Web Site Does not exist??? Is this a virus/Trojan

Viruses and worms
1

Here’s the deal. There’s a web site, call it www.sample.com. The site is live and visible to the world, except for from one computer.

When I try to go to the web site on that one computer I get an error that looks like it’s an error on netfirms.com. But the site is not hosted on netfirms.com, and as far as I know I’d never been to netfirms.com until I went there to try o investigate this error.

My suspicion at this point is that this particular computer is infected with some sort of virus, trojan, or spyware, but after many scans (using Avast, spybot, adaware, etc) I have not been able to correct the problem.

Does this sound like anything you’ve heard of?

-john

2

If the site is infected, don’t give us the direct link, people will acually go there even if they were warn. I never heard of this type of error. Try using this online scanner to see if you have any luck of detecting the virus:

http://www.bitdefender.com/scan8/ie.html

Can you also give us a hijack log? If you don’t have Hijackthis heres the link to download it:

http://www.tomcoyote.org/hjt/

You can also use the online Hijackthis scan: http://hijackthis.de/index.php

Hope this helps. :slight_smile:

3

As FIXER said you should use HJT for suspect activity. Hijackthis will give an indication of everything running on your system and it can be analysed to come up with suspect programs.

Download HiJackThis.zip - HJT Information HiJackThis Tutorial
For an on-line analysis - HiJackThis Log file On-line Analysis
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.

If you haven’t already got this software (freeware), download, install, update and run it.

  1. Ad-Aware
  2. Spybot Search and Destroy
  3. Spywareblaster
4

I fully agree, and this a program that also can be helpful: StartDreck, a german style startup listing proggie, they use it a lot in Spain. Goes well to accompany HJT for investigating further: you may download it from here
http://www.niksoft.at/download/startdreck.htm

If you download files scan all files before unpacking/unzipping, scan with a file analyzer or look whether the downloaded files are reliable at SpywareGuide.com for instance before downlaoding anything from the net. As far as I know StartDreck is OK.

polonus