strangest malware I've ever seen

Q

QB

Famous
Joined
May 16, 2008
Messages
433
I am currently having a ton of difficulty removing some malware that has found its way onto my computer.

Currently, anything that uses DNS lookup seems to be getting redirected to various random suspicious websites. Many websites simply will not load in Firefox. Trying to go to www.malwarebytes.org for example will simply show a completely blank page in firefox. Same for lavasoft.com.

In addition to this, many installers will not run to completion. None of my adware/malware removal tools will update, except for my Avast Antivirus. Avast has found no malicious software so far, but obviously something is up.

This all started when I installed then uninstalled Google Chrome. It began IMMEDIATELY after the uninstall survey was completed. BTW Chrome is a crappy browser and I hope it lost Google a ton of money.

Anyone have any special insight or advice?

Edit update:

Updated my Ad-aware definitions but I'm still not seeing anything. Virus scanner still hasn't located anything either. Both of these have been run on their most thorough settings.

I keep getting an error that "Google Update" has encountered an error and had to shut down. This started at the same time as the other problems.

Edit 2:

Avast Antivirus still hasn't found anything, but it gives the error: Unable to scan boot record.
 
Last edited:
QB said:
I am currently having a ton of difficulty removing some malware that has found its way onto my computer.

Currently, anything that uses DNS lookup seems to be getting redirected to various random suspicious websites. Many websites simply will not load in Firefox. Trying to go to www.malwarebytes.org for example will simply show a completely blank page in firefox. Same for lavasoft.com.

In addition to this, many installers will not run to completion. None of my adware/malware removal tools will update, except for my Avast Antivirus. Avast has found no malicious software so far, but obviously something is up.

This all started when I installed then uninstalled Google Chrome. It began IMMEDIATELY after the uninstall survey was completed. BTW Chrome is a crappy browser and I hope it lost Google a ton of money.

Anyone have any special insight or advice?

Edit update:

Updated my Ad-aware definitions but I'm still not seeing anything. Virus scanner still hasn't located anything either. Both of these have been run on their most thorough settings.

I keep getting an error that "Google Update" has encountered an error and had to shut down. This started at the same time as the other problems.

Edit 2:

Avast Antivirus still hasn't found anything, but it gives the error: Unable to scan boot record.
Click to expand...

About those DNS issues try checking your HOST file by going to
C:\Windows\System32\drivers\etc\host

It should look like this

Code: 
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

127.0.0.1       localhost
 
Also on a seperate computer go and download the Trinity Rescue Kit and download and burn the ISO. (If you don't know how to burn ISO's post here and say so)

It is a Linux Live CD that has a whole bunch of tools to repair/fix/image etc , but most importantly has 5 different Antivirus engines and 2 rootkit detection tools.

Whats great about a live cd is that instead of booting up windows it runs off the CD drive and is able to find things that otherwise are well hidden. So everything is able to be scanned!

The Wikipedia link is a little old and doesn't have the newest information, but should give you a idea of what it is and where to get it.

BTW download the ISO on a separate computer and burn to a disk there and then bring it to the infected computer. If you don't know how to burn ISO's just tell us.


http://en.wikipedia.org/wiki/Trinity_Rescue_Kit


I would love to help you fix your computer, so don't be afraid to ask questions.
 
QB said:
I am currently having a ton of difficulty removing some malware that has found its way onto my computer.

Currently, anything that uses DNS lookup seems to be getting redirected to various random suspicious websites. Many websites simply will not load in Firefox. Trying to go to www.malwarebytes.org for example will simply show a completely blank page in firefox. Same for lavasoft.com.

In addition to this, many installers will not run to completion. None of my adware/malware removal tools will update, except for my Avast Antivirus. Avast has found no malicious software so far, but obviously something is up.

This all started when I installed then uninstalled Google Chrome. It began IMMEDIATELY after the uninstall survey was completed. BTW Chrome is a crappy browser and I hope it lost Google a ton of money.

Anyone have any special insight or advice?

Edit update:

Updated my Ad-aware definitions but I'm still not seeing anything. Virus scanner still hasn't located anything either. Both of these have been run on their most thorough settings.

I keep getting an error that "Google Update" has encountered an error and had to shut down. This started at the same time as the other problems.

Edit 2:

Avast Antivirus still hasn't found anything, but it gives the error: Unable to scan boot record.
Click to expand...

try these two programs, they worked for me multiple times.

spybot search and destroy
superantispyware professional(free trial)

also, do windows defender, that program actually got some spyware once for me that nothing else i had saw.

-Blue
 
Well, I'm still not sure what this started out as, but it turned into a boot virus. The virus was quite adept at resisting any type of boot-time scan. It also blocked access to anything that could have been used to remove it. Because it damaged a score of system files, I did a reformat/reinstall.

On a positive note, it was my fastest reformat/reinstall ever.
 
Great!

Now lets talk about what kind of programs you have (or are going to get) to help prevent anything like this in the future.

I would also use the rescue kit as previously mentioned to scan any removable drives you use so you don't inadvertently reinfect yourself.
 
I personally dont use any anti virus or anti spyware software if I was going to recommend one though it would be nod32. Go out and pick up a copy its 30 bucks. It is hands down the best software at protecting against malicious attacks on a machine.
 
You must log in or register to reply here.

Latest posts

Back
Top