Keep getting !!!!!! site up ....

MimiJane

MimiJane

Anyway, I'm becoming concerned that there are 'too many cooks'. So I bow out to the experts.

I agree here ... I really have no idea what to do next as everyone has such different/conflicting ideas!  

Being a novice, I'm obviously very reluctant to do anything that might makes things worse.  

Please don't think I'm not grateful for all the input, but for all the time it's taking me to try out all these programs, would it not be more practical to get an "expert" in to actually sit at my machine, work out what's wrong and put it right for me?

:-*

electracy

Heres the problem I believe:

http://securityresponse.symantec.com/avcenter/venc/data/trojan.norio.html

It specifically mentions trafficswitcher and redirection to !!!!!! sites.

First of all follow the advice on removal (but NOT the bit about editing the registry),

If you still have the problem, backup any important work and follow the advice on http://www.pestpatrol.com/pestinfo/t/trojan_norio.asp

If all else fails, double check you have backed up everything you need to keep, then follow the instructions for editing the registry on the symantec page (give us a shout if you need any help), and after that I think the only other option will be to format and reinstall of windows.

HTH, Good luck!
K

MimiJane

Good to see this mentioned at last! So do I have to remove AVG anti-virus and install Symantec anti-virus to find this particular Trojan virus?  

The only problem is that, if I do, it leaves me with another problem ... I've tried in the past to delete AVG and couldn't remove all the components. I'm sure I've read that to have two anti-virus programs running is not a good thing??

Advice appreciated.

electracy

Hi,

I would try making sure AVG is up to date, and running a scan from there rather than uninstalling and putting Norton on. I think they just say that on there because it is their support site, and if you are looking there they presume you have norton installed.

If you wanted to try a Norton scan go to https://www.symantec.com/securitycheck and click on the virus scan option there. There are other online ones you can try as well. I think this might confirm what virus you have but not help you to remove it, but I'm not sure. (This might be worth doing at some stage though, because if you've got this, you could have other stuff you don't know about.)

If you have already updated AVG and done a full scan, skip that bit and go onto the second site I mentioned.

K

Donnie

The software that I have suggested you use is, in my mind, essential anyway. I have a spare computer using Windows 98 and ReleaseRam has definitely pulled the machine back from thew brink a couple of times.(I haven't waited for it to kick in automatically. I clicked 'Free RAM' when it showed I was running low and when programs were slow on opening)
SpyBot is useful for all kinds of day to day maintenance.

Donnie

As I said before, see me for the Uninstaller program and Uninstall AVG that way. If you still wish to uninstall it.

Coldfinger

If you save the Hijackthis scan log then paste it into this site

http://www.hijackthis.de/index.php?langselect=english

it will analyse your log and tell you important points about it. From that and the log we could help you eradicate the problem.

MisterT2

I'm with coldfinger on this one. Start with Hijack and find out whats happening.

I had one of these switchers on my machine a year or so ago. It effectively rewrote the explorer shell entry for the windows start routine. This is not something that a newbie could be expected to be talked through.

Was the slow down coincidental with the move to broadband or the onset of this traffic switcher? My guess is that it is. While it is true that Win 95/98 aren't that great at managing/recovering memory, I don't think that any memory release tool is going to give you the speed improvement that you are looking for.

With regard to reinstalling, you would need to make sure that you have drivers for all the hardware before you started. If you installed Windows before then you should have them all - otherwise it would be best to check first.

Just my 2 pence worth....

MimiJane

I'm with coldfinger on this one. Start with Hijack and find out whats happening.

I had one of these switchers on my machine a year or so ago. It effectively rewrote the explorer shell entry for the windows start routine. This is not something that a newbie could be expected to be talked through.

Was the slow down coincidental with the move to broadband or the onset of this traffic switcher? My guess is that it is. While it is true that Win 95/98 aren't that great at managing/recovering memory, I don't think that any memory release tool is going to give you the speed improvement that you are looking for.

With regard to reinstalling, you would need to make sure that you have drivers for all the hardware before you started. If you installed Windows before then you should have them all - otherwise it would be best to check first.

Just my 2 pence worth....

My biggest problem is perhaps not being able to switch the machine off (even using Control, Alt and Delete) ... the egg timer's up for ever! Other things are appearing as well, like many small Internet Explorer boxes popping up one on top of the other on the screen when all I'm trying to do is insert a password to connect up to Broadband. I presume these things are due to the virus.

I personally would not re-install ... I'd call in an expert as I wouldn't have a clue what I was doing.

As regards the slowdown, everything's happened in the last 2 weeks ... the switch to Broadband, getting this !!!!!! site up, slowing down, etc., etc.  I did not have a firewall or any spy programs for a short while though while I uninstalled everything I've installed recently in case something was "upsetting" my computer.  Personally, I think I "allowed" something access into my machine (when prompted) that I shouldn't have done when I re-installed my firewall.

Further up this page I've voiced my concern about you all seeing what Hijack throws up (for security reasons).  Can I please have your comments ... I know you all only want to help, but I have to be careful.

Thanks.

:-*

MimiJane

Heres the problem I believe:

http://securityresponse.symantec.com/avcenter/venc/data/trojan.norio.html

It specifically mentions trafficswitcher and redirection to !!!!!! sites.

First of all follow the advice on removal (but NOT the bit about editing the registry),

If you still have the problem, backup any important work and follow the advice on  http://www.pestpatrol.com/pestinfo/t/trojan_norio.asp

If all else fails, double check you have backed up everything you need to keep, then follow the instructions for editing the registry on the symantec page (give us a shout if you need any help), and after that I think the only other option will be to format and reinstall of windows.

HTH, Good luck!
K

This page states that removal is "difficult" and requires an "experienced technician"!!