PDA

View Full Version : The pop-up/toolbar/context menu/virus/troj saga continues....


January 7th 04, 11:25 PM
>-----Original Message-----
>I am sort of at my wits end. I have spent the last 4
days trying to get a
>handle on this problem. Please read the things I have
tried and let me know
>If I have missed any major steps. Otherwise I am almost
ready to reinstall
>xp for fear that there is an undetected threat on my PC.
>
>Symptoms:
>A "hovering toolbar" (context menu?) most like the one
that appears on top
>of pictures in IE6 that allows you to save or print the
picture below it.
> The folder contains shortcuts to the my recent
documents menu. The box
>appears most often when browsing the web.
> The object does not have options for closing the
menu.
> The two things that make it go away are: opening
one of the shortcuts
>and minimizing the file. Sometimes opening the task
manager, changing the
>focus and hovering over the menu with a mouse eliminates
it, but with less
>reliable results.
> If you choose to ignore it, the hard drive goes into
overdrive, browsing
>is slower and toggling between different programs can
only be accomplished
>by minimizing all documents one at a time rather than
clicking on the
>program you want in the task bar.
>Issue 2
> At odd intervals not normally requiring system
resources, the CPU Usage
>skyrockets. The fan blows continuously and hot air is
emitted. A look into
>the task manager does not show any abnormal processes.
>
> If you compare the CPU usage in the taskbar of the
task box with the one
>on the systray there are serious discrepancies in the
cpu usage between the
>two. Closing extra windows does not stop this.
>
> My home page magically changed to MSN from IWON.com
>
> Along with that, I began to receive .NET login
errors that said that my
>password had been incorrectly entered too many times.
>
>I am running:
> Norton I. Security 2004 -latest edition of the Virus
definitions are
>installed 12/30/03
> Adaware, most recent download 12/29/03
>Toolbar Cop
>Hijack this
>WXP firewall is enabled
>IE6
>XP Home latest SP
>Netscape 7.1
>Office XP students ....
>
>I have run each of these programs, but the behavior
begins regardless of
>what I find.
>
>When I run a scan with any of the appropriate programs,
it comes up clean.
>I am running a full scan, with hueristics set to high.
> I also ran Trend's internet virus scan and no
viruses were found.
>
>I thought I had the Backdoor.irc.aladdinz trojan because
I have some of the
>files it speaks to but there is no traces of it in some
files
>
>
>That is all I can think of now but there may be more.
What do I do?
>
>search and rename hosts and lmhosts files
in internet properties advanced uncheck enable third
party browser extensions click ok and reboot
>.
>

Google