Help this virus/trojan is annoying me

balloo_2

how do i get rid of this i am running superantispyware and malwarebytes and Avira Antivirus free it detects it shows me on the screen asks me what i want to do with it but back it comes i have scanned loads of times normal and gone into safe mode and back it comes this is it anyway
HTML/Infected.WebPage.Gen - Malware It pops up every time i open a new IE window.

david39

A similar problem - though OP is not specific as to which Trojan he is talking about.

Clicking on the MSN web page, Avira comes up with a message that it has found a Trojan ADSAdClient31. No matter what I try to do with it, it crops up again next time I go back to the page. All attempts to locate the file on the computer fail, even with Malwarebytes and spybot.

A Google search shows it was a problem a few years ago and is related to MSN's advert server. A number of ways of getting rid of the problem are listed in old bulletin board messages but they all relate to Firefox (which had the problem first) and are not applicable to this current problem with IE.

Apparently, several other websites "piggyback" the advertising server from MSN so that the problem can occurr with a number of sites, though none that I use it seems.

Anyone else getting this?

Laz123

All I can suggest is to clean out everything with CCleaner http://www.filehippo.com/download_ccleaner/ (you'll have to re-enter u/n's and p/w's to all sites). Also it may be something which loads on startup so you can see what startup items load with Startup Inspector and disable it http://www.windowsstartup.com/

aliEnRIK

Reset internet explorer

1. Open Internet Explorer .
2. Click Tools, and then click Internet Options.
3. Click the Advanced tab.
4. Under Reset Internet Explorer Settings, click Reset.

Have you run a FULL scan with malwarebytes? If not then do so first

Then/or ~

Please run COMBOFIX

Follow the simple instructions it gives
Post the COMPLETE log it creates here (Split into sections if need be)

If it comes up with a RENAMING error then RIGHT click the exe file and RENAME and call it QWERTY (Making the complete file name 'QWERTY.exe') Or SAVE as 'QWERTY' on download

david39

Thanks Alienrik and laz123.
I have already tried nearly everything you have suggested other than posting the MWB log.
I believe now that the trojan is not actually on my computer but that Avira is warning me that the MSN home page has links to pages that contain Trojans and tries to stop me linking from it. This is further born out by the fact that the warning does not come up immediately, but after a few seconds - as if it is scanning the links in the page.

The problem has only arisen in the past few days, since I changed my anti-v to Avira. Have now re-installed AVG 8.5 and the problem is no longer showing

I realise that this may mean that Avira is warning me about something that is not being picked up by AVG but I would hope that the MSN-page links to dangerous pages would be filtered out by AVG if I clicked them.

Thanks for your input - at least you have confirmed that the attack I made on the problem was in the right direction. A bulletin board entry with more details of the problem some years back is here : http://sillydog.org/forum/sdt_8343.php

andy2004

reason avg8.5 doesnt pick up on that trojan is simply because AVG is practically next to useless. I would suggest trying Antivir, or the portable Cureit, download, extract and run a scan.
nothing to install.

david39

andy2004
I'm not entering a pointless slanging match over which a-v program is better than another but I've used AVG for nearly six years now and I've never knowingly had a virus on my computer that AVG hasn't intercepted.

I know some programs will pick up viruses that others miss, but AVG has kept my computer clean, so I'll stick with it - especially after the Avira incident above

fuzzball172

have a look for a program called smitfraudfix, its good for solving some of the more devious DNS hijacks, if this fails, google for HijackThis and install it, follow the instructions about posting results to their forum, someone will help you decipher the logs from hijack this

Lee

andy2004

david39, i wasnt saying All versions of avg where bad, it just seems to me, reading various forums, and yahoo chat, that other people have said that AVG 8.5