Infected Computer - IE closed by DEP, Cant connect to Microsoft sites and redirecting.

Forums › Microsoft Windows › Infected Computer - IE closed by DEP, Cant connect to Microsoft sites and redirecting.

Tarnz87

16 posts

Geek

#77522 17-Feb-2011 14:31

Someone has infected my computer. And Im sure IWON.exe is to blame. Found 3 of these files in one of the folders, so I deleted them, however I think someone had already run it.

When ever you try open IE 8 (Vista) DEP closes it immediately.

Since I cant get IE to work I used Mozilla, I can go to most site, however if I try google any help like Malware or antivirus and click on the link Im redirected to another site.

Also most times I cant go to Microsoft, and my computer wont let me use the update service.

Now I have run several scans, and they arent detecting anything major. I have used Pareto Logic PC Health Advisor and fixed everything there it told me too, I have also tried Avanced SystemCare, Trojan something arather, and AVG PC tune up. I have done everything all these cleaners have told me too but my problem is still here.

Can anybody help me please. Thanks.

1 | 2

19282 posts

Uber Geek
Inactive user

#440729 17-Feb-2011 14:33

Malwarebytes.org

Sharesies kids

Free kids accounts - trade shares and funds (NZ, US) with Sharesies (affiliate link).

Tarnz87

16 posts

Geek

#440730 17-Feb-2011 14:33

I have also tried to remove and re-install IE 8, started IE with no add-ons, and it will work but its not the same.

Tarnz87

16 posts

Geek

#440731 17-Feb-2011 14:36

Ok went to Malwarebytes and clicked on free version and took me to this site http://majorgeeks.com/download.php?det=5756 is this correct?

johnr

19282 posts

Uber Geek
Inactive user

#440732 17-Feb-2011 14:37

Tarnz87: Ok went to Malwarebytes and clicked on free version and took me to this site http://majorgeeks.com/download.php?det=5756 is this correct?

Yes and from here you download malwarebytes

freitasm

BDFL - Memuneh
76355 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#440740 17-Feb-2011 14:52

Also check for virus using http://housecall.trendmicro.com (free download).

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

Tarnz87

16 posts

Geek

#440742 17-Feb-2011 14:58

Ok with Malwarebytes do i run quick scan or full scan?

freitasm

BDFL - Memuneh
76355 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#440744 17-Feb-2011 14:59

FULL SCAN, always run FULL SCAN since your PC is almost FUBAR and a quick scan is just a cursory glance...

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

Tarnz87

16 posts

Geek

#440752 17-Feb-2011 15:09

Ok I tried to install HouseCall but got this error message when it tried to install:

An internal error has prevented HouseCall from opening. Do you want to visit the HouseCall web site to get the latest version and try again? So I clicked yes, but IE Closed.

When it was installing though it had just finished updating to the latest version.

Now what? Malware is still scanning.

freitasm

BDFL - Memuneh
76355 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#440754 17-Feb-2011 15:11

My guess is you have a virus (not adware) and it had hijacked system calls from security software - like HouseCall.

I'd say your best option is a fresh install, immediately followed by a Windows Update, and then Microsoft Security Essentials (www.microsoft.com/security).

And then, some good old common sense. Not installing programs you don't need, not opening files you have not asked for, not visiting dodgy websites.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

Tarnz87

16 posts

Geek

#440759 17-Feb-2011 15:16

Yes I know about the common sense. But I have been away from home for 3 weeks, and left the rest of the family home and this is what I have found. Yeah thought it might need a fresh start.

Only just done a fresh start about the start of January, came home again to a computer that wouldnt load.
Ohh well.

Thanks.

freitasm

BDFL - Memuneh
76355 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#440764 17-Feb-2011 15:22

Frustrating, I am sure...

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

sampler

441 posts

Ultimate Geek

ID Verified

Trusted

Lifetime subscriber

#440998 18-Feb-2011 08:13

Tarnz87: But I have been away from home for 3 weeks, and left the rest of the family home and this is what I have found.

Nothing like physical security in particular from family members

If you have not formatted the PC yet, and have the time try NOD from ESET (antivirus) and Spybot S&D (malware). They are good alternatives to the suggestions above. Always a good idea to hit something with a few different scanning engines in cases like this.

Of interest a quick search suggests the "normal" IWON is a rather useless malware toolbar. more info here ... http://www.spywaredb.com/remove-iwon/

Cheers

Lee

trig42

5604 posts

Uber Geek

ID Verified

#441027 18-Feb-2011 09:29

MBAM (malwareBytes) is pretty good at clearing most things up.

You could also try ComboFix - It can pickup rootkits as well.

Formatting and reinstalling is a drastic solution, but if you don't have much to reinstall then it may be quicker.

VinLew

210 posts

Master Geek

#443696 26-Feb-2011 19:07

Just an idea, try navigating to C:\WINDOWS\system32\drivers\etc, open the file 'hosts' in Notepad, and paste everything onto here. If it's a HUGE file then don't paste it all, but maybe the first 10 lines or so.

b0untypure1

1425 posts

Uber Geek

#443790 27-Feb-2011 02:18

you can download a registry reset, i once found one years ago and it helped.
but just like (MF) id recommend Microsoft Security Essentials, it helped me when i had a virus controlling my pc.
Also you could try look at what processes are running in task manager, and end any suspicious ones (mind you, you would need to know what it looked like prior to the virus)

1 | 2