Ad: Manage updates with the Download App
ie8 fix

Spyware, viruses, & security forum: Huston do we have a problem? Firefox/Google add on virus?

by: Dango517 August 30, 2010 8:37 AM PDT

Like this

0 people like this thread

Staff pick

Huston do we have a problem? Firefox/Google add on virus?

by Dango517 - 8/30/10 8:37 AM

About a week ago after nearly eight months with a very stable version of Windows 7 home I began to notice anomalies. First major packet lose problems while using Second Life (about 5 days ago) then it hit the fan settings changing popping up all over the place other changes here and there. I thought that's odd that looks like a spyware problem so I switched to the CA software in the Yahoo toolbar from my McAfee security suite that is provided by AT&T, my DSL provider it found a Virus on my home page, a .dll file. It ws not possible to save it to the quarantine area. I removed it and the anomalies have stopped but now I'm have a security certificate problem on my homepage. I have asked that AT&t look into this from there end.

But I have a second problem as well and it might be related. ............I'm having a major problems with the Google search toolbar I'm using it in the Firefox browser 3.6. First it will not search, neither the enter key or the search button in the toolbar work. The uninstall button does not work either within the toolbar (there on the right). I tried to manually uninstall it using tools > add-ons but this produced a script error that either fails or loops when I attempted to work with it. In short the thing doesn't appear to be uninstallable. Nor it be removed from within the registry. I'd guess this is a denial of service virus and a good one.

At the moment the Google Toolbar program is still stuck in the browser.

I have contacted AT&T and ask them to check out my homepage from their end.

I have contacted Firefox and am awaiting a reply I may not receive.

Have any suggestions?


Reply
Report offensive post
Email to friend

Might be version of

by Dango517 - 8/30/10 11:39 AM

In Reply to: Huston do we have a problem? Firefox/Google add on virus? by Dango517

Vundo, Tojan.Vundo, Virtumonde, Virtumondo, MS Juan


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

My advise

by manmur - 8/30/10 1:03 PM

In Reply to: Huston do we have a problem? Firefox/Google add on virus? by Dango517

Do a complete removal of Firefox. Make sure that everything is removed. then reinstall again. Also try to remove Google tool bar though Windows program remover


Run your computer's security programs in 'safe-mode'.

Also on a clean PC; Download Rkill (optional), Supperantispyware, and Malwarebytes. You may have to download the manual updates for Supperantispyware and Malwarebytes.

Before you scan with SAS or MB run Rkill ( if you have it) first. Then run your scans. They might find something that Macafee may have missed. Remember that no security program will find everything, regardless of what people might think.

manmur


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Some Possibilities..

by Carol~ Moderator - 8/30/10 1:17 PM

In Reply to: Huston do we have a problem? Firefox/Google add on virus? by Dango517

Dango..

When you wrote, "so I switched to the CA software in the Yahoo toolbar from my McAfee security suite", were you referring to "CA Yahoo! Anti-Spy"? If so, you stated you removed the infected file, because you were unable to save it in quarantine. I know nothing about the product, but according to Yahoo, the file is still on your system. (See #6)

It would help to know the name of the virus and the .dll you "removed". You may be able to find the name/s, without having to actually restore it. See this.

As far as the Google Toolbar is concerned. Have you tried re-installing it, which would (hopefully) replace any missing files? See if these instructions will help, once you re-install it. Otherwise, have a look here.

Lastly (and perhaps most importantly), I would suggest scanning with Malwarebytes' Anti-Malware. Prior to scanning, temporailly disable McAfee. The free version can be downloaded from here or (directly) from here.

Best of luck..
Carol


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Follow up to Carol's information

by Dango517 - 8/30/10 9:23 PM

In Reply to: Some Possibilities.. by Carol~ Moderator

Yes this is the product but it did not quarantine this item but it was removed so no file name is unavailable. It was a dll. and it was a virus. There was a tracking cookie in the system and it was left in the system to avoid agreement complication as was warned by your link.

Your instructions regarding removal of the Google search/toolbar did not work. It is still there and still not working.

Also see this:

http://forums.cnet.com/5208-6620_102-0.html?threadID=408205&tag=forums06;forum-threads

I will use the Malwarebytes software as you have suggested.


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Malwarebytes found this

by Dango517 - 8/30/10 11:32 PM

In Reply to: Follow up to Carol's information by Dango517

Trojan.Dropper.Gen

aka Abozoez/faega.exe

The Trojan effects logon. Recently the logon texture/image change too a new one. (One of those anomalies I mentioned earlier in this post.) The second user of this PC was not sure if they had done this unintentionally, perhaps they did not.

Two down. Yet I still think there is still one to go in the Google search/toolbar. My guess is this one will need to be tracked down manually. It maybe very serious due to its mode of operation. I believe it up to serious "no good" and maybe new.


