PCWorld Forums

PCWorld Forums: Internet Explorer Opens by itself repeatedly - PCWorld Forums

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Internet Explorer Opens by itself repeatedly

#1 User is offline   srindskopf 

  • Newbie
  • Pip
  • Group: Members
  • Posts: 4
  • Joined: 07-August 06

Posted 27 September 2007 - 09:35 AM

I believe I have a virus or spyware on my PC as Internet Explorer opens by itself and tries to connect to 3 different spyware websites I have never heard of. I have disconnected the PC from the internet to avoid allowing someone access to my PC. It will open IE 20 to 30 times over the course of several hours and completely loads up the memory. I have Norton Antivirus on the computer and have ran repeated scans and nothing shows up. I have downloaded numerous Norton virus removal tools and none of them have found anything. I went to PC World and downloaded and ran Spybot and Adware and while they did detect some things they did not fix the problem. Also I have several icons that magically apear on my desktop all corresponding to the 3 websites mentioned above. Does anyone have any ideas on how I can rid my PC of this?

Thanks, Rinny
0

#2 User is offline   SpiritWind 

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 2,425
  • Joined: 19-August 06

Posted 27 September 2007 - 09:59 AM

Hi Rinny :

To provide SPECIFIC Recommendations, you need to tell us the SPECIFIC Name of your Operating
System, such as Win 2000, Win XP, Win XP SP1, Win XP SP2, or one of the Vista's !?

In todays complex malware world, viruses are rare and other types of malware frequent, so
antiSPYWARE/antiTROJAN programs are the most effective. However, Ad-Aware & Spybot are no
longer the top FREE programs; you would be better off using the FREE version of
"SUPERAntiSpyware" from http://www.superantispyware.com AND/OR if your computer is compatible,
with the "Trial" ver of "AVG AntiSpyware", most easily downloaded from http://www.ewido.net .

However, I suspect you have a "Rogue" and IF your computer meets the minimum System
Requirements of the Good & FREE "RogueRemover" from
http://www.malwareby...ogueremover.php , use it .

Knowing the SPECIFIC Names of those 3 websites MAY be helpful to us help you !?
0

#3 User is offline   techie4fun 

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 3,532
  • Joined: 18-October 06

Posted 27 September 2007 - 11:44 AM

Just out of curiosity, do you have a Personal Firewall installed on your computer, or just Norton AntiVirus?
0

#4 User is offline   srindskopf 

  • Newbie
  • Pip
  • Group: Members
  • Posts: 4
  • Joined: 07-August 06

Posted 27 September 2007 - 12:35 PM

I have WEP encryption on my network router and I believe Norton also has a firewall.
0

#5 User is offline   srindskopf 

  • Newbie
  • Pip
  • Group: Members
  • Posts: 4
  • Joined: 07-August 06

Posted 27 September 2007 - 12:37 PM

I am running XP SP2 on my machine. This is my home PC and I am at work now so I can't provide you the websites but I will do that this evening.

Thanks, Rinny
0

#6 User is offline   SpiritWind 

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 2,425
  • Joined: 19-August 06

Posted 27 September 2007 - 06:53 PM

Hi Rinny :

Since your Operating System is Win XP SP2, I recommend you use ALL 3 Programs I mentioned in
my 1st Post . Let us know how you make out using the 3; IF the "problem" is NOT resolved, I will
make further recommendations .

EDIT : Would also be a good idea to use the Good & FREE "ATF Cleaner", developed by
antiSPYWARE Expert "ATribune" & available at his website @ http://www.atribune....tent/view/19/2/ .
Check the "Select All" button; however, IF you do NOT want ALL your "Cookies" deleted, uncheck
the "Cookies" Menu item .
0

#7 User is offline   ddms70 

  • Full Member
  • PipPipPip
  • Group: Members
  • Posts: 89
  • Joined: 24-September 07
  • Location:Near Trenton, ON

Posted 28 September 2007 - 09:19 AM

Norton is fairly good, but FAR from perfect. I've used it before, didn't like it, now I don't, end of story. Google "HiJackThis". Great for giving details about your system. Run it, save the log, post it on a site. You will likely find a quick answer. You can also go to http://housecall.trendmicro.com/ and run their free scan, but it can take an hour or 2 to finish.

You likely have had something make changes to your registry, you may also find these in msconfig, where just "unchecking" the program will not enable it to start when you start your pc. It shouldn't be hard to fix (most aren't), all you have to do is try.
0

#8 User is offline   srindskopf 

  • Newbie
  • Pip
  • Group: Members
  • Posts: 4
  • Joined: 07-August 06

Posted 28 September 2007 - 11:21 AM

Spiritwind,
I will try all 3 and let you know what happens. I have attached below the info on the website that appears to be hijacking my IE.

These are the web addresses used when IE opens by itself.

http://pcsecuresyste...=raav&gai=swramgav&gli=5993&gff=pp3128859601&2&ed=2&2&cmpname=av19&cmpname=null&410e035501

http://www.safewebna...aid=0&pn=&pid=1

http://softwarerefer...=MjI6Ojg5&lid=2



These desktop shortcuts appeared on my desktop and when I delete them they reappear.

http://virusprotecti...said=0&pn=&sg=0

http://virusprotecti...said=0&pn=&sg=2


http://virusprotecti...said=0&pn=&sg=1


I also have a red circle with a white X that flashes and appears along with the icons on the start bar at the lower right of the screen.

I also get a security alert box that opens on its own and reads as follows: Security Warning!

Trojan.W32.Looksky detected on your machine. This virus is distributed via the Internet through e-mail and Active-X objects. The worm has its own SMTP engine which means it gathers e-mails from your local computer and re-distributes itself. In worst cases this wrok can allow attackers to access your computer stealing passwords and personal data.
This process should be removed from your system.

Type: Virus
System Affected: Windows 2000, NT, ME, XP, Vista
Security Risk (0-5): 5
Recommendations: Click Yes to remove it from your PC immediately.

Yes No

If I click the yes it opens IE to the pcsecuresystem address identified above.

I also periodically get a windows alert indicating someone is trying to attack my PC
0

#9 User is offline   SpiritWind 

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 2,425
  • Joined: 19-August 06

Posted 28 September 2007 - 11:57 PM

Hi Rinny :

I did a Google "Search" on "virusprotectionproonline" and found a Thread on the Castlecops Security
Forums at http://www.castlecop...p990107-Malwarefromhttpvirusprotectionproonlinecom.html .
The 1st Post in that thread gives detailed Instructions on using a program called "SDFix"; however,
this is a specialty "tool" best used under the guidance of an experienced, trained, certified, Volunteer
Malware-fighting Expert . Unless TeMerc shows up here, it would probably be best if you sought Help
on a Support Forum such as Castlecops. which has many of those types of Experts .

Best NOT to click on ANY of those phony baloney "Security Warnings" .
0

#10 User is offline   TeMerc 

  • Member
  • PipPip
  • Group: Members
  • Posts: 37
  • Joined: 06-April 07
  • Location:Phoenix Arizona

Posted 29 September 2007 - 11:22 PM

srindskopf , before you go and run any speciaty tools, lets get a Hijackthis log first.

Please download HijackThis! SetUp from here:
http://downloads.mal...om/HJTsetup.exe

Save the file to your desktop.

Double-click the HijackThis! SetUp icon to begin the installation. Follow the prompts for the default install location of:'C:Program FilesHijackThis'. Tick the 'Create a desktop' button when the option appears. Select next, then allow HijackThis! to start.

Then press the [Scan] button. You will notice the [Scan] button will turn into a [Save Log] button. Click the [Save Log] button and notepad will open up with the contents of the scan. Right-click in the saved log, and select 'copy'. Then proceed to your original thread, unless otherwise instructed and click the '[Reply]' button and paste the saved contents to be reviewed. Do not make any modifications to the log or perform any 'fixes' until told to do so.
0

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users