Live Chat & Podcast at 1:00PM Eastern on Sunday!
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
General Security
Tag Cloud
access acer asus bios bsod computer crash desktop driver drivers error ethernet excel freeze gaming hard drive hardware hdmi internet laptop malware memory modem monitor motherboard network printer problem ram registry router security slow software sound toshiba trojan ubuntu 11.10 uninstall usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
I have Been Hijacked ...

Reply  
Thread Tools
Ryaneasy's Avatar
Junior Member with 3 posts.
 
Join Date: May 2008
Experience: Intermediate
01-May-2008, 08:29 PM #1
I have Been Hijacked ...
OK a friend of mine told me about this website, said you have helped him in the past ... so i come to you BEGGING for help!

Ok so to start ... i just reformatted my pc ( old roomate was a bit of porn newbie )
surfed random porn sites you find anywhere ... bad ROOMY ... so i reformatted

( i will say this now i am not a newb, but also not a pro )

Ok I finished installing my drivers and such and continued installed applications i use ( i am a gamer ) ... i then was going to watch a video that i saw when i searched google, it told me i was missing "ActiveX Controller" which i believed, and prompted to start installing ... yay ... will it went through a new stup process i wasnt use too ... but i let it go through ...

Immediately after i got an error

EXACT ERROR: *****************************

Servere Error!
Your system is infected with dangerous virus! ( nice grammar )
Note: Strongly recommend to install antispyware program to clean your system and avord total crash of your comptuer!

Click ok to download the antispyware. (Recommended)

[ OK ] [ Cancel ]

End error ***************************************

clicking ok or cancel doesn't do anything ... just removed the box

so I go to google and search for "Myspace" ( example ) i get results, first is site i am looking for, below that is error pretty much saying same thing as above ( and this is actually populating on GOOGLES search page ... ( below that is a YouTube porn link )

No matter WHAT link i click on ( myspace, world of warcrack, teletubbies ) it pulls up to the website http://online-malwarescanner.com/id/4912933/1/1/

So i searched this website and there are several links saying down load this to remove ... YA RIGHT ... I found some random forums that said trying SPYBOT ... which i have downloaded and ran multiple times and do not find anything wrong ...

I found 1 website that gave some registry keys to look for, and some processes to search for ... and even some files to search for ... i have looked for them all ... HELP?

PLEASE ... thanks
Ryaneasy's Avatar
Junior Member with 3 posts.
 
Join Date: May 2008
Experience: Intermediate
01-May-2008, 08:42 PM #2
I believe i posted this in wrong forums, if so i appoligize
Ryaneasy's Avatar
Junior Member with 3 posts.
 
Join Date: May 2008
Experience: Intermediate
01-May-2008, 08:56 PM #3
Ok i decided to do some looking for myself, and found a program installed called "Seach Assistant" i disabled it and seems to be working ... thanks anyways!
Byteman's Avatar
Moderator & Malware Removal Specialist with 17,387 posts.
 
Join Date: Jan 2002
Location: NY
Experience: Junkware Jouster
02-May-2008, 12:07 AM #4
Hi, You've been infected with a trojan, most likely from the Smitfraud type family, there are many that produce the popup security prompts to download a program...these are fake, rogue apps and charge you $30 or so after they "find" tons of crap on your computer...don't fall victim to these!

I suggest you first do this, as these trojans can be bundled with other, unseen malware:

Let's have you post a log from Hijackthis and maybe we can spot anything out of place:
go to Click here to download HJTsetup.exe
  • On that page, click the icon
  • at lower right , and follow the prompts to get the installer version
  • Save HJTsetup.exe to your desktop.
  • Double click on the HJTsetup.exe icon on your desktop.
  • By default it will install to C:\Program Files\Hijack This.
  • Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
  • Put a check by Create a desktop icon then click Next again.
  • Continue to follow the rest of the prompts from there.
  • At the final dialogue box click Finish and it will launch Hijack This.
  • Click on the Do a system scan and save a log file button. It will scan and then save the log and then the log will open in Notepad.
  • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
  • Paste the log in your next reply.
  • Don't use the Analyse This button, its findings are dangerous if misinterpreted.
  • DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

_ _ _ _
Please also do this:
  • Open Hijack This and click on the "Open the Misc Tools section" button.
  • Click on the "Open Uninstall Manager" button.
  • Click the "Save List" button. After you click the "Save List" button, you will be asked where to save the file. Pick a place to save it then the list should open in notepad.
  • Copy and paste that list here in your reply
__________________
Mung (computer term), the act of making several incremental changes to an item that combine to destroy it
Donate directly to help the site TSG Library
TSG's Welcome Guide- Tips, Rules, How to use TSG and more!
Reply

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools



Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 11:12 PM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

Powered by Cermak Technologies, Inc.