Virus help

bedpotato_2

I would welcome some expert advice. Avira found a Trojan on my laptop. It's TR/Dldr.Mitss.A.1.B

I have tried googling it and can't find much. Can anyone tell me what this virus does?

I deleted it from quarantine but then Avira popped up alerting me that it had detected the same one again. :eek:

I have since run Malwarebytes, Spybot, and Ccleaner, and nothing was detected, but strange things are still happening on my laptop.

A suspect ebay icon added itself to my desktop and start menu under programs. I checked it out and it said it was some sort of ad or something. I don't know where it came from so I deleted it.

Certain webpages are randomly refusing to load.

Weird things are opening up by themselves in browser windows.

I strongly suspect some virus activity is still going on. I am FED UP of viruses and am now considering restoring to factory settings on my laptop (Acer Aspire 5735) and then changing to Ubuntu instead of Windows.

Would doing this eliminate any viruses?

Thank you.

SteveJH200

Have you seen this http://www.avira.com/en/support-threats-summary/tid/7204/threat/TR.Dldr.Mitss.A.1.B

It may be worth you posting a HijackThis log on here too http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html

bedpotato_2

A false alarm?

:j

Thank you! That has stopped me worrying quite so much! Nonetheless I am still considering switching to Linux.

bedpotato_2

SteveJH200 wrote: »

It may be worth you posting a HijackThis log on here too http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html

Thanks. I tried but it's not letting me. It says "for some reason your system denied write access to the hosts file." Any ideas what that means?

craiglaw

Sounds like there is some malware on your system, this is the usual case for something editing your hosts file, surprised the checkers already run haven't detected anything yet tho...

Your hosts file can be found here: c:\windows\system32\drivers\etc\hosts (open it with notepad)

Excluding all of the lines starting with # the only contents should be:

127.0.0.1 localhost
::1 localhost

waddler_8

The reason you're seeing that message is because Hijackthis needs to be run as administrator (right click menu) for it to access the hosts file.