Alan 0 Posted September 30, 2004 Share Posted September 30, 2004 Hello, Whenever I got on my IE the other night I noticed that it was getting canceled on my homepage, and being sent to a new URL which was a search site, once I tried to login to my webmail I got sent to a I AM A SPAMMER site. :S Is this Spyware or Adware? I have used the following programs and after deleting everything bad that it found I was still getting the same things. Spy Sweeper, Ad-Aware, Spybot S&D. Could it perhaps be a virus or trojan? Just thought one of the others around the forums who are into computer security might know what is going on :S. Quote Link to post Share on other sites
Alan 0 Posted September 30, 2004 Author Share Posted September 30, 2004 And by the way, I Uninstalled IE, then Re-Installed it and got the same thing. I am using Mozilla Firefox, mainly now, but some of the stuff that I do like the MSN Gaming Zone require IE. Quote Link to post Share on other sites
Madmanmcp 0 Posted September 30, 2004 Share Posted September 30, 2004 Alan, what you probably have is a Browser Hijacker. Do you have the newer version of Ad-Aware...Ad-Aware SE? h_tp://www.download.com/3000-2144-10045910.html go there and download and install. Also check for updates before scanning. do you have the current Spybot? Version 1.3? get that here h_tp://www.safer-networking.org/en/download/index.html also check for updates first before scanning See if these get rid of your problem Quote Link to post Share on other sites
TCH-Thomas 24 Posted September 30, 2004 Share Posted September 30, 2004 Try also Hijack this: http://www.spychecker.com/program/hijackthis.html Quote Link to post Share on other sites
Alan 0 Posted September 30, 2004 Author Share Posted September 30, 2004 k will try, thanks for your help. Quote Link to post Share on other sites
Madmanmcp 0 Posted September 30, 2004 Share Posted September 30, 2004 An FYI about Hijackthis. It is an "investigation" tool and it creates a list that you are supposed to look at to determine if you have spyware, trojans, hijackers and so on. The list or report produced is usually technical in nature and needs knowlegable people to read and interpret what is in it. If you don't know how to read the report or someone is not going to read it for you the program will not help you. Quote Link to post Share on other sites
Alan 0 Posted September 30, 2004 Author Share Posted September 30, 2004 Hrm, I updated Spybot S&D and AdAware and I still have the same problem And everytime I start IE that homepage tries to force me to download pl.exe, I am guessing it is a virus. Quote Link to post Share on other sites
dcumpian 0 Posted September 30, 2004 Share Posted September 30, 2004 Alan, First, you should check to see where your "Home" page is pointing. You should set it to "Blank" if you can. Second, you may have already downloaded a trojan or virus and should do a complete virus scan of your computer. Also, do a search for pl.exe on your computer, in case your virus scanner misses it (some do). Regards Dan Quote Link to post Share on other sites
Madmanmcp 0 Posted September 30, 2004 Share Posted September 30, 2004 Alan, I've checked the virus sites, Datafellows, McCafee, and Nortons and cannot find anything on "pl.exe". Try this. Disconnect your computer from the internet, remove cable or hangup if dialup. Boot your computer into "safe mode" rerun both the Ad-aware and Spybot programs. Do you have a Virus scanner? If not get one and run it. AVG is free h_tp://free.grisoft.com/freeweb.php/doc/2/ Quote Link to post Share on other sites
Madmanmcp 0 Posted September 30, 2004 Share Posted September 30, 2004 Free online scan: h_tp://www.bitdefender.com/scan/license.php h_tp://www.pandasoftware.com/activescan/com/activescan_principal.htm h_tp://housecall.trendmicro.com/ Quote Link to post Share on other sites
TCH-Thomas 24 Posted September 30, 2004 Share Posted September 30, 2004 (edited) Dont know if this applies to your problem, but might be worth a look, esp last message about C:\Program Files\Zero Knowledge\pl.exe: http://forums.thetechguys.com/archive/index.php/t-7029.html Edited September 30, 2004 by Jikrantz Quote Link to post Share on other sites
Madmanmcp 0 Posted September 30, 2004 Share Posted September 30, 2004 Good find Thomas. Quote Link to post Share on other sites
Alan 0 Posted October 1, 2004 Author Share Posted October 1, 2004 Problem: Norton AntiVirus: Virus Alert! High Risk! Norton AntiVirus has detected a virus on your computer. Details-> Object name: C:\windows\system32\jaamicjm.dll Virus name: Trojan.StartPage Action Taken: Access to the file was denied. ------------------------------------------------------------------ threat assessment Wild * Number of infections: More than 1000 * Number of sites: More than 10 * Geographical distribution: High * Threat containment: Easy * Removal: Moderate Distribution: Low Damage * Payload Trigger: Running the Trojan. * Payload: Changes the Internet Explorer home page without permission. Quote Link to post Share on other sites
Alan 0 Posted October 1, 2004 Author Share Posted October 1, 2004 And yes I have a virus scanner lol, I have NIS 2004. Quote Link to post Share on other sites
Alan 0 Posted October 1, 2004 Author Share Posted October 1, 2004 ok I got it deleted, thanks for all of your help. Quote Link to post Share on other sites
TCH-Rob 0 Posted October 1, 2004 Share Posted October 1, 2004 Glad you got it removed. You never told us, are you Adware, Spyware? Or something else? Quote Link to post Share on other sites
Alan 0 Posted October 1, 2004 Author Share Posted October 1, 2004 It was a Trojan / Virus. Quote Link to post Share on other sites
TCH-Rob 0 Posted October 1, 2004 Share Posted October 1, 2004 Let me restate my question Alan. Are you Adware, Spyware? Or something else? Quote Link to post Share on other sites
Alan 0 Posted October 1, 2004 Author Share Posted October 1, 2004 Hrm, I am something else lol. I never noticed you where a red coat before until just now though lol. So I must have had a space-out. Quote Link to post Share on other sites
TCH-Rob 0 Posted October 1, 2004 Share Posted October 1, 2004 I never noticed you where a red coat before until just now though lol. So I must have had a space-out. Honorary only, no access to customer account information just forum settings. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.