Next Question

Mahalo is adding a tip to all questions that don't offer a tip.
M$1.00 Funded By Mahalo ? |
April 29, 2009 12:20 AM
RSS
i suggest windows 7, reinstalling the operating system will definitly fix your problem
Permalink | Report
http://www.malwarebytes.org/
http://www.superantispyware.com/
Permalink | Report
Answered Question

Mahalo is adding a tip to all questions that don't offer a tip.
Trojan Adclicker ? Help! I have vista!
For the past month or so when ever I'm on deviant Art a pop up occasionally appears. It takes over my browser and redirects it to "www.stroobel.com" for an IQ quiz. This has happened Several times. Also, a popup takes over my browser saying it its going to scan my computer with 'virus doctor'. I have found others are having the same problem with "Mangafox"
After my PC tools:internet security scanned my computer today I found the Trojan.
I believe this trojan is also referred to as virtualmundo or it has some tie to this. From what the virus scan says it is Trojan.Adclicker..
While searching the web I found this trojan is for the XP. But I have windows vista.
The following are the registry keys as well as a screen shot of my PC tools as well as a typed out registry key values that PC tools has recognized as belonging to the Trojan. I tried to fix it with PC tools and I cannot find the registry values any longer except for the one that says it is to be repaired. I do not know if i have fixed the problem are not. Registry values the scan found are below..Please help!:
Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{4AFC04A3-B551-4B68-9BEB-8677D90150D9},Compatiblity Flags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{4AFC04A3-B551-4B68-9BEB-8677D90150D9},Pst
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{54485651-524A-4245-5846-2D514F312230},Compatiblity Flags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{54485651-524A-4245-5846-2D514F312230},Pst
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{5CC2F638-99FF-45D2-97C7-E30E83CF04D2},Compatiblity Flags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{5CC2F638-99FF-45D2-97C7-E30E83CF04D2},Pst
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{D7BF4552-94F1-42BD-F434-3604812C856D},Compatiblity Flags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{D7BF4552-94F1-42BD-F434-3604812C856D},Pst
Registry Keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{4AFC04A3-B551-4B68-9BEB-8677D90150D9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{54485651-524A-4245-5846-2D514F312230}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{5CC2F638-99FF-45D2-97C7-E30E83CF04D2}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{D7BF4552-94F1-42BD-F434-3604812C856D}
Registry Value to be repaired:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bits\Parameters,ServiceDll
After my PC tools:internet security scanned my computer today I found the Trojan.
I believe this trojan is also referred to as virtualmundo or it has some tie to this. From what the virus scan says it is Trojan.Adclicker..
While searching the web I found this trojan is for the XP. But I have windows vista.
The following are the registry keys as well as a screen shot of my PC tools as well as a typed out registry key values that PC tools has recognized as belonging to the Trojan. I tried to fix it with PC tools and I cannot find the registry values any longer except for the one that says it is to be repaired. I do not know if i have fixed the problem are not. Registry values the scan found are below..Please help!:
Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{4AFC04A3-B551-4B68-9BEB-8677D90150D9},Compatiblity Flags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{4AFC04A3-B551-4B68-9BEB-8677D90150D9},Pst
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{54485651-524A-4245-5846-2D514F312230},Compatiblity Flags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{54485651-524A-4245-5846-2D514F312230},Pst
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{5CC2F638-99FF-45D2-97C7-E30E83CF04D2},Compatiblity Flags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{5CC2F638-99FF-45D2-97C7-E30E83CF04D2},Pst
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{D7BF4552-94F1-42BD-F434-3604812C856D},Compatiblity Flags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{D7BF4552-94F1-42BD-F434-3604812C856D},Pst
Registry Keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{4AFC04A3-B551-4B68-9BEB-8677D90150D9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{54485651-524A-4245-5846-2D514F312230}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{5CC2F638-99FF-45D2-97C7-E30E83CF04D2}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\internet Explorer\ActiveX compatiblility\{D7BF4552-94F1-42BD-F434-3604812C856D}
Registry Value to be repaired:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bits\Parameters,ServiceDll
Interesting Question?
Yes (0)
No (0)
RSS
Best Answer Decided by Votes
| April 29, 2009 12:41 AM |
Permalink | Report
Voted as best: princessofheartbreak
Other Answers (1)
April 29, 2009 12:34 AM
I would suggest downloading MalwareBytes and doing a scan...and SUPERAntispyware and doing another scan. Remove anything that it finds. If it finds Trojan.Adclicker and is able to remove it, let me know so I can tell you how to secure your browser so that this doesn't happen again. http://www.malwarebytes.org/
http://www.superantispyware.com/
Permalink | Report
Answer this Question
Related Questions
Ask a Question
Buy Mahalo Dollars with Credit Card or PayPal
Top Members
Most Popular Tags
Categories
- Anonymous
- Arts & Design
- Beauty & Style
- Books & Authors
- Business
- Cars & Transportation
- Consumer Electronics
- Coupons Deals
- Education
- Entertainment
- Environment
- Fitness
- Food & Drink
- From Email
- From Iphone
- From Twitter
- Health
- History
- Hobbies
- Home & Garden
- How Tos
- Humor
- Jobs
- Legal
- Local
- Love & Relationships
- Mahalo Answers Community
- Money
- Music
- News
- NSFW
- Parenting
- Pets
- Science & Mathematics
- Services
- Shopping
- Social Science
- Society & Culture
- Sports
- Technology & Internet
- Travel
- Video Games
Welcome New Members
- jap23, November 11, 2009 02:58 PM
- kadiiiii, November 11, 2009 02:49 PM
- gretchen1976, November 11, 2009 02:46 PM
- autorepairwarra..., November 11, 2009 02:40 PM
- bhavik31, November 11, 2009 02:30 PM
Mahalo Dollars are the currency of Mahalo Answers.
Each Mahalo Dollar costs $1.
Once you earn more than 40 Mahalo Dollars, you can request to be paid via PayPal. Each Mahalo Dollar is currently worth $0.75 when paid out via PayPal. Learn More