This thread's last reply is from September 15, 2006, 5:54 PM UTC. Software, malware, and removal-tool
advice below may be out of date — treat specific steps and download links with caution.
deathside
Hello, it’s the first time i use this forum and i need some help on a very strange problem. I’m from Portugal and since I didn’t find useful help on Portuguese forums, I’m writing here, so sorry for errors and stuff like that. I guess this is the right topic to put my problem, cause I’ll also put an hijack log.
I’m experiencing problems on my connection to internet, I can only access webpages through IE in the first 2/3 minutes of connection. When I enter a on-line radio webpage I get it open under windows media player, the radio keeps playing normaly while I still can’t open the webpages on IE. Sometimes it gives the normal error, like when the page didn’t existed, or the connection is down. Others, appears a small window saying “internet explorer could not open the search pageâ€
deathside
ok, thanks a lot!
when you checked it please let me know..
Trogan
Hi again deathside,
I understand this is a work computer, however there is some BAD NEWS.
The computer has been infected by the IRCBot Worm, which is a Backdoor Trojan. This simply means that anything could have been installed on your computer by the remote attacker, including opening other backdoors and installing other rootkits. While we can attempt to clean what we see in your logs, we can't guarantee that your computer will be completely in the clear since we have no way of knowing that has been done to the computer. Your computer could be completely compromised at this moment. It may be sensible to backup your information, reformat, and reinstall. This is the ONLY way to be certain that the computer is safe!
Please follow these instructions NOW!
1. Disconnect infected computer from the internet and from any networked computers until the computer can be cleaned.
2. Call all of your banks, credit card companies, financial institutions and inform them that you may be a victim of identity theft and to put a watch on your accounts or change all your account numbers.
3. From a clean computer, change *all* your online passwords -- for email, for banks, financial accounts, PayPal, eBay, online companies, any online forums or groups you belong to.
Do NOT change passwords or do any transactions while using the infected computer because the attacker will get the new passwords and transaction information.
If, however, you decide that the computer is not used for any sensitive work, or if you do not wish to reformat at this time, I can definitely help you clean your computer to the best of my abilities.
Please let me know what you would like to do.
