I just started using Avast and it so far has found:
Trojan Js False AV - AB
and Virus Win32 Trojan - gen (other)
I put both of these in the Virus Chest
Which Norton didnt find, anyways, my harddrive still keeps running though, (I took Norton out) so its not Norton making harddrive run. and now when I visit my own website this box pops up saying that topsites.com needs you to sign in with your password and also take off the topsites code from your website until your site is approved.
This stupid box will not go away until I click the crap out of it, once I finally got it gone then my scotty the watchdog woofed and said do you want to install this activeX control, which of course I said NO to it.
My question is: Could my website have a virus? or a worm? OR, is there someway to scan my browsers that I use with Avast? The browsers I am using are: IE7 and Mozilla Firefox.
Also, how do you scan your archive files with Avast?
And also, can you scan a browser for a virus?
So in closing … What could be the cause for all of this weirdness that my PC is doing now?
Please Email me anyone that can help as this is driving me nuts!
Thanks, my Email is:
Besides getting rid of Norton, I suggest you do not public your email here as spambots could take it and you’ll get spam…
Also, you could (should) clean your hosts file. Maybe you can use HostsMan to do it.
Thanks so much for the help, Ok, when I originally removed Norton I used the Norton Removal Tool, so I am sure that Norton is totally gone!
Also, the adware and spyware scanners I have are: Superantispyware, Spysweeper, Hijack This, and Malwarebytes.
I checked Avast to run a scan in my archive files but the free home version does not let you use this feature.
I could copy and paste my Hijack this log, but I sure didnt find anything on it that would help me.
Here is my website address if you want to check to see if there is some kind of worm or virus on it, and No, I didnt put any topsites code on my website lately at all. My website address is: www.freewebs.com/heavenssafehaven
Really appreciate all the help guys thanks! From Cj.
Well just looking at the page source code of your home page shows many references to topsites (and itopsites and ultimatetopsites) so I have no idea why they would be there is ‘you’ didn’t put them there ?
The html code target=“_blank” would normally open up whatever is in this in a new window/tab, though it has been some time since I did any html coding.
This appears to be the one (target=“_blank”) that is opening the page to logon to topsitesguide, see image. It is in the section of your page source.
There are several “topsite” links on your page. I think one of these is probably causing the problem. I’d suggest you should contact whichever one is causing the problem and sort it out with them.
In your first post above, you should modify it to remove your email address unless you enjoy getting spam email. Spambots crawl through public forums constantly looking to harvest email addresses.
After I ran A squared FREE version it found lots of stuff and took it out for me, I then re booted and went back to my website, and now it doesn’t come up with that annoying box anymore. So I think that it was a browser hijack or active x on my browser and not on my website at all, since its not doing it anymore.
But I am still having problems with my PC hard drive running, it does this after I scan with a long scanning program like super antispyware and other spyware detectors.
I went online and read about a virus called autorun which makes your harddrive keep running, so then I downloaded a tool from softpedia called CLEAN AUTO RUN and ran that, this found the auto run virus in 9 files, and deleted it for me.
However my hard drive is still running after I scan my pc with any spyware detectors however my pc dosent slow down or anything yet it does hesitate alot at times.
So what else could this be? Should I post my hijack this log here?
Please let me know Thanks very much from Cj.
Download and run “Process Explorer” from sysinternals(now microsoft). It will show you all the processes running and give you the option to either suspend(freeze) or terminate them.
Thanks Fire Force, I will try this program and see whats up, also my MSN Email just received 138 Emails supposedly from this forum but when I opened one it said (SEE BELOW)
So I didnt want to open anymore of them I deleted them all and put a block on it so that I dont receive anymore of them.
Here is what the email said:
Avast Support
alwil.alwilsoftware.support@gmail.com
Warning! A virus has been detected. This text and title was edited to prevent the virus from activating itself. Also, the address was hijacked to prevent the virus from hijacking into your contact list. If you don’t care and want to view this message, please disable Avast’s Mail Scanner and Avast! Outlook/Exchange Scanner by right clicking the “a” icon on your taskbar and selecting Pause Provider, you should see a line of things. Select Outlook/Exchange and Internet Mail.
_____________________________________________________________________________________________________
So how could a virus be sent to my email coming from this forum? Must be because I put my Email address on my first post?
And it just keeps getting weirder!!! ???
Anyways I will try what fireforce said to do and if anyone has any other suggestions please let me know Thanks! From Cj.
For the avast! Home Edition ( 4.8 ) [probably other variants] In avast! antivirus scan the checkbox to enable Archive File scans should be in the same area as the Set Scan Intensity box. (after selecting scan areas, before starting scan)
Bobby, on Avast where it has the list of what you want to scan “Archive files” is greyed out, when I click on it, it does nothing.
Fireforce, I downloaded the “process Explorer” but I am not sure how to use it, question, when my hard drive starts running again if I open “process Explorer” will it show me which process is making my harddrive run? Also how will I be able to identify it as such? ???
With Process Explorer, it will show you exactly what processes are running. In Vista, often SearchIndexer is the responsible party for sudden HD activity as its indexing files. However, it will also show you processes and files being attached to other processes. Look for things attached to Explorer.exe and winlogon.exe for example. It will show you activity of all processes(pending they arent being hidden).
As for the HD activity itself. In Vista, pull up the Task Manager, Select the Performance tab. Then the button on the bottom right that says Resource Monitor. You will see a new box pop up with multiple listings; CPU, disk, network, memory. Click on Disk. It will show you each and every process writing or reading to the disk, what file(s) its using, and how much data is being read/written.
Compare the results from both. If you see a process writing or reading tons of data, and its attached to say winlogon for example. You caught your outlaw.
