Signup
Loginanyone got tis popup recently? amch.questionmarket.com" and
67 posts
-
-
http://www.ca.com/us/securityadvisor/virusinfo/virus.aspx?id=43264
you have been infected by the Win32/Qoologic Family
Win32.Qoologic is a family of trojans that contain limited backdoor functionality and are controlled via a downloaded XML configuration file. They also have the ability to hide their operation from other programs.
-
-
-
Originally posted by xShevchenkox:
wah involve editing of my system
later more jialat how?
is there any sure cfm ways to clear tis thing.
What browzer are you using?
If you are using firefox
Get the "adblock plus" plugin and the "flashblock" plugin.
- The flashblock keeps the flash off the page but a black outline remains. T
- The adblock allows you to block ALL ads, then click on a tab at the bottom of the page to see all the blocked elements.
-
-
-
Originally posted by xShevchenkox:
l hav the adblock plus originally...now l download the flashblock riaos..
kenneth, does it mean, my com is clear now? really worried
Have a subscription with adblock plus. Most known pops ups, ads will be blocked.Your computer should be cleared of the pop up now.
if you are still worried, you can post a hijack log here.
-
-
-
how do l post a hijack log? can u assist me pls.
and what on earth is to suscribe to adblock plus..l tot install this can le? there is still subscriptions for it ah.
and lastly of all, ken, what is tat popup related to? is it a virus or a spyware. And l hav to go out for a while to run an errand, could u wait for me.
-
-
-
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis
Post a hijackthis log and wait for mayi's advice.
Install NoScript on your Firefox browser to stop unwanted websites from running in your browser.
@ kenneth: spybot S&D will edit and block most websites when you install it, but since TS say spybot doesnt work, means its probably not covered under the list of malware yet :(Edited by abao 02 Mar `08, 7:34PM
-
-
-
Originally posted by xShevchenkox:
how do l post a hijack log? can u assist me pls.
and what on earth is to suscribe to adblock plus..l tot install this can le? there is still subscriptions for it ah.
and lastly of all, ken, what is tat popup related to? is it a virus or a spyware. And l hav to go out for a while to run an errand, could u wait for me.
Follow the instructions.
Credits to anty.[*]Please download the latest copy of HijackThis from Trend Micro and save it to your desktop.
[*]Double click on HJTInstall.exe to install it. Click on Install. By default, it will install to C:\Program Files\Trend Micro\HijackThis.
[*]Read through the License Agreement presented to you on the next screen and click on I Accept.
[*]Once installed, HijackThis will start automatically. If it doesn't, please go to your desktop and double click on the HijackThis shortcut created there.
[*]Select Do a system scan and save a logfile.
[*]Close HijackThis.Note: Do not click on the AnalyzeThis button.
Do not fix any lines you see in HijackThis as most entries are harmless and needed for the normal functioning of Windows.Kindly upload the log file to Mediafire. Due to security issues, some letters and backslashes are truncated.
Edited by kenn3th 02 Mar `08, 7:35PM
-
-
-
Originally posted by abao:
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis
Post a hijackthis log and wait for mayi's advice.
Install NoScript on your Firefox browser to stop unwanted websites from running in your browser.
@ kenneth: spybot S&D will edit and block most websites when you install it, but since TS say spybot doesnt work, means its probably not covered under the list of malware yet :(i thought so too, however a search at google showed otherwise.
threads of this occurance were seen as early as jan 17 2007.
spybot S&D should have been updated by now.
thus, I suggested using ad block plus to block that ad.
-
-
-
Originally posted by kenn3th:
i thought so too, however a search at google showed otherwise.
threads of this occurance were seen as early as jan 17 2007.
spybot S&D should have been updated by now.
thus, I suggested using ad block plus to block that ad.
yahoo answers recommended using norton antivirus to clear it. Since you mentioned it was a trojan, I would think that antivirus is better than antispyware
Blocking popups only solves the symptoms, not the root
-
-
-
Originally posted by eagle:
yahoo answers recommended using norton antivirus to clear it. Since you mentioned it was a trojan, I would think that antivirus is better than antispyware
Blocking popups only solves the symptoms, not the root
I agree with you that it blocks the symptoms.
Qoologic can also be known as adware to some anti viruses like McAfee.
since no other funny funny occurances (programmes installed ) are seen except pop ups, it's most probably only a Qoologic hijack case.
blocking it will preventing it from occuring, but it would still be there, thus a hijack log to analyse should be used.
Do note that: There is a rogue anti spyware programme named "Trojan Win32/Qoologic" , thus most solutions online are to remove that rogue anti spyware/anti virus thing.
-
-
-
Originally posted by eagle:
Now that I read a bit more, seems like happened on my dad's desktop before...
The following is a solution is something I got from here
Remove Trojan Win32/Qoologic with SmithfraudFix:
SmithfraudFix is a free tool that S!Ri created to remove fake anti-spyware programs. It can be risky so we cannot guarantee the result. Please use it with reservations. We would never recommend to purchase anything unless it’s necessary. That’s why we produce this free removal process.
1. Download SmithfraudFix tool and save it to your desktop.
2. Restart your computer and boot into Safe Mode. If you don’t know how to start the computer in safe mode, click here to read more.
3. Double-click on the SmithfraudFix.exe icon then follow the screen instructions. Option #2 should be selected in this case.
4. When you are prompted with “Do you want to clean the registry ?”, simply answer “Y”.
5. Reboot.
6. You should have removed Trojan Win32/Qoologic from your computer. Sometimes it might take more than once to work properly. If SmithfraudFix removal tool does not work, which is in no-guarantee due to the nature of spyware, please refer to the manual removal steps above or purchase a legitimate removal tool if necessary.
eagle,
you are giving the wrong solution to the wrong virus.
The solution to this virus is only for computers that are infected with a rouge antispyware, that has a pop up saying " your computer has been infected by Trojan Win32/Qoologic "
it's totally different from the one saying "pls do a survey"
-
