GNH13/js redirector AT??

Viruses and worms
1

win vistax32
here is root repeal log
Scan Start Time: 2010/01/09 13:43
Program Version: Version 1.3.5.0
Windows Version: Windows Vista SP1
#: 054 Function Name: NtConnectPort
Status: Hooked by “” at address 0x85db72d0
#: 334 Function Name: NtTerminateProcess
Status: Hooked by “C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys” at address 0x8bafa0b0

avast chest log
GNH13[1].HTM User/Ourputer/Appdata/Local/Microsoft/Windows/TemporaryInternetfiles/ContentIE5/3dojq5ur JS:redirector-At[Trj]
Now I know this is quarantined in the chest,but I am still getting rediredted randomly and I get virus warnings when i am (sometimes) redirected.What does the AT flag mean?I have also run hijackthis,a-squared anit-malware,spyware terminator,superanitspyware,and am still getting rediredted.Now I have also heard that these JS trojans are sometimes missed because it lookslike a javascript file.So i’m stumpd at this point.What is the "0x85db72d0"address mean?If this trojan is in the chest wouldnt that mean that its a different trojan causing the browser hijack?

2
?If this trojan is in the chest wouldnt that mean that its a different trojan causing the browser hijack?
maybe.....have you tried MBAM? http://filehippo.com/download_malwarebytes_anti_malware/
3

Check your IE settings, go to tools > internet options > connections > lan settings. See if the box for ’ use a proxy server’ is ticked.If it is and you didn’t set it yourself untick it

4

Yes I have installed and use mbam for about a year now.I checked the tools >optionas>etc and YES use proxy server was checked.So I unchecked it.

5

So,has it made any difference ?

6

No difference whatsoever :cry:

7

try this http://spywareterminator.com hope they can help you,…

8

Umm here is THE list of everything I’ve installed/used/ran.Im still getting random web pages when I click off of google searches.I have to click 6-7 times to load the proper link.Also have random webpages open in a new window.THIS usually ends up triggering avast with a virus alert.I move/rename the file evry time.I also have random windows dcom server process launcher terminate and a windows /pc reboot.This makes me think its a rootkit.As I’ve heard windoes treats/looks at rootkits as a “driver”.Thus the reboot.
a2antimalware.OTL.rootrepeal1.3.5.trojanremover.superantispyware.spy-hunter.Spywareterminator.Windows kb890830v3.2 malicious SRT. avast.The windows is the onlyone I couldn’t get to run.Not sure why.

9

ops there’s so many AV you installed uninstall the other because it will caused a conflict to your pc that’s why ur pc has been freezing right now…

maybe it is a false alarm… so don’t be worry…,

10

no Im not running them all.I install …run a program ,have it check my registry temp files .etc etc.And I turn avast off whilst doing so.So no conflicts far as I know.After Ive run /tried a program I uninstall.This is everything I’ve tried,not everything Im running concurrently all at once.(hey the more the merrier ,right??LOL).And my puter not freezing,I never said that.Its randomly redirected while surfing,thus triggering virus warnings,with a probability of chance reboots…but no freezing.

11

Deletion incorrect topic.

12

@DavidR.
Huuuh???
Idon’tthink you posted where you meant to david.

13

Every likelihood of that I have a few topics on the go ;D