[Charismatic]

Lol, take two. Last time it didnt save what i said..

For the last week or so I have not really gone on any new sites. Only my regular one. Then all of a sudden today crap start happening. Internet Explorer 7 and Firefox both go to a certain site, as if i clicked on a link  or something. A whole new window comes up and it tries to install a exe installer file.

It seems to keep starting in my temporary internet folder, which i cant keep it out of there. I empty the folder, it come back.

I have dealt with something like this in the past but this time i cant get around it. And its anoying. I have 4 pics for you all. I use the AVG antivirus, free edition.

Help or information would be gratefull.

[attachment stolen by Slimey Goober]

[FUBAR-BDHR]

I've seen this (or something like it) before.  They are hard to get rid of.  I take it you have tried booting up in safe mode and running a scan.  Also if Symantec's site still has the free online scanner you can try running that to at least see what nasty you picked up.  Once you know what it is you can usually find a removal tool. 

More info here:  http://www.symantec.com/security_response/writeup.jsp?docid=2008-082521-2037-99&tabid=3
Never tried it but there is a removal tool here:  http://hijackers-removal.blogspot.com/
Even better manual removal instructions:  http://www.windowsvistaplace.com/antivirus2009-antivirus-2009-removal-instructions/spyware-removal

[Wanderer]

Hijacker...

Make sure your anti-virus is up-to-date (assuming you still can)
Download and run some reputable spyware/adware programs, preferably more than one (spybot, adaware, avg anti-spyware for example) and see if they catch it
Or search with google for 'Antivirus 2009' and 'removal'.. should provide plenty of hints on how to get rid of it.

[Fury]

Ah, the good old AntiVirus XP, since then known as AntiVirus 2008 and now 2009.

Congratulations, you have won a trojan. Follow the link Fubar posted to get rid of it; http://www.windowsvistaplace.com/antivirus2009-antivirus-2009-removal-instructions/spyware-removal

After that, please get yourself some decent malware scanners. AVG free edition if I remember correctly, does not scan for malware other than viruses. I personally use avast which does. If you want to keep AVG, then get yourself free versions of SuperAntiSpyware and MalwareBytes and use them to run manual scans. If you got one trojan, who knows what else you may have.

[FUBAR-BDHR]

AVG 8 does scan for spyware but I still run Spybot and AdAware occasionally just to be sure with a yearly HiJackThis thrown in to make sure nothing sneaky got in. 

Also remember ALWAYS BACKUP!!!!!  No better cure for any virus/spyware/etc then a good backup to restore from.

[Fury]

No better cure for any virus/spyware/etc then a good backup to restore from.

Still doesn't beat not getting infected in the first place.

[neoterran]

I'd like to advise getting a mac 

[Fury]

I'd like to advise getting a mac 

I don't. I have a MacBook and I wish I had bought a regular (and significantly cheaper) laptop instead and installed linux on it.

Macs are seriously overrated.

[IPAndrews]

Macs are seriously overrated.

We agree on something. My girlfriend often asks me for tech support with her Mac. the last time was setting up and securing an apache server. Seriously the user interface is so minimised that if you want to do anything more complicated than playing an mp3 then I suggest giving up before you start and volunteering for root canal dental surgery instead.

Macs are made to make me suffer.

[Androgeos Exeunt]

We agree on something. My girlfriend often asks me for tech support with her Mac. the last time was setting up and securing an apache server. Seriously the user interface is so minimised that if you want to do anything more complicated than playing an mp3 then I suggest giving up before you start and volunteering for root canal dental surgery instead.

Macs are made to make me suffer.

The interface of a Mac is different from that of Windows. There cannot be a proper comparison.

[IPAndrews]

The interface of a Mac is different from that of Windows. There cannot be a proper comparison.

Yes it is different. Yes I have used both extensively. Yes I can compare. I just did. Taking into account the differences. So don't tell me what I can and can't do.

