Computer ForumsComputers  

Go Back   Computer Forums > The World Wide Web > Virus - Spyware Protection / Detection
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
Old 03-26-2008, 05:01 PM   #1 (permalink)
taekwondo
Junior Techie
 
Join Date: Aug 2007
Posts: 96
Default http://u.asdafdgfgf.com/ads.js trojan please help!!!!

like 3 days ago i started to get this trojan / virus. i looked on google but got no good solution.
whenever i go to a website in mozilla or IE, i see it says like
"waiting for "http://u.asdafdgfgf.com/ads.js""
on left below corner and right at that moment i get an error from NOD32 says "http://u.asdafdgfgf.com/ads.js trojan errror found" and only gives me option to terminate it.
finally i blocked that site in mozilla but still gettin it in IE and i am sure that CRAP is on my pc. so how do i remove this virus / trojan? do you guys thing it damaged my pc?(like gettin my passwords and such....)
{a small image of how it looks like:
New Windows Bitmap Image.jpg
PLEASE HELP!!!

Last edited by taekwondo : 03-26-2008 at 05:21 PM.
taekwondo is offline   Reply With Quote
Old 03-26-2008, 05:40 PM   #2 (permalink)
Makaveli213
Major Moderator Autobot
 
Makaveli213's Avatar
 
Join Date: Sep 2004
Location: In Trotter's crawl space
Posts: 9,372
Default Re: http://u.asdafdgfgf.com/ads.js trojan please help!!!!

Have you gone thru the guide?
__________________
Forum Rules | PROFANITY | Browser Spell Check - A How To | Windows Important Thread Index | Browser Important Thread Index


I'm sorry but I do not accept support requests via IM, email, or personal messages
You can contact me for Forum related issues or anything not support related.
Makaveli213 is online now   Reply With Quote
Old 03-26-2008, 06:56 PM   #3 (permalink)
taekwondo
Junior Techie
 
Join Date: Aug 2007
Posts: 96
Default Re: http://u.asdafdgfgf.com/ads.js trojan please help!!!!

Quote:
Originally Posted by Makaveli213 View Post
Have you gone thru the guide?
sorry but what guide? and i found some turkish (my language) sites abt this trojan and they say no way to clean it with anti-viruses...(they cant find it)
taekwondo is offline   Reply With Quote
Old 03-27-2008, 12:31 AM   #4 (permalink)
Makaveli213
Major Moderator Autobot
 
Makaveli213's Avatar
 
Join Date: Sep 2004
Location: In Trotter's crawl space
Posts: 9,372
Default Re: http://u.asdafdgfgf.com/ads.js trojan please help!!!!

Spyware Removal Guide By Osiris

The sticky in the area where you are now. The Spyware removal guide which will clean your system of any and all infections...
__________________
Forum Rules | PROFANITY | Browser Spell Check - A How To | Windows Important Thread Index | Browser Important Thread Index


I'm sorry but I do not accept support requests via IM, email, or personal messages
You can contact me for Forum related issues or anything not support related.
Makaveli213 is online now   Reply With Quote
Old 03-27-2008, 03:58 PM   #5 (permalink)
taekwondo
Junior Techie
 
Join Date: Aug 2007
Posts: 96
Default Re: http://u.asdafdgfgf.com/ads.js trojan please help!!!!

Quote:
Originally Posted by Makaveli213 View Post
Spyware Removal Guide By Osiris

The sticky in the area where you are now. The Spyware removal guide which will clean your system of any and all infections...
nope. tried that and dint work.
i tried nod32 scan, avg anti-spyware, and SmitfraudFix but no hope. they cant find and kill that crap.also i have 2 more problems i get after this trojan / virus
1) cant go to hotmail.com
2) cant start safe mode....

as i said i looked everywhere for removing this torjan/ virus but cant get rid of it. please someone help me....
taekwondo is offline   Reply With Quote
Old 03-27-2008, 04:07 PM   #6 (permalink)
BuggVeyron
Super Techie
 
BuggVeyron's Avatar
 
Join Date: Feb 2008
Location: England
Posts: 427
Send a message via MSN to BuggVeyron
Default Re: http://u.asdafdgfgf.com/ads.js trojan please help!!!!

Can you post a HiJackThis log here?
__________________
BuggVeyron is offline   Reply With Quote
Old 03-27-2008, 04:29 PM   #7 (permalink)
taekwondo
Junior Techie
 
Join Date: Aug 2007
Posts: 96
Default Re: http://u.asdafdgfgf.com/ads.js trojan please help!!!!