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Tried This Tool Yet?

by Grif Thomas Moderator - 8/31/10 12:53 PM

In Reply to: Malwarebytes found this by Dango517

It's a scanner, like some of the others, but it seems to find a few different items, such as the Google redirect, etc.

Hitman Pro 3.5

Hope this helps.

Grif


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Any suggestions on this?

by Dango517 - 8/31/10 8:53 PM

In Reply to: Tried This Tool Yet? by Grif Thomas Moderator

http://forums.cnet.com/5208-6620_102-0.html?threadID=408205&tag=forums06;forum-threads

If I could remove the Google search/toolbar the problem might be solved. This is a tough one to remove I've done all the normal methods of removing it.

I might try this one too:

http://download.cnet.com/ZSoft-Uninstaller/3000-2096_4-10409090.html?tag=mncol


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Tried Hitman Pro Yet?

by Grif Thomas Moderator - 9/1/10 8:33 AM

In Reply to: Any suggestions on this? by Dango517

If so, what were the results?

And what happens when you click on "View" in Firefox, then "Toolbars", then UNCHECK the Google toolbar? Is it listed there?

Hope this helps.

Grif


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

I see nothing on the site

by Dango517 - 9/1/10 11:38 AM

In Reply to: Tried Hitman Pro Yet? by Grif Thomas Moderator

that says it freeware so I'll look for other options before I use it nor did it say they have a free trail.


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

(NT) Yep, I'm cheap. LOL

by Dango517 - 9/1/10 11:38 AM

In Reply to: I see nothing on the site by Dango517


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

(NT) It's FREE! Read It AGAIN. :)

by Carol~ Moderator - 9/1/10 11:58 AM

In Reply to: I see nothing on the site by Dango517


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Yep, Free For 30 Days..

by Grif Thomas Moderator - 9/1/10 2:14 PM

In Reply to: I see nothing on the site by Dango517

And for that 30 days, it performs exactly as the paid version. Detecting a removing malware.. I've used it a number of times on infected computer to remove a variety of malware.. After use, I uninstall it.

As Carol mentioned, please read it again.

Hope this helps.

Grif


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

A new anomaly

by Dango517 - 9/1/10 3:51 AM

In Reply to: Huston do we have a problem? Firefox/Google add on virus? by Dango517

Windows search is no longer showing system files.


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

The Google search problem

by Dango517 - 9/9/10 8:33 PM

In Reply to: Huston do we have a problem? Firefox/Google add on virus? by Dango517

has been resolve with the newest update for the Firefox browser, too 3.6.9. It is working again so there was no virus in it or so it appears.


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

More Discussions

Forum Icon Legend

  • UnreadUnread
  • ReadRead
  • Locked threadLocked thread
  •   
  •   
  •   
  •   
  •   
  •   
  •   
  • ModeratorModerator
  • CNET StaffCNET Staff
  • Samsung StaffSamsung Staff
  • Norton Authorized Support TeamNorton Authorized Support Team
  • AVG StaffAVG Staff
  • avast! Staffavast! Staff
  • Webroot Support TeamWebroot Support Team
  • Acer Customer Experience TeamAcer Customer Experience Team
  • Windows Outreach TeamWindows Outreach Team
  • DISH staffDISH staff
  • Dell StaffDell Staff
  • Intel StaffIntel Staff
  • QuestionQuestion
  • Resolved questionResolved question
  • General discussionGeneral discussion
  • TipTip
  • Alert or warningAlert or warning
  • PraisePraise
  • RantRant

You are e-mailing the following post: Post Subject

Your e-mail address is used only to let the recipient know who sent the e-mail and in case of transmission error. Neither your address nor the recipient's address will be used for any other purpose.

Sorry, there was a problem emailing this post. Please try again.

Submit Email Cancel

Thank you. Sent email to

Close

Thank you. Sent email to

Close

You are reporting the following post: Post Subject

If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.

Offensive: Sexually explicit or offensive language

Spam: Advertisements or commercial links

Disruptive posting: Flaming or offending other users

Illegal activities: Promote cracked software, or other illegal content

Sorry, there was a problem submitting your post. Please try again.

Submit Report Cancel

Your message has been submitted and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.

Close

Your message has been submitted and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.

Close

You are posting a reply to: Post Subject

The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to the CNET Forums policies for details. All submitted content is subject to CBS Interactive Site Terms of Use.

You are currently tracking this discussion. Click here to manage your tracked discussions.

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

Sorry, there was a problem submitting your post. Please try again.

Sorry, there was a problem generating the preview. Please try again.

Duplicate posts are not allowed in the forums. Please edit your post and submit again.

Submit Reply Preview Cancel

Thank you, , your post has been submitted.

> Click here to view your post. > Manage your tracked discussions. > Track this discussion. Close

Thank you, , your post has been submitted and will appear on our site shortly.

Close