Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Funkeymunkey on August 17, 2004, 03:22:16 AM
-
I have had this problem for a while now and it is getting on my nerves, Some pages i try to go to, and some links on webpages I click I get redirected to a blue page that says "Free Search Online" and it has some poker adds on it, I have tried to download Hijack This, the anti hijack program but it gives me a error saying Cannot copy file: Cannot read from the source file or disk. Im not sure why it does this and any help from you would be greatly appreciated, thank you all :-\
-
Funkeymunkey
Welcome to the forum.
Please help us help you.
What version of Avast! are you using
What vps version?
What OS?
What exactly is the error message? (If you are getting one.)
etc. etc.
Also, take a look at Shortcuts For ALL in my signature.
-
Funkeymunkey, the best will be a full scan with Ad-aware and SpyBot... ;)
-
I just have the free version of version of Avast, i plan on getting rid of Norton soon, i have windows XP home edition and im not sure what VPS is? =P. I dont get a error message at all, i scanned with ad-aware and it was still there after the scan :(
-
This, the anti hijack program but it gives me a error saying
What anti hijack program?
Sounds to me that your hosts file is changed. Get HijackThis (http://members.home.nl/edeijl/download/hjt5.002.exe) and post the log file here.
-
This sounds like spyware to me.
Try scanning with programs such as spybot (http://www.download.com/3001-8022-10289035.html) or ad-ware (http://www.download.com/3001-8022-10308605.html) to remove these.
After please post a hijackthis log (from where Eddy suggested) and post the log below, this will make sure it is cmpleatly gone from your system.
--lee
-
I just have the free version of version of Avast, i plan on getting rid of Norton soon, i have windows XP home edition and im not sure what VPS is?
VPS is the virus database, signatures to detect virus... I simple words, it the 'update' of the antivirus application 8)
Try what Eddy said or even install, update and run Spybot 8)
-
Funkeymunkey
i plan on getting rid of Norton soon
You can't have both Avast and Norton AV on your computer at the same time.
They conflict. You can use either with an online scan but not 2 resident scanners. I suggest you totally remove both using the proper tools and then re-install Avast!
Here are the procedures to acomplishe this task:
Let's start from scratch and get rid of first NortonAntivirus and the also Avast!.
Once both have been cleand off the system, you can again do a clean install of Avast without any trouble.
1 Click here to Uninstall Norton Antivirus (http://service1.symantec.com/SUPPORT/nav.nsf/docid/2001092114452606)
Make sure you select the right version!!!
After NAV has been uninstalled, reboot your computer.
2 Click here to download the Avast! Complete Uninstall Utility (http://www.avast.com/eng/download/programs/avast_uninstall_util.html)
Run the file to uninstall Avas! and again reboot your computer.
3 Re-install Avast and ENJOY.
Please let us know how you make out
-
Neither Ad-aware nor Spybot can get rid of this thing :-\, I would get Hijackthis but when i click on the link to download it says "Cannot copy file: Cannot read from the source file or disk." If i could find a way around this then maybe i could get Hijackthis.
-
Click HERE (http://members.home.nl/edeijl/download/hjt5.003.exe) it is my HJT analyzer and comes with the latest version of HijackThis.
-
funky,
What the other users have said is correct but I want to add this clarification.
Spybot can lock the Home page as well as prevent changes to the host file. These options will be found under the Immunize tab.
You definetly have spyware on your computer. What you need to ascertain "Is my home page changing or am I only being redirected?"
What browser do you use? In OE, look under Tools/Internet Options. You should see what the Home page is set tool. If it is set to a page you WANT, but are sent to another page, then you have a "hijacker trojan"
-
It isnt changing my home page, only redirecting me when i click certain links or when i try to go to some pages.
-
Wow, Eddy i tried downloading from your link it only gave me the analyzer, also I tried downloading HijackThis on my other computer and transfering it over on AIM, it says it got transfered but i cant find it on my computer anywhere. Finally i got mad and tried emailing it to myself from the other computer but i got the same error message i get when i try and download it....... Is there a greater evil at work here? ???
-
HijackThis is in the same folder as you installed the analyzer.
Are you sure you got THIS (http://members.home.nl/edeijl/download/hjt5.003.exe) one? The installer should be 272Kb.
HijackThis.exe is HJT
hijack.exe is the analyzer.
-
Yes i got that one and it says its 272 kb but when i install it and go to look in the folder there is only the analyzer, But when i went to delete it after I uninstalled it and nothing was in the folder i went to throw it away and it says there are still files in the folder and i cant throw them away. This just keeps on getting wierder ???
-
I just double checked and the installer does install HijackThis. Very strange. THIS (http://members.home.nl/edeijl/download/hijackthis.exe) is a direct link to HijackThis. Give that one a try.
-
No luck :-\ Gives me that error again Cannot copy file: Cannot read from the source file or disk
-
have a look at www.av-outsoure.net you can get spycatcher enterprise. to stop this spyware ;)
-
Ok, let us try something else. Search your drive for two files. One is called HOSTS and the other LMHOSTS. If you find them check if they have a file extension. If not post them here. If they are long you can send them to hjtbeta@yahoo.com and I will have a look at them.
Also run a online virus scan. And let us know the result.
-
I used http://housecall.trendmicro.com/housecall/start_corp.asp online virus scanner and it found the following:
TROJ AGENT.L
TROJ AGENT.L
and yes another TROJ AGENT.L
TROJ DYFUCA.B
ADW SAFESEARCH.A
BKDR HACDEF.73.B
BKDR HACDEF.73.B
BKDR HACDEF.73.B
BKDR HACDEF.73.B
BKDR HACDEF.73.B
TROJ DELF.RA
TROJ DELF.AR
All where on different names (meaning my familys' names) and all where uncleanable
I cant understand though i ran a Norton scan yesterday...thats just not right
-
Funkey Munkey -
If you follow this link
http://forum.gladiator-antivirus.com/index.php?showtopic=10517 (http://forum.gladiator-antivirus.com/index.php?showtopic=10517)
And follow the directions you see - there are some good people there that will try and help you clean up your PC. :)
(mods - if i've over stepped a boundary - delete and let me know ;) )
-
Boot in safe mode with network support and run a online scan. Let it remove all infected files.
-
toadbee
Who or what is "gladiator-antivirus"?
and why should an avast user go to their forum for help.
I believe that's what this forum is for and what it has been doing for quite some time. IMHO
-
Hi Bob - sorry :-X
Free help and information is what gladiator is nowadays.
(no product and no donations even accepted, no ads either)
It appeared funkeymunkey could use the help.
Old school nasty removal is a specialty ;D
Yes, it might be the wrong place for Avast help I agree - All though we try.
-
I booted in safe mode and ran online scan deleted the files... still got the page redirect though :-\ U get my e-mail Eddy?
-
toadbee
If you have the knowledge, and are interested, your more than welcome to stay and help.
-
ok, that is a start. The hosts file is clean. Disable system restore, reboot and try to run hijackthis again. If it still fails get ad-aware and spybot s&d and run them.
-
Run HijackThis.....you mean try and download it right? And how do i turn off system restore?.....becaouse I cant even get Hijackthis as of yet.... :-\
-
Run HijackThis.....you mean try and download it right? And how do i turn off system restore?
Control Panel > System > System Restore ... Disable