Quote:
Originally Posted by BuggVeyron View Post
Can you post a HiJackThis log here?
sure here it is:

Quote:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:27:10, on 27.03.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Babylon\Babylon.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Apoint\Apvfb.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\Integrator.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = :
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SonyPowerCfg] "C:\Program Files\Sony\VAIO Power Management\SPMgr.exe"
O4 - HKLM\..\Run: [Switcher.exe] C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [FirefoxUltimateOptimizer] "C:\Documents and Settings\test\Desktop\Firefox_Ultimate_Optimizer_w ww.softarchive.net\Firefox_Ultimate_Optimizer www.softarchive.net\Firefox Ultimate Optimizer\Firefox Ultimate Optimizer.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Babylon Translator] C:\Program Files\Babylon\Babylon.exe
O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3944392904-2782083401-834531489-1006\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot (User 'GIB')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-3944392904-2782083401-834531489-1006 Startup: Hare.lnk = C:\Program Files\Dachshund Software\Hare\Hare.exe (User 'GIB')
O4 - Startup: Hare.lnk = C:\Program Files\Dachshund Software\Hare\Hare.exe
O8 - Extra context menu item: Add RSS Support Site to VAIO Information FLOW - C:\Program Files\Sony\VAIO Information FLOW\aiesc.html
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: iolo DMV Service (ioloDMV) - Unknown owner - C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\Avlib\SSScsiSV.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardware ResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe

--
End of file - 10636 bytes
taekwondo is offline   Reply With Quote
Old 03-27-2008, 04:37 PM   #8 (permalink)
BuggVeyron
Super Techie
 
BuggVeyron's Avatar
 
Join Date: Feb 2008
Location: England
Posts: 427
Send a message via MSN to BuggVeyron
Default Re: http://u.asdafdgfgf.com/ads.js trojan please help!!!!

Did you install the Firefox Ultimate Optimizer yourself?

If so, don't worry about it.

Apart from that, the log's clean.

Also i found this reply to the same problem on another site...sounds like a virus scan will help here:

Quote:
http://g.asdafdgfgf.com/ads.js is opened in any web page you use NOT because you have problem with your PC. It is because some OTHER computer is infected with virus and is taking control of your communication with Internet.

This happens through phenomenon called ARP spoofing.

Simplest solution to this problem is to ensure that all computers in your physical network are virus free, not just yours.
__________________
BuggVeyron is offline   Reply With Quote
Old 03-27-2008, 04:45 PM   #9 (permalink)
taekwondo
Junior Techie
 
Join Date: Aug 2007
Posts: 96
Default Re: http://u.asdafdgfgf.com/ads.js trojan please help!!!!

Quote:
Originally Posted by BuggVeyron View Post
Did you install the Firefox Ultimate Optimizer yourself?

If so, don't worry about it.

Apart from that, the log's clean.

Also i found this reply to the same problem on another site...sounds like a virus scan will help here:
but my pc is not connected with any other pc's ....... except my desktop and it has no virus for sure....
and yes i installed FUO myself... i am using a central internet (they installed the internet to all the apartment, but heard that they r not connected to each other, means no network places...)
i scaned my whole pc with nod32 and the result is clean....
hmmm this is really strange, i'll scan my desktop...
but why cant i go to hotmail.com in mozilla anymore? i get an error says:
"connection: close"
taekwondo is offline   Reply With Quote
Old 03-27-2008, 04:50 PM   #10 (permalink)
BuggVeyron
Super Techie
 
BuggVeyron's Avatar
 
Join Date: Feb 2008
Location: England
Posts: 427
Send a message via MSN to BuggVeyron
Default Re: http://u.asdafdgfgf.com/ads.js trojan please help!!!!

I'd still do a full deep virus scan if that was my machine.

Try, along with Nod32, using the Trend Micro Online scan (just Google it) as a 2nd opinion scan if you know what i mean.
__________________
BuggVeyron is offline   Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Bavarian Skype Trojan Osiris Virus - Spyware Protection / Detection 0 01-26-2008 04:59 PM
Melissa Strip Captcha Breaker Trojan Osiris Virus - Spyware Protection / Detection 1 12-08-2007 07:27 AM
Webmail-creating Trojan targets Gmail Osiris Virus - Spyware Protection / Detection 0 08-15-2007 04:28 PM
Custom Trojan Creation Tool Sold Online Osiris Virus - Spyware Protection / Detection 0 07-21-2007 02:03 AM
Keylogging Trojan Dodges Anti-virus Detection Osiris Virus - Spyware Protection / Detection 0 05-26-2007 05:59 AM


All times are GMT. The time now is 02:59 AM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0 RC8