Member Avatar for cguan_77

hi guys, recently one of our workstation was hit by a virus. I had used malware bytes, avira and microsoft security essentials to remove the trojan virus.

But now the pc is working fine except that when the user visit those sites such as bank websites or other sites which uses java login. It will hang halfway.

And when I check the Task Manager it will show Internet Explorer not responding.

Any ideas how to get rid of these, the only thing i haven't try is to reboot in safe mode and do scanning.

But i'm afraid to reboot in safe mode because i encountered a situation before in which i started in safe mode virus scanner found nothing but after rebooting unable to go back to normal mode.

Any ideas guys aside from formatting, i'm hesitant to format because the workstation got a lot of software installed.

Any input is greatly appreciated, thanks.

  • 2 Contributors
  • 3 Replies
  • 130 Views
  • 15 Hours Discussion Span
  • Latest Post Latest Post by jholland1964

Dani AI

Generated

Browsers that hang only on certain pages after an infection are usually a plugin/BHO problem, a leftover network hook (Winsock/LSP), or a damaged browser profile/certificate store. A short, safe diagnostic path will quickly show whether this is the browser/plugin or a deeper system issue.

  • Try the page in a different browser (Chrome/Firefox) and run Internet Explorer with add-ons disabled:

    iexplore.exe -extoff

    If the page works in another browser or in IE with add-ons off, focus on IE add-ons and Java/plug‑ins.

  • Disable the Java plugin in IE (Manage Add-ons) and test. If disabling fixes it, uninstall all Java versions and reinstall the current one for the correct IE (32-bit vs 64-bit) and retest.

  • Reset IE to defaults (Internet Options → Advanced → Reset) and remove suspicious BHOs/toolbars with Autoruns (Sysinternals). Use Process Explorer to see which DLLs are loaded into the hung iexplore.exe process and Event Viewer (Application/System) for error details.

  • Repair the network stack and system files (run Command Prompt as Administrator):

    netsh winsock reset
netsh int ip reset
ipconfig /flushdns
sfc /scannow

    Check the hosts file at C:\Windows\System32\drivers\etc\hosts for unexpected redirects.

To help others diagnose, export and post the Malwarebytes scan log (Malwarebytes → Logs/History → Export) and produce a Farbar/OTL-style system scan (run FRST as admin, post FRST.txt and Addition.txt). As requested, the exact detection names and those logs will point to leftover components to remove. If is worried about Safe Mode, boot with F8, run scans, then reboot normally; if the system is stuck in Safe Boot afterward, undo it via msconfig or run as admin:

bcdedit /deletevalue {current} safeboot

Always run tools as Administrator, make a restore point or back up important data before changes, and avoid running multiple real‑time antivirus engines simultaneously.

Recommended Answers

All 3 Replies

Member Avatar for jholland1964

For one thing, if you are running both Avira and Microsoft Security Essentials this means you have TWO anti-virus programs on your computer and that is a big "no-no". Absolute rule is ONE anti-virus program on the computer.
Otherwise we can't really tell you much until you complete the steps given in the Read Me First sticky and post the copy/pastes of all the logs. We can better tell you then what to do to try to correct the problems.

http://www.daniweb.com/hardware-and-software/microsoft-windows/viruses-spyware-and-other-nasties/threads/134865

Member Avatar for cguan_77

For one thing, if you are running both Avira and Microsoft Security Essentials this means you have TWO anti-virus programs on your computer and that is a big "no-no". Absolute rule is ONE anti-virus program on the computer.
Otherwise we can't really tell you much until you complete the steps given in the Read Me First sticky and post the copy/pastes of all the logs. We can better tell you then what to do to try to correct the problems.

http://www.daniweb.com/hardware-and-software/microsoft-windows/viruses-spyware-and-other-nasties/threads/134865

Hi jholland1964, I removed avira, before i install Microsoft Security Essentials. anyway i will try those on the link that you posted.
Thanks.

Member Avatar for jholland1964

What was the name of the infection removed? Do you have the MBA-M logs from that removal? Look in the program under the logs tab. Copy/paste that log here. It might help if we knew what that infection was.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.