virus followed by browser launching to "404.funpic.org"

  • Thread starter Thread starter Algomeysa2
  • Start date Start date
A

Algomeysa2

A friend had a virus, that her antivirus program supposedly deleted....

Afterwards, she got hundreds of "undeliverable" email messages returned to
her from nonexistent email addresses, supposedly sent by her originally.

Now her browser, upon bootup, launches to some nonsense "404.funpic.org"
page, with some German, title "Seite nicht gefunden! Kostenloses Hosting bei
funpic.org"

Any idea what this is, and how to squash it?
 
Algomeysa2 said:
A friend had a virus, that her antivirus program supposedly deleted....

Afterwards, she got hundreds of "undeliverable" email messages returned to
her from nonexistent email addresses, supposedly sent by her originally.

Now her browser, upon bootup, launches to some nonsense "404.funpic.org"
page, with some German, title "Seite nicht gefunden! Kostenloses Hosting bei
funpic.org"

Any idea what this is, and how to squash it?
Click to expand...

The browser is looking for a website which does not exist ("Seite nicht
gefunden!") - will it let her change her homepage to something else or
does it keep resetting to this?

Which virus did the AV package find?

Whatever the case I'd also run some anti-spyware over the machine in
addtion to having used AV:
AdAware http://www.lavasoft.de
Spybot http://www.safer-networking.org/en/download/
 
From: "Algomeysa2" <[email protected]>

| A friend had a virus, that her antivirus program supposedly deleted....
|
| Afterwards, she got hundreds of "undeliverable" email messages returned to
| her from nonexistent email addresses, supposedly sent by her originally.
|
| Now her browser, upon bootup, launches to some nonsense "404.funpic.org"
| page, with some German, title "Seite nicht gefunden! Kostenloses Hosting bei
| funpic.org"
|
| Any idea what this is, and how to squash it?
|

Please have your friend perform the following....



Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files

Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear

1) Download the TrendMicro Sysclean Front End

Download the utility SYSCLEAN_FE at the following URL --
http://www.ik-cs.com/got-a-virus.htm
SYSCLEAN_FE automates the download and execution process of the Trend Sysclean Package.
Direct URL --
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe


2) Download and install Ad-aware SE
(free personal version v1.05)
http://www.lavasoftusa.com/
Update Ad-aware with the latest definitions and then exit the software.

3) Execute; SYSCLEAN_FE.EXE
Choose; Unzip
Choose; Close


Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
when you get to the menu dhoose [1] so you can boot into Safe Mode.

4) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

5) Reboot your PC into Safe Mode and shutdown as many applications as possible.

6) Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
Choose [2] on the menu and let SYCLEAN.COM scan your computer.
when done, execute Ad-aware SE and perform a full scan of your PC and delete
all objects found.

7) Restart your PC and perform a "final" Full Scan of your platform
Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
Choose [2] on the menu and let SYCLEAN.COM scan your computer.
when done, execute Ad-aware SE and perform a final scan of your PC and delete
all objects found.


8) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),

9) Reboot your PC.

10) If you are using WinME or WinXP, create a new Restore point


* * * Please report back your results * * *
 
Back
Top