Trojan detected in Airnav forum

[anorak]

I run AVG 2012 and have not had a problem at all with the AirNav site.  (Touch wood)
Dave.

[CoastGuardJon]

Hi all, this is the site I keep getting re-directed to, without me doing anything at all - I don't think this site is corrupt or malicious, but why do I keep getting transferred to it - has anyone else had this site problem or a similar problem please.    I think I may just save everything I need to keep transferred to a DVD (or 2, or 3.....), and completely re-format the HDDs, then re-load Windows from scratch and install NcAfee as first thing on-line.    Any help or suggestions welcome ............

http://replicaguccihq.com/

[RodBearden]

Hi Jon

I'm afraid that this may be a problem that's unique to you, rather than coming from the AirNav site. I was getting the Norton notice of a attack, but that's gone away - haven't seen it for a good few days now.

Rather than reformatting your disks, just do a full scan with a reputable anti-virus program/malware detector and/or Windows Defender. Microsoft Security Essentials is highly recommended and free.

Good luck!

Rod

[Runway 31]

Its good to be wise after the event but get yourself some protection as advised by Rod.

Got to agree with Rod on this I think what you are experiencining Jon is unique to yourself and nothing to do with this site.   The first thing you should do with a new computer is get anti-virus proection before going online.  These products dont just protect against visuses they protect against malware/adware/hijacking such as you are expeiencing.

 There are lots of free malware/adware programs out there, get one or two and do a full scan.  Even doing this can ve hazardous just ensure you are on a reputable website and watch what buttons you press.

Products like  Lavasoft adaware, http://www.lavasoft.com/products/ad_aware_free.php  will provide you with the protection you need and also ensure you keep up to date with the protection offered by Microsoft with their updates.

Alan

[Budgie]

Norton and McAfee have got very resource heavy over the years, so has AVG.
Personally I use Microsoft Security Essentials and Outpost Firewall. I also use Malwarebytes as a backup if anything does get through.
The good thing with Malwarebytes is that it will run in normal, safe mode and from DOS so I would try downloading and run it in Safe Mode, John, before re-formatting the hard drive.
If it finds anything, remove it, reboot back into Safe Mode and run Malwarebytes again as sometimes these things will re-install themselves.

Martin.

[CoastGuardJon]

Hi Rod, Alan and Martin, many thanks to you all, I will try your suggestions before wiping, as I'd lose so much other info