Trojans (NAH! not dem kind) & Browser Redirect

[sistacaf]

help!! how do i get RID of thse dyam fake 'antivirus software' trojans (which are really, themselves, viruses) and browser hijackers that keep 'redirecting' my web searches?

i know these are fake spyware programs and never fall for it, i no download them or anything. My anti-malware, anti-virus, and malicious software detectors find and delete them ---but they keep flickin coming back. I have a firewall, and use pop-up blocker, Malwarebytes, Avira AntiVir, Windows Defender, Ad-Aware, and the MS Malicious software removal tool. but the dyam things won't stay gone. i only going to my same websites i always use, can't figure out <span style="font-style: italic">where</span> these things have come from.

wat de L do i do to <span style="font-weight: bold">KEEP</span> them gone after i delete them?

[halfwaytree]

Re: Trojans (NAH! not dem kind) &amp; Browser Redirect

Get a Mac!

[sistacaf]

Re: Trojans (NAH! not dem kind) &amp; Browser Redirect

yes smarteyezz c'mere mek me lick yuh two good box fidat

i intend to

but that ain't no kinda useful to fix this issue <span style="font-style: italic">now</span>, on <span style="font-style: italic">this</span> machine, now is it?

[halfwaytree]

Re: Trojans (NAH! not dem kind) &amp; Browser Redirect

[sistacaf]

Re: Trojans (NAH! not dem kind) &amp; Browser Redirect

Milo!

Tap ie!

step aside nah man and make room for J-kid to come sit beside me and gimme some REAL tech help

[LinSkinny]

Re: Trojans (NAH! not dem kind) &amp; Browser Redirect

Fi call di res a wi chop liver... Cho!

Ah shoulda' recommend J-kid bill yu triple!

Anyways, which version of the fake antivirus you have? If is the 2010 version, might as well start format the pc now. The 2009 version and previous one is still a PITA, but Malwarebytes should be able to remove <span style="font-style: italic">most</span> versions if you update the definitions. You normally have to do it manually. Now about this fake antivirus. It doesn't matter what you do with the pop up window, if you click anywhere on the window, it will load. Learn how to kill the process or all the browser processes, or simply turn off the pc. (not always good, but.)

The browser hijack, search redirect, depending on which one you have, is also a PITA. You shoulda' pay attention when me did post 'bout the google hijack.

Here is just one site with information. Note that some of the major antivirus programs still have a problem with this one. There are other redirect programs out there. This one is one of the most intriguing I've seen.

As for how to prevent. Some of these hijacks and spyware reload themselves after you remove them. Some reload after you reboot. If one of the antivirus programs find something, I usually scan with something else and then scan again, without cleaning. That way I have three or more different names to search on. Once I find out what is on the pc, I then start cleaning. Then look in the registry and clean up there as recommended. Next monitor the websites you get to when you browsing stuff. Google has a relatively new issue where the top sites (meaning first few) in a search have malware on them. Bing is not yet affected since they don't have the market share that google has. If you looking for something, you can turn off all the active x, downloads, scripting. Some of the websites wont look properly, but depending on what I'm looking for, I don't care.

Since you seh you go to the same websites, there are tools out there that can check the website for security holes. A little searching can pull up a lot. You download free games? Sometimes that have crap in it. You load software? Do you use custom or express install? If you use express install, many of the packages out there now load up the stupid browser toolbar. If you didn't use custom install, you would never know. Going to view option and unchecking the toolbar in the browser does not disable it. It just prevent you from seeing it when you browsing.

Trendmicro.com still works, but you have to dig a little for the free online scan. You do not have to download the trial version. Also while it identifies quite a few, there are many that it can't remove, but at least you'll know the name to start looking how to fix.

If you can provide some names of the ones you have, I could probably help more, but the bad news is that once your system has been compromised, best practice is to start from scratch, then load all the updates. In some cases, this is a whole day affair. Didn't mention how long it takes to do backups and then you have to be careful what you backing up. In odda' words, if it dat bad, yu salt and not matta how you seh you still salt.