 |  |  |  |  |  |  |  |
internet explorer keeps starting up on its own. Help please!
Thread Solved |
Hello,
I am pretty sure I have accidentally downloaded and run a Trojan. Since then, IE opens by itself and is directed to some strange URL. Then multiple tabs open. Then other windows of IE open...
I read the posts at http://www.daniweb.com/forums/thread214920.html, which discuss the same problem. I've downloaded and run some of the programs recommended in those threads but unfortunately the problem is still there.
Anyone with experience can please give me a hand? That would be so much appreciated! Thank you!
F
I am pretty sure I have accidentally downloaded and run a Trojan. Since then, IE opens by itself and is directed to some strange URL. Then multiple tabs open. Then other windows of IE open...
I read the posts at http://www.daniweb.com/forums/thread214920.html, which discuss the same problem. I've downloaded and run some of the programs recommended in those threads but unfortunately the problem is still there.
Anyone with experience can please give me a hand? That would be so much appreciated! Thank you!
F
•
•
Join Date: Jul 2008
Posts: 3,083
Reputation: 
Solved Threads: 175
Hi, Welcome to Daniweb,
What programs have you used and where are the logs? We really can't advise anything until we get a bit more info, especially the logs of the programs you have run.
What programs have you used and where are the logs? We really can't advise anything until we get a bit more info, especially the logs of the programs you have run.
Hello, I am new to Daniweb - apologies if I am wrong to say this, had something similar posted myself a few days ago and it turned out to be my keyboard.
•
•
Join Date: Dec 2006
Posts: 1,024
Reputation:
Solved Threads: 49
•
•
•
•
Originally Posted by karg 
Hello, I am new to Daniweb - apologies if I am wrong to say this, had something similar posted myself a few days ago and it turned out to be my keyboard.
I was going to post something similar, but figured Judy had it covered.
This is most likely malware with the misdirection to strange url and then the multiple IE opening....
PP
Last edited by PhilliePhan; Sep 3rd, 2009 at 6:10 pm.
In some sort of crude sense, which no vulgarity, no humor, no overstatement can quite extinguish, the physicists have known sin; and this is a knowledge which they cannot lose.
~ J. Robert Oppenheimer
ASAP
~ J. Robert Oppenheimer
ASAP
•
•
Join Date: Jul 2008
Posts: 3,083
Reputation:
Solved Threads: 175
Sorry PP, didn't get back here. fabianslo, you need to post those logs for us Ok? Especially the MBA-M log, if you ran it, and HiJackThis.
Last edited by jholland1964; Sep 3rd, 2009 at 6:42 pm.
goto google dwn laod trojan remover www.simplysup.com/ it will give you 30 days to remove your trojans
•
•
Join Date: Jul 2008
Posts: 3,083
Reputation:
Solved Threads: 175
•
•
•
•
Originally Posted by johnzzz.57
goto google dwn laod trojan remover www.simplysup.com/ it will give you 30 days to remove your trojans
fabianslo, please do not run any other programs. We need to see the logs from the ones you have run all ready and need more information on your system itself before deciding how to go further.
Judy
Last edited by jholland1964; Sep 3rd, 2009 at 10:00 pm.
Dear all,
Thank you so much for all your answers. I really appreciate that you are taking the time to help a complete stranger. You guys are great!
Last night I left a few anti-malware programs running. I think one of them got the Trojan. At the very least two things are true: 1. The anti-malware program claims to have found and deleted a Trojan and 2. The problem has not recurred during the whole day today (Yesterday not 10 minutes would go by without IE starting up on its own).
I understand that I should not run into concluding the problem is solved, right? Do you guys think I should still re-run the tests and post the logs (unfortunately i did not keep the logs from my first run of tests)? My notebook is my main tool for work and I need to be able to trust it is gonna work OK. For example, I am going to an international conference next week and I need to know I will be able to run my presentation safely without IE starting up in the middle of it.
Please let me repeat how much I appreciate your help. Thank you!
Best,
Fabian
Thank you so much for all your answers. I really appreciate that you are taking the time to help a complete stranger. You guys are great!
Last night I left a few anti-malware programs running. I think one of them got the Trojan. At the very least two things are true: 1. The anti-malware program claims to have found and deleted a Trojan and 2. The problem has not recurred during the whole day today (Yesterday not 10 minutes would go by without IE starting up on its own).
I understand that I should not run into concluding the problem is solved, right? Do you guys think I should still re-run the tests and post the logs (unfortunately i did not keep the logs from my first run of tests)? My notebook is my main tool for work and I need to be able to trust it is gonna work OK. For example, I am going to an international conference next week and I need to know I will be able to run my presentation safely without IE starting up in the middle of it.
Please let me repeat how much I appreciate your help. Thank you!
