11 replies to this topic

[skintdigit]

Guess it's virus time on the ol' Dell PC. I started getting frequent requests from my security provider to verify my subscription(still current, McAfee) and then my automatic updates stopped working. Now, I am unable to navigate to any McAfee website or to Microsoft Live One sites. If I click on a link in a search engine, I am frequently redirected to places I don't wish to visit, like diet plan sites, ad sites, or cheap cigarettes. McAfee support was online with me last week, live from India, where their tech took control of my PC for an hour while I watched and tried to get me access to McAfee's sites....no go.

I downloaded the most recent superDAT detection file from McAfee on a different machine on my home network and used this file to run a scan in DOS mode, I have also run whole system scans from Malwarebytes, AVG, and the Microsoft Malicious Software Removal Tool. I've edited the Windows Hosts file and cleared the IP stack, too.

So my guess is that I'm not going to be able to eradicate this thing. Does anyone have a suggestion for a resource where I can learn to just get it over with by reformatting the hard drive?

[RegUS_PatOff]

It could be someone editited your "host" files ..

I don't remember.. it's some "text" file that is used by Windows to re-direct url's etc ...

here's the link to the free version of WinPatrol


 http://www.winpatrol.com/

Options Tab: View Host File, etc ..

 

I use the Plus version, $29.95 a one-time cost, good for each computer you personally own and use.

online support

extra (online) info of most Start-up programs, DLL's, etc ..

[RegUS_PatOff]

.

[skintdigit]

ThanksX2, RegUS. I'll give it a go before I reformat. I've already edited the Windows hosts file to remove all entries. That didn't help.

How's the weather up there....guess there's no problem keeping the Indian Head cool lately???  S'posed to get down to 13 degrees here tonight in Texas.

SD

[RegUS_PatOff]

[user=6564]skintdigit[/user] wrote:

I've already edited the Windows hosts file to remove all entries

 S'posed to get down to 13 degrees here tonight in Texas.

there may be a virus that re-edits that file, and changes it back ..


:brrr: for Texas

today:

High: 21°

Low: 11°
(Global Warming) :pisser:
 
got about a foot of snow yesterday... not very often ..
 
it was light and fluffy ..
 
usually only a few inches at a time ..

[DrPepper1885]

Did you try running Malwarebytes while in safe mode?

[skintdigit]

Yes, all system scans were performed in safe mode. The Microsoft Windows Malicious Software Removal Tool scan indicated it had found and removed a trojan downloader entitiled "JS/Renos", but I still have the same problems.

[DrPepper1885]

Bummer. If I were you, I'd reformat (as you originally indicated). This isn't at all hard to do, but the difficulty depend somewhat on where your OEM OS software is located.

Do you still have the OEM CDs? If so, you should just be able to pop it in, reboot, press a key to boot from CD, and your system will be reimaged (after a few prompts). You may have to go into BIOS to change your drive boot order (CD first, HD second).

If it didn't come with CD's, check to see if you have a d: drive, and if so, if the original install software is there. If so, there should be some sort of setup executable that will either burn install CD's or do the re-imaging. Depending on how old your PC is, you'll then need to do a Windows Update to get the latest service packs and the litany of patches that follow.

[misterfix]

You could give this site a try http://freewareandshareware.yuku.com/

I've been a member there for many years, from the Bellsouth message boards, to MSN groups and now Yuku.  They will work tirelessly to help you, and it's free.  They have brought many computers back from the "dead".

 

misterfixer

[skintdigit]

Thank you, Doc Pepper and Mr. Fixer....I'll add those options to the list. Back to work today with no solution, yet. Trying to avoid the reformat, but I may be kicking a dead horse.

SD

[ether.real]

First tip is to dump McAfee. I highly suggest Microsoft's free AV, called Microsoft Security Essentials.

Use HiJackThis! to determine if there are any "Browser Helper Objects" or "BHOs" causing your problem:
http://free.antivirus.com/hijackthis/

You can also manually check your hosts file, here:
c:winntsystem32driversetchosts
You will probably need to enable showing hidden and system files, and you will have to edit it with notepad.

[volleyball]

So skint, you fixed? If you don't have your dell xp cd's , you can use anyones elses that has one. You won't be using their license number so they don't have to worry.