Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

internet conection with strange problem, maybe spyware...

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

internet conection with strange problem, maybe spyware...

Unread postby deathside » August 29th, 2006, 4:25 pm

Hello, it’s the first time i use this forum and i need some help on a very strange problem. I’m from Portugal and since I didn’t find useful help on Portuguese forums, I’m writing here, so sorry for errors and stuff like that. I guess this is the right topic to put my problem, cause I’ll also put an hijack log.

I’m experiencing problems on my connection to internet, I can only access webpages through IE in the first 2/3 minutes of connection. When I enter a on-line radio webpage I get it open under windows media player, the radio keeps playing normaly while I still can’t open the webpages on IE. Sometimes it gives the normal error, like when the page didn’t existed, or the connection is down. Others, appears a small window saying “internet explorer could not open the search pageâ€
deathside
Active Member
 
Posts: 2
Joined: August 29th, 2006, 4:14 pm
Advertisement
Register to Remove

Unread postby Trogan » August 29th, 2006, 6:24 pm

Hi deathside! Welcome to Malware Removal! :)

I'm looking over your log now, and will post back soon. :)
User avatar
Trogan
MRU Teacher Emeritus
 
Posts: 2291
Joined: November 26th, 2005, 9:31 am
Location: London

Unread postby deathside » August 30th, 2006, 4:24 pm

ok, thanks a lot!
when you checked it please let me know..
deathside
Active Member
 
Posts: 2
Joined: August 29th, 2006, 4:14 pm

Unread postby Trogan » August 30th, 2006, 10:21 pm

Hi again deathside,

I understand this is a work computer, however there is some BAD NEWS.

The computer has been infected by the IRCBot Worm, which is a Backdoor Trojan. This simply means that anything could have been installed on your computer by the remote attacker, including opening other backdoors and installing other rootkits. While we can attempt to clean what we see in your logs, we can't guarantee that your computer will be completely in the clear since we have no way of knowing that has been done to the computer. Your computer could be completely compromised at this moment. It may be sensible to backup your information, reformat, and reinstall. This is the ONLY way to be certain that the computer is safe!

Please follow these instructions NOW!

1. Disconnect infected computer from the internet and from any networked computers until the computer can be cleaned.

2. Call all of your banks, credit card companies, financial institutions and inform them that you may be a victim of identity theft and to put a watch on your accounts or change all your account numbers.

3. From a clean computer, change *all* your online passwords -- for email, for banks, financial accounts, PayPal, eBay, online companies, any online forums or groups you belong to.

Do NOT change passwords or do any transactions while using the infected computer because the attacker will get the new passwords and transaction information.

If, however, you decide that the computer is not used for any sensitive work, or if you do not wish to reformat at this time, I can definitely help you clean your computer to the best of my abilities.

Please let me know what you would like to do.
User avatar
Trogan
MRU Teacher Emeritus
 
Posts: 2291
Joined: November 26th, 2005, 9:31 am
Location: London

Unread postby agrarianmonk » September 15th, 2006, 1:54 pm

Whilst we appreciate that you may be busy, it has been 14 days or more since we heard from you.

Infections can change and fresh instructions will now need to be given. This topic is now closed, if you still require assistance then please start a new topic in the Malware Removal Forum

If you wish this topic reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.
User avatar
agrarianmonk
MRU Teacher Emeritus
 
Posts: 5439
Joined: December 24th, 2005, 3:11 am
Advertisement
Register to Remove


  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 301 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware