Is this a script virus ?

[syzygy]

Symptoms:

1 - Tabs are being forcefully opened in FF directing me to ad pages

2 - Can't start Google Chrome.

3 - Google searches in IE and FF are hijacked and directed to various ad pages.

4 - On-line PandaScan couldn't complete search.

5 - Trend Micro did, but found nothing.

 

[Gamingphreek]

It is definitely a virus of some sort

Run HijackThis! and post the results to the thread.

-Kevin

 

[syzygy]

Weird . . . but I am not able to post the Hijack text file because of the following
limit imposed by this site :

"" You have included 67 images in your message. You are limited to using 10 images so please go back and correct the problem and then continue again.

Images include use of smilies, the BB code tag and HTML <img> tags. The use of these is all subject to them being enabled by the administrator. ""



the text file doesn't have any images !! what the hell . . .

 

[Chiefcrowe]

i'd also suggest running a scan from an AV boot cd such as Avira.

 

[Gamingphreek]

There may be symbols in the text that lead the forums to think you are trying to paste code or HTML or something.

Paste the results in the code brackets and try it again. If not try and post a screenshot of it.

 

[syzygy]

I can't post attachments. HTML code is off. I can't even copy and paste.

 

[Fear No Evil]

I can't post attachments. HTML code is off. I can't even copy and paste.

Pwned.

 

[syzygy]

Pwned.

Fuck you. Given the fact you have to live with whatever the fuck you
are, doesn't that equate to 'self-pwnage' . . . a terminal condition, biatch

 

[syzygy]

Uploaded with ImageShack.us

here you go. any help would be appreciated. does anyone see anything amiss ? ? ?

 

[Gamingphreek]

O3 - Toolbard: (no name)
Additionally I'm not sure about Eraser.exe

All of those look suspicious to me.

There are some others that I would look into, but if you go http://www.hijackthis.de/ and upload your logfile, it will confirm my suspicions.

-Kevin

 

[Mem]

Also run a full scan(after you update it) with Malwarebyte's Anti-Malware,http://www.malwarebytes.org/mbam.php .