1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Botnet Aftermath

Discussion in 'Malware and Virus Removal Archive' started by virginia, 2012/04/07.

  1. 2012/04/13
    virginia Lifetime Subscription

    virginia Geek Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    1,100
    Likes Received:
    26
    New Problem

    We downloaded WOT and when we open IE it opens to Google as home page. However, when we try to open another tab, WOT pops up and says the website we are trying to go to is bad - and it shows my.freeze.com. I ran Malwarebytes quick scan but it didn't find anything. Any other scan I should run?

    Added Later - I looked in Control Panel and did see the Freeze.com Net Assistant listed but I didn't try to remove it yet. Thought I should wait for instructions from you.
     
    Last edited: 2012/04/13
  2. 2012/04/13
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    It looks like leftovers from some bad add-on.
    I can see it listed in Add\Remove but I don't see it running anymore.
    Open IE, go Tools>Internet options>Advanced tab and click on "Reset" button.
    Restart IE and let me know if the problem is gone.

    No trojans were present.
     

  3. to hide this advert.

  4. 2012/04/13
    virginia Lifetime Subscription

    virginia Geek Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    1,100
    Likes Received:
    26
    Broni,

    We had another update pending - IE9. Didn't realize that one hadn't been installed. We installed it and all is well with the my.freeze issue. However, it is still listed ih the Installed Programs in Control Panel. Would it be OK to uninstall it via Install/Remove programs?
     
  5. 2012/04/13
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    From your logs it looks like an orphaned registry entry.
    It's not active.
    I'd leave it alone.

    If you insist on removing it, create new restore point, open registry editor, navigate to:
    [HKEY_USERS\S-1-5-21-2642140096-936624496-2998941002-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    Delete "NetAssistant 3.8.3" entry.

    Good luck and stay safe :)
     
  6. 2012/04/13
    virginia Lifetime Subscription

    virginia Geek Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    1,100
    Likes Received:
    26
    I'll leave it alone - and thanks again.
     
  7. 2012/04/13
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You're very welcome [​IMG]
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.