Best,
Fabian
•
•
•
•
Originally Posted by jholland1964
johnzzz.57 realize you want to help but the poster has not posted logs from programs all ready run. We need to see THOSE logs before deciding on how to proceed further.
fabianslo, please do not run any other programs. We need to see the logs from the ones you have run all ready and need more information on your system itself before deciding how to go further.
Judy
•
•
Join Date: Jul 2008
Posts: 3,083
Reputation:
Solved Threads: 175
•
•
•
•
I understand that I should not run into concluding the problem is solved, right? Do you guys think I should still re-run the tests and post the logs (unfortunately i did not keep the logs from my first run of tests)?
You say you ran PROGRAMS...What programs? You, for some reason, are not being forthcoming here on what you have done. I have no idea why but we cannot offer ANY suggestions or conclusions until we know EXACTLY what was done. Just saying programs tells us absolutely nothing. There are good programs and bad programs out there, many of both, but we have no idea of even one that you ran. We will not offer advice until we see the logs or know the exact names of the programs you ran.
So NO I will not say your computer is clean.
Last edited by jholland1964; Sep 4th, 2009 at 10:44 am.
•
•
•
•
Originally Posted by jholland1964
Fabian, we can't give you any answers because we have no idea the names of the programs you actually ran. If you ran the program from the link you gave then evidently it was combofix, which is most definitely a program that SHOULD NOT be run without first being told to run it. PP made that very clear in that thread. That is the only program noted in that thread. If this is the one you did run the log can be found at C:\ComboFix.txt.
You say you ran PROGRAMS...What programs? You, for some reason, are not being forthcoming here on what you have done. I have no idea why but we cannot offer ANY suggestions or conclusions until we know EXACTLY what was done. Just saying programs tells us absolutely nothing. There are good programs and bad programs out there, many of both, but we have no idea of even one that you ran. We will not offer advice until we see the logs or know the exact names of the programs you ran.
So NO I will not say your computer is clean.
Here is the log from Malwarebytes' Anti-malware (this is the program that I think took care of the problem):
Malwarebytes' Anti-Malware 1.40
Database version: 2735
Windows 6.0.6001 Service Pack 1
9/4/2009 11:23:48 AM
mbam-log-2009-09-04 (11-23-48).txt
Scan type: Full Scan (C:\|D:\|F:\|)
Objects scanned: 435891
Time elapsed: 8 hour(s), 23 minute(s), 37 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 3
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\ByteLinker (PUP.BitSpirit) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
F:\Maxtor backup\FABIAN-PC\C\Users\Fabian\AppData\Local\VirtualStore\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe -startup (Trojan.Downloader) -> Quarantined and deleted successfully.
F:\Maxtor backup\FABIAN-PC\History\Level2\C\Users\Fabian\AppData\Local\VirtualStore\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe -startup (Trojan.Downloader) -> Quarantined and deleted successfully.
F:\Stuff Stored\Software\Acbat\Keygen.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
 |
Similar Threads
- internet explorer error messages (Web Browsers)
- Microsoft Internet Explorer Wont Allow to Close (Web Browsers)
- unknown log file in desktop whenever starting internet explorer (Viruses, Spyware and other Nasties)
- Hotoffers changed my Internet Explorer home page (Viruses, Spyware and other Nasties)
- OOO-Microsoft Internet Explorer Pop up (Viruses, Spyware and other Nasties)
- Error message when starting Internet Explorer (Windows 95 / 98 / Me)
- Internet Explorer error when starting (Web Browsers)
- Andrew21: Help with HijackThis log (Viruses, Spyware and other Nasties)
- Internet Explorer Shortcut Problems (Web Browsers)
Other Threads in the Viruses, Spyware and other Nasties Forum
- Previous Thread: AVG slowing the PC's down
- Next Thread: Yahoo! mail is INFECTED
Views: 3547 | Replies: 48
| Thread Tools | Search this Thread |
Latest Viruses, Spyware and other Nasties Posts
Related Forum Features
Tag cloud for Viruses, Spyware and other Nasties
adobe adware anti-malware anti-virussitesaccessissue antivirus attack audio avg backtoschoolspeech bar blackhat botnet botnets censorship china commercial commercials conficker connect control crosssitescripting cyber cybercrime ddos domains e-mafia education email europe exam exploit explorer facebook fake fancheckvirus firefox gaming google gumblar hijack hosting ie8 internet kaspersky legal mail malware mcafee mega-d messagelabs microsoft mobile news norton obama panel parents patch pc phishing police policeprovirusmba-mblockedinternetaccess president privacy pro problem redirect redirecting reliability report research risk rogueantivirus rootkit scareware school search security seopoisoning software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec system threat trojan unwanted update usa virus viruses vista volume warning web windows worm zero-day
