Post-spyware problems with Internet Explorer

[Mat]

Hi newsgroup,

I had quite a lot of trouble with my new laptop a while ago when several
spywares were found on it; in total, Spybot S&D and three other programs I
needed to install found several instances of virtumonde, zlob.downloader,
trojan.delf and trojansc - however, now my system has been fine for a while
and everything works again. I got a decent antivirus software and everything
else installed as well.

However, I recognize some strange behaviour of Internet Explorer: Sometimes
I cannot search for anything in google or click on any links; the browser
freezes with the message "waiting for + domain". This goes on until I reboot.
However, I can access all favorites, so it is definitely not due to the
internet connection. It also is not related to the firewall, I switched it on
and off and the problem remains.

Maybe there are some other spyware rests on my system? I'm quite confused
now after trying a lot of spyware programs, but I wonder if anyone knows
about this behaviour of Internet Explorer?

Any help is greatly appreciated! Thanks a lot and regards,

Mat

[PA Bear [MS MVP]]

Post by Mat
Maybe there are some other spyware rests on my system?

Ya think?

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://aumha.net/viewforum.php?f=30,
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Post by Mat
Hi newsgroup,
I had quite a lot of trouble with my new laptop a while ago when several
spywares were found on it; in total, Spybot S&D and three other programs I
needed to install found several instances of virtumonde, zlob.downloader,
trojan.delf and trojansc - however, now my system has been fine for a while
and everything works again. I got a decent antivirus software and everything
else installed as well.
However, I recognize some strange behaviour of Internet Explorer: Sometimes
I cannot search for anything in google or click on any links; the browser
freezes with the message "waiting for + domain". This goes on until I
reboot. However, I can access all favorites, so it is definitely not due
to
the internet connection. It also is not related to the firewall, I
switched
it on and off and the problem remains.
Maybe there are some other spyware rests on my system? I'm quite confused
now after trying a lot of spyware programs, but I wonder if anyone knows
about this behaviour of Internet Explorer?
Any help is greatly appreciated! Thanks a lot and regards,
Mat

[nass]

Post by Mat
Hi newsgroup,
I had quite a lot of trouble with my new laptop a while ago when several
spywares were found on it; in total, Spybot S&D and three other programs I
needed to install found several instances of virtumonde, zlob.downloader,
trojan.delf and trojansc - however, now my system has been fine for a while
and everything works again. I got a decent antivirus software and everything
else installed as well.
However, I recognize some strange behaviour of Internet Explorer: Sometimes
I cannot search for anything in google or click on any links; the browser
freezes with the message "waiting for + domain". This goes on until I reboot.
However, I can access all favorites, so it is definitely not due to the
internet connection. It also is not related to the firewall, I switched it on
and off and the problem remains.
Maybe there are some other spyware rests on my system? I'm quite confused
now after trying a lot of spyware programs, but I wonder if anyone knows
about this behaviour of Internet Explorer?
Any help is greatly appreciated! Thanks a lot and regards,
Mat

Protect Your PC in 3 Easy Steps
http://www.microsoft.com/uk/security/protect/alert.mspx
Microsoft Security At Home - Help Prevent Identity Theft, Spyware .
http://www.microsoft.com/protect/default.mspx

Go through these Cleaning steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Run disk clean up on your Drive.
You can download this tool o run clean up:
http://www.ccleaner.com

Download Hijackthis.
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html
http://www.bleepingcomputer.com/forums/
http://forums.whatthetech.com/forums.html
http://www.security-forums.com/viewforum.php?f=48
http://www.virusvault.co.uk/fusionbb/showforum.php?fid/15/
http://www.lavasoftsupport.com/index.php?showforum=36
http://forums.techguy.org/54-malware-removal-hijackthis-logs/
Or other appropriate
forums for expert analysis, not here.
HTH
nass