Virus

[Operator]

While I was away, one of my computer "illiterate" relatives was on my computer. When I returned home I found out that my Internet Explorer was hijacked and everytime I loaded the program I was automatically sent eight viruses and then some.

What I have done so far
Scanned my computer with Trend Micro Internet Security twice
Scanned my computer with SpyBot Search & Destory twice
Scanned my computer with Adaware twice.

Each program yeiled different results. I've deleted my cookies, internet files and cache.

I no longer feel safe inputting sensitive data. Do you recommend any additional products (preferably freeware) that I may use to spot the remaining viruses and spyware? Do you recommend I do a complete format and start from scratch?

Thanks.

[Toolz]

Do you recommend I do a complete format and start from scratch? This is never a bad option. Use some kind of ghosting software and configure the OS so most of your settings and your files are stored outside the system partition to make it easy in future.

And use a non-admin account.

And (puts in tin foil hat) try to avoid IE.

[markblair]

You may want to try this. Although I don't care for McAfee VirusScan all that much, they do make a product (which is free) that is meant to combat the latest and greatest viruses.

Download the McAfee AVERT Stinger (http://vil.nai.com/vil/stinger/) application. Download Link (http://download.nai.com/products/mcafee-avert/stinger.exe)

This program is built to look for the latest viruses. It takes care of stuff from W32/Bagle@MM to W32/Blaster.worm to W32/Netsky. It very simply works. If any of the known variants listed on the above site are on your computer, this program will remove them. And best of all, it's completely free! :D

[Robert]

Download HiJack this and run it.

[thebyp2]

adware 6 is good for removing spybots but it sounds like its time to reload from scratch.

[Chicken]

I'm having the same problem unfortunately. I don't know what site caused it, may have been an iframe ad, or who knows (I really don't go to all that many different sites generally), but something got me.

[bear]

My wife was hit with one of these. The site disabled her popup stopper, and loaded this through a popped up window (it seems).

Hijacked the browser, added in a bunch of desktop icons, etc. In the end I was forced to load a registry copy from just before the 'attack' to keep it from autoloading, and then did a comprehensive search for files created or modified from the day before the attack to the present, to wipe out the programs themselves. There were plenty.
Many deletes and a painstaking regedit later and it was gone.

I'd like to meet the author and have a long chat with him/it.

[Ehost4cheap]

I had this same problem, what you do is go to www.norton.com and download the trial of norton antivirus 2004 it will remove it from your computer. I was suprised because i tryed all the basics, ad-aware, spybot, spysweeper, etc.

[bear]

Thanks, but I've sworn off Norton since the most recent '2004' version. Caused major problems on my system, and was slowing it down noticeably.
Besides...when this hit, the wife *was* running NAV. It didn't notice, and happily allowed the attack. (updated just that morning, half an hour before..)

I've now updated all systems in the house to AVG.

[Chris Hill]

AVG is good, in my oppinion the best free virus scanner/anti-virus programme, and if you want to be safe, download the free version of a firewall at www.zonelabs.com, so far so good for me

*touches wood*

[Toolz]

AVG is good, in my oppinion the best free virus scanner/anti-virus programme, and if you want to be safe, download the free version of a firewall at www.zonelabs.com, so far so good for me It's funny I wasn't impressed with either of these. The former because it doesn't work; the latter 'cos it doesn't play well with other apps...

[Operator]

Thanks guys, I've tried every solution posted above. In the end I just couldn't live without thinking that I could have more unidentified spyware lurking around -- so I reinstalled Windows.

[markblair]

Originally posted by Operator:

Thanks guys, I've tried every solution posted above. In the end I just couldn't live without thinking that I could have more unidentified spyware lurking around -- so I reinstalled Windows. Sometimes, that's just the best way to go. Especially if you know any attempts at fixing the problem may take longer and don't necessarily have a guarantee on them being resolved. Glad to hear it worked out in the end.

[MMiz]

Today everyone at school got hit by the W32/Bagle@MM virus. I have Norton Antivirus 2003 with updates, and it does a nightly scan and auto-protects, and I have ZoneAlarm pro, and it still got through. I seriously have no clue, I assume it got in through a port or from a site.

Fortunately Norton took care of it. I'm a huge fan of Norton, it really hasn't let me down.

[bear]

Originally posted by Toolz:

It's funny I wasn't impressed with either of these. The former (AVG) because it doesn't work Oh? Can you cite an example? I've found it to work great, and it is also the app of choice for those that discuss solutions on usenet (alt.virus etc.). These are the folks that regularly receive bugs from "fans", so to speak, and they claim AVG gets them all.
I'd be honestly interested to hear why you feel it doesn't work.

--------
Operator: "so I reinstalled Windows."

isn't that spyware too? j/k ;)

[Chris Hill]

i heard that AVG lets hidden trojans through sometimes, but generally i have always seen very good reviews about them, at least 3 stars out of 5, going up to 5/5, i too would be interested if you could give examples as to why it does not work.

[Toolz]

Originally posted by bear:

Oh? Can you cite an example? I've found it to work great, and it is also the app of choice for those that discuss solutions on usenet (alt.virus etc.). These are the folks that regularly receive bugs from "fans", so to speak, and they claim AVG gets them all.
I'd be honestly interested to hear why you feel it doesn't work.
Erm... this is embarrassing... (where's that icon of someone hiding behind a sofa?)

Thanks for the interest bear, but I regret this was a while ago. I remember I tried an Israeli and a German product close together and I rejected them both. (AVG is one of these I hope! ;) )

After that I tried Norton which I knew I'd regret but...

Right now I'm naked (I have a great firewall) which I really think is best 'cos I don't do that much email and I'm not using OE.

I don't use much at all from M$ which really does lessen the risk.

I keep meaning to try this which looks like an up and coming contender:
http://www.networkingfiles.com/AntiVirus/nod32.htm

Sorry I can't help more than this. AVG could well have been my favourite, from my limited test, but for my needs I prefer having nothing right now.

[bear]

lol...no problem, Toolz. We've all done that, I'm sure. I've tested so many scripts and programs to find the ones I like that they all blur together sometimes. For instance, I've tried McAffee, Norton (used it for years), AVG, Panda and F-Prot. AVG is my current favorite.
Running naked is pretty scary if you're running Windows; less so if you're on LINUX or Mac. The one you suggested, Nod32, gets some pretty good reviews, if you decide to go with that one eventually.