The windows interface is pretty good for simple tasks and pretty good for more technical tasks. The apple interface is slightly better for simple tasks and the demonic spawn of Satan himself for anything else. Therefore given my personal tendency to use the interface for both types of task the Windows interface is superior to the Mac interface. Easily. It's not even a competition.

I'm not a Microsoft fanboy. I so want to like the Mac, but it has driven me to near suicide on numerous occasions. 

[Androgeos Exeunt]

No arguments there, IPAndrews. I always quit ChatZilla accidentally on Mac simply because I tend to forget that COMMAND + Q quits the whole of Firefox.

Sometimes, Firefox crashes with 10+ tabs open to HLP.

When it comes to speed, however, I think Macs have got a lot going for them. As for program compatibility, however...oh dear.

[Charismatic]

The first link that was given me, sent me to : http://www.symantec.com/security_response/writeup.jsp?docid=2008-082521-2037-99&tabid=3

That says to disable system restore. That seems like a ****ty idea..

In Step 2, well, I dont use any of the products it lists, I use AVG. Its up to date tho.

Step 3 says to do a full system scan. I did, and the results (of the changes) were posted in that pic. It did not give me any options. Only options were confirm changes, or ignore..

And as regards to safe mode, im not quite sure how to run a scan in safe mode. Or how to get in safe mode or what it does.

[watsisname]

And as regards to safe mode, im not quite sure how to run a scan in safe mode. Or how to get in safe mode or what it does.

Reboot, and keep hitting F8 like your life depends on it.  An option for booting in safe mode should appear.
Essentially Safe Mode only allows vital programs to run upon startup and thus allows you to delete files (viruses/malware files) that otherwise would not be deletable in normal mode.

Edit:  Gwar, I remember being infected with Antivirus 2008 a while back.  What a ***** it was to get rid of that junk.

[captain-custard]

if you really get stuck run combofix (its free, just google it)  and that usually does the trick

[Fury]

For once I have to agree with IPAndrews wholeheartedly.

OS X interface makes me scream bloody murder most of the time. Not to mention that the Mac keyboard is slightly different from the standard PC one. I don't know how it is with the US/UK keyboard layout, but Fin/Swe layout is a pain in the ass because several keys are replaced by key combinations. It outrages me when I have to google for those key combinations because I always forget them.

As much as I want to like my MacBook, it usually just makes me angry.

As far as user interface goes, I prefer Windows, Gnome and KDE any time over OS X. The only interface I can think of that is much harder to use is Enlightenment. It is supposed to be lean, mean and powerful interface. Yet I couldn't figure out how to use it well. They are like exact opposites, yet the end result is the same.

[Wanderer]

That says to disable system restore. That seems like a ****ty idea..

There is a valid reason for doing it...
http://antivirus.about.com/od/windowsbasics/a/systemrestore.htm

[FUBAR-BDHR]

That says to disable system restore. That seems like a ****ty idea..

The problem is there is no way to delete files in the system restore folder while it is turned on.  The virus/spyware keeps a copy of itself in system restore and reinfects the machine from there.  The only way to get it out is to disable system restore.  After it is gone you can enable it again. 


Posted at the same time. 

[Hellstryker]

I'm going to take a guess here, just an educated guess, but it sounds like it could be the dreaded Vundo I dealt with not two weeks before. If you can manage to get this to your computer, here: http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button That will elimate (if it is) the said vundo.

Edit: Ok so it's not vundo, but it's worth a shot anyway. Lord knows what else you have on your comp.

[Charismatic]

I just want to make sure one of these sites is the real one:
http://www.safer-networking.org/en/index.html
http://www.download.com/Spybot-Search-amp-Destroy/3000-8022_4-10122137.html
http://www.spybot.info/en/mirrors/index.html

Ifso, ill try that, and then startup in safe mode.

But btw, once in safe mode, how do i locate\delite the files i need to , and which ones are they?