If anyone could HELP it would be appreciated

Not sure whats happening but every 5-20 minutes I get 3 pop-ups from avast. They are as follows:

A Trojan Horse Was Found!

Then the file name is: http://85.255.113.84/users/smell/web/files/encodex.jpg

Maleware name: Win32:Agent-IU [Trj]

Adware Was Found!

File name: http://85.255.115.187/users/fill/web/images/sphlp32.jpg

Malware name: Win32:Adan-094 [Adw]

Adware Was Found!

File name: http://85.255.115.187/users/fill/web/images/pppcgm.jpg

Malware name: Win32:Adan-078 [Adw]

If anyone could help or tell me what I need to do that would be great. Thanks for help, if any.


Welcome to the forums, Chipmunkice. :slight_smile:

Can you please give the exact text of the warning messages from avast? It could be several different warning types for what you describe. Better yet, a screen shot would also be helpful.

As for other information needed, please include your computer’s OS and any security programs installed. It is helpful to know these as the help given can depend on these factors.


My OS is Windows XP, and Im pretty sure I dont have a firewall, but Ive got Avast and Ad-Aware. Been meaning to get a firewall, but I dont know any good free ones.

Heres the third one, these all come one after another.

Also I would like to say that I have another weird bug that doesn’t let me open search links directly. I used google and I click the link but it directs me to a different site. I have to copy the link name and open a new browser and copy it to it.

Chipmunkice, these messages come from WebShield…
The site you’re visiting is infected.
Delete the temporary Internet files: go to Internet explorer >Tools > Internet options > Delete files > Click delete all offline content (just to be sure) > click ok.
It might take some time to delete them.
Close your browse.

Schedule a boot-time scanning:
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.


After you do what Tech has suggested, please get a firewall immediately. I use Zone Alarm Free and it is considered the easiest for beginner to learn. I have used it for many years with success. For a few days, it will give you pop-ups as programs try to exit your computer to the internet. You can “teach” it what to let out and what to keep in by using the check box on these pop-ups so that it “remembers” you decisions. Then, it will rarely bother you unless you install new programs.

There are other free firewalls available and many here use them. Among the other free firewalls are Comodo, Kerio, etc. A search of this forum will give you many results on firewalls.

http://www.zonelabs.com/store/content/company/products/znalm/comparison.jsp?lid=home_compare

For farther security, you might also want to download the following programs to help with your other “weird bug” problem.

Spybot - Search & Destroy …

http://www.safer-networking.org/en/index.html

and ewido …

http://www.ewido.net/en/download/

These last 2, along with Ad-Aware that you now have, should be updated and run at least once a week.

Please come back and let us know if these suggestions help cure your problem. If not, there is more help available on this forum.

I hope this helps you. :slight_smile:


Hi Chipmunkice,

Go to this site for an analysis of your HijackThis file:
http://startup.networktechs.com/srch-system.exe.html

Like CharleyO says, get your machine cleansed, install a good software firewall, and get the anti-spyware trio recommended installed and keep everything updated and patched.
Surfing with minimal rights reduces the risk of getting infected by a drive-by infection considerably.

Surf safe and secure, have a nice day!

polonus

:slight_smile: Hi Chipmunkice :

  I think those websites you reported were discussed on an
  antiSPYWARE  forum as being "connected" to a Russian
  Spammer and the advise was to add those sites to your
 "Restricted Sites" list ; to do so, go to Internet Options,
  then click "Security", then click "Restricted sites", then
  click "Sites", then in the box "Add this Web site to the
  zone", put "85.255.115.187", then click "Add"; then put
 "85.255.113.84" in the box and then click "Add" .

Hi Spiritsongs,

He should also take the links out. Nobody want kids to experiment with links to malware, don’t we now? Well, actually they are no live links, and you cannot directly link to this server, so maybe the links are safe.

polonus

Hi!

I got the exact same problem as Chipmunkice and i can’t get it out of my computer.

Please help…

Regards David


Welcome to the forums, DavidStockholm. :slight_smile:

If your problem is …

... the exact same problem as Chipmunkice ...
...... then please re-read the above posts.

Hi Charley.

I talked to Chipmunkice and downloade ZoneAlarm and Ewido and SpyBoot. I is allright now. I dont know wich of the programs who fixed it for me.

/David


That’s good news, David. We are all glad that your problem was solved. :slight_smile:

Please come back often, learn more, and maybe help others. :wink: