Need help urgently!

mercurial

mercurial

MyBB Legend
Joined
Jun 12, 2007
Messages
40,900
Reaction score
2,693
Location
/\/¯¯¯¯¯\/\
I installed a program but as soon as I did, ESET flagged it and removed it. Problem is that it hasn't removed it. I checked my temp folder and saw that it has stored my ADSL dialup account details and I noticed that "firefox" is open under task manager but as soon as I try to close it, it just reopens again. I urgently need to remove this :(
 
Last edited:
first of all, go to your firewall and reset all defaults. Only allow a different browser, not firefox.
 
can you google for the name of the program and see if there is a removal tool.

or send it to me so I can help you google for it?
 
do you have a bandwidth monitor? Like Netlimiter?

can you tell if any programs are communicating?

Do you have a different computer you can use temporarily so you can cut net access to the infected computer?
 
you also need to e-mail you ISP and request a password change as soon as possible, just in case.
 
Do you know what the name of the infection was? Did Eset tell you what it was trying to remove? Can you go back and look at the logs?
 
Thanks Gary

I could request a password change but this program will just get the new ones that I changed and try to send it out anyway. I checked my Comodo connections but I can't see that it's sending anything out, but I do still see that firefox runs in the background. I'm installing Spybot as well as some other apps now to see if it will help.
 
Couldn't think of those questions at the same time Gary? Guess your post count needs its fix ;)
 
I think I managed to remove it :D There was a file called WinDefence that would copy itself back to my system directory everytime I deleted it but I used HijackThis to delete the file upon restart and it seems to be gone now :)
PS: Thanks for the help Gary :)
 
Last edited:
bradrap said:
Couldn't think of those questions at the same time Gary? Guess your post count needs its fix ;)
Click to expand...

haha... I just posted them as I thought of them.... and he needed help quick. I'm too lazy to hit the edit button... I just post in the quick reply box. Besides if he wanted to reply to any one of the issues he didn't have to sort through all of the issues! :p

But yes... my post count doesn't mind when I do that! :D

mercurial said:
I think I manged to remove it :D There was a file called WinDefence that would copy itself back to my system directory everytime I deleted it but I used HijackThis to delete the file upon restart and it seems to be gone now :)
PS: Thanks for the help Gary :)
Click to expand...

Great! Let's hope it is gone for good. ;)
 
Thanks mercurial, I had the exact same problem on my Windows 7. Because of your posts on Firefox and WinDefence, I was able to remove it.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X