Weird search engines?

[Ayatollah of rock 'n' roller]

Hey all. Just lately I have noticed that weird search engines open up
whenever I am bowsing. I also get AVG alerts: "JD/downloader found", but it
won't heal it just move it to the vault. I assume that this is some sort of
virus? I have tried many things to get rid of them:

AVG
PrevCX
Ad-aware
CCleaner
CWShredder
Hijackthis
Spybot
Spywareblaster
SDfix
Fixvundo
Smitfraudfix

I have been busy as you can tell! I just can't get rid of whatever is going
on though!

Any ideas?

 

[David H. Lipman]

From: "Ayatollah of rock 'n' roller" <[email protected]>

| Hey all. Just lately I have noticed that weird search engines open up
| whenever I am bowsing. I also get AVG alerts: "JD/downloader found", but it
| won't heal it just move it to the vault. I assume that this is some sort of
| virus? I have tried many things to get rid of them:
|
| AVG
| PrevCX
| Ad-aware
| CCleaner
| CWShredder
| Hijackthis
| Spybot
| Spywareblaster
| SDfix
| Fixvundo
| Smitfraudfix
|
| I have been busy as you can tell! I just can't get rid of whatever is going
| on though!
|
| Any ideas?
|



1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap:
In Notepad.exe; Format --> uncheck; "Word wrap"

3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post in one of the below
expert forums...


{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's System Scanner
Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/index.php?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

 

[Postman Delivers]

Ayatollah of rock 'n' roller presented the following explanation :

Hey all. Just lately I have noticed that weird search engines open up
whenever I am bowsing. I also get AVG alerts: "JD/downloader found", but it
won't heal it just move it to the vault. I assume that this is some sort of
virus? I have tried many things to get rid of them:

AVG
PrevCX
Ad-aware
CCleaner
CWShredder
Hijackthis
Spybot
Spywareblaster
SDfix
Fixvundo
Smitfraudfix

I have been busy as you can tell! I just can't get rid of whatever is going
on though!

Any ideas?

* * *
Ayatollah of rock 'n' roller,

Have you run Ad-aware and Spybot Search and Destroy in safe mode...
Many times the malware can reload before your anti-virus can dump the
file again, sometimes it is a rootkit...

Make vertain these programs are updated with the latest patterns, and
then running them in safe mode may find the virus/malware and remove
it...

It is only time, and worth a try, but David has the best answer, it
maybe time for a very experenced person to look over your computer
scan...

JR the postman