System Restore - Trojan

[RedHerring2]

Just a bit of advice:
This morning on DIYnot I was getting these kind of screens:
View media item 38737
Then System Restore - Trojan did it's worst.
The screens went black and all shortcuts were lost, etc.
The scam offered to sell me the fixes.
It was only by clicking on 'Buy it now' that I was able to get access to IE to suss out the problem and the cure.

It took well over a couple of hours to kill it, although my PC is still not right. I occasionally am getting unwanted sound adverts being played.

What worries me is that I am still getting these warnings:
View media item 38737
Further information here:
http://answers.microsoft.com/en-us/...-restore/08f96808-e0da-4d1f-bcc1-bdad0f9380e9

and here:
http://www.bleepingcomputer.com/virus-removal/remove-hard-drive-diagnostic

 

[hotrod]

You use Vista? Are you mad?

I hope you've got it sorted RH. Maybe download Comodo for the future?:-

http://www.comodo.com/home/internet-security/free-internet-security.php

Thanks for letting people know.

 

[RedHerring2]

You use Vista? Are you mad?

It's XP on this PC, Win 7 on the other.

 

[hotrod]

It's XP on this PC, Win 7 on the other.

Ahhhh apologises. I knew the screenprints didn't look like Win7 and your link referenced Vista so I just assumed........

http://answers.microsoft.com/en-us/windows/forum/windows_vista-security/trojan-in-system-restore/08f96808-e0da-4d1f-bcc1-bdad0f9380e9

That'll teach me

 

[Spark123]

Have had the same, possibly something to do with the advert for dating website (Zoosk).
I have found McAfee to be a bit twitchy about a lot of things, wether or not they are actually viruses is yet to be seen. Am about to get shot of McAfee anyway as I don't believe in their automatic renewal policy.

 

[DIYnot]

We have been looking into this, I'll post once I know more.

 

[Bahco]

I had a completely blank screen 20 mins ago when should have been Diynot page open.

I closed the tab and reopened and seems ok now.

 

[RedHerring2]

I'm still trying to restore things back to normal.
More often than not when I open a page in DIYnot it's as though a line freezes so that when I scroll down I just get lines down the screen. Usually the only recovery is to re-open that page.

Something like this:
Well I was going to add an image but it seems like all my albums have gone?

And now they're back. But the image isn't there?

So images re-loaded:
View media item 38756and albums disappeared:
View media item 38757


Every other site is fine.

 

[HH1]

Have you tried a scan with "Spybot - Search & Destroy" ?
It's usually quite good at getting rid of trojans and the like.

http://www.safer-networking.org/en/download/index.html

 

[RedHerring2]

I've done a full scan with McAfee and with Malwarebytes.
All is clean according to those programs.
I've used Spybot before and I didn't like its after effects.

Only just returned to PC after full scan of Malwarebytes to check on prgress and to close down.
All seems OK at quick glance.

 

[DIYnot]

After looking into this, it was tracked down to a couple of adverts that had a dodgy iframe added to their code. All ads were stopped yesterday late afternoon / early evening. We have terminated the use of the network concerned for the time being.

If anyone is concerned and wants to check their PC for trouble, then Microsoft offer a free virus /spyware checker:

http://www.microsoft.com/en-gb/security_essentials/default.aspx

If you already have antivirus software, note that 'running more than one antivirus program at the same time can potentially cause conflicts that affect PC performance'.