News Focus
News Focus
Post# of 33360
Next 10
Followers 6
Posts 1621
Boards Moderated 0
Alias Born 08/12/2002

Re: renshen1 post# 7915

Saturday, 04/16/2005 3:01:14 PM

Saturday, April 16, 2005 3:01:14 PM

Post# of 33360
Re "about:blank" - Trojan - Browser Hijacker - Spyware

I am a techie but no expert in the registry or things of that level. Not sure what a "key" is or other terms used to describe registry stuff.

I eventually found what I think was the infected file withthe trojan in it called "netqx.dll".

I found this using the Microsoft Beta Anit Spyware prgram but I want to make it clear thsat this program did not detect the file by itself.

It has Advanced tools and two very handy features - "System Explorers" and "Browser Restore". These utilties allow you to see varuious files associated with these improtant functions of your computer. One of them shows detailed information about each file like - author- use - publisher- date etc - you can easily get a feel for something suspicious and thats how I found it - I hope.

This thread allowd me to get an idea of whatit was that I was looking for especially the size of the file and that it was a dll file.

Also on this thread I found the reference to Spyware Nuker 2005 which finds things that the other Spyware doesn't find.

Things to note:-

I never found a file called se.dll

My Norton kept warning me of a Trojan Horse every time that I opened my Interent Explorer and then it told me the name and folder of the file BUT also said that it couldn't do anything about the file.

I called Norton day one and they tried to help me clea it which we did until I rebooted and then it was back with a vengance.

Microsoft -India I guess - were very nice people but useless. If they had to go from a - z they had to do the wqhole alphabet and had me actually reading out the entire contents of folders...phew..too much.

There was another serch page which kept appearing in a separate and vertical oblong window to the right of my IR window. Ostensibly nothing hostile about it and it looked like a good search engine but I didn't want it thanks and you enver know.

Went back to Norton and they said that I had been infected with Spyware and they don't do spyware so goodbye.. Thanks for that.

Donwloaded:-

AboutBuster:
http://www.malwarebytes.biz/AboutBuster.zip

Didn't find anything

http://cwshredder.net/bin/CWSInstall.exe

Didn't find anything

CleanUp - very good eraser of sorts of stuff that I thought was gone at previous cleanings
http://www.greyknight17.com/spy/Cleanup.exe

I have a feeling that there is something still on my computer although eveything except my Microsoft Updates seems to be working OK and so far no sign of a hijack.

I also have Spybot, Pest Patrol and NoAdware and Lavasoft. They found things but of course they came back again as soon as I opened an IE window. But they do keep the comp[uter clean and I feel better wit hall of them incredible but thats my experience.

Thanks

Discover What Traders Are Watching

Explore small cap ideas before they hit the headlines.

Join Today