    i looked at the trojen horse on my desk top and her is the infor on it:

    Target Type: Application
    Target Location: Web site Viewer
    Target: "C:\Program Files\WebSiteViewer\124716.exe" /ac:124716 /sk: /lc: /ul
    Description: 124716


    This program is saved on desktop, start, local desk and web site viewer folder.

    Also every so often a bar comes up on my desk top saying laoding plugin which is not normally there.

    by the way i am a studant doing gcse i am very tired when i get home so cant be hasseled to fix it anymore. ( this is why my spelling is poor cause im tired)


    i can post a hijack this log but it said on the documents that only post this if asked.

    I folowed proccedures :)

    cheers for help

    Jason
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Have you run ALL of the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal ?

    Have you looked in Add/Remove programs to see if there is an uninstall for WebSiteViewer (or similar name)?


    If you answered yes to both of those questions then:

    Make sure you have HJT Version 1.98.2 and follow the guidelines on where to install it and how to post a log as an attachment. This is all covered in the sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

    Now post a HijackThis as a .txt file attachment to your message. All running programs should be closed, including your web browser, e-mail. Close before running Hijack This!

    To repeat: Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT
     
  3. foofighter

    foofighter Private E-2

    hey there yeah heres my lof file i hope it can be fixed :) :cool:
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You did not run all the steps in the READ ME. I see no sign of the Symantec online scan. Did yo skip anything else?

    Did you have all the Internet Explorer sessions open when you ran HijackThis? Or is this a part of your problem? All browsers must be closed when running HJT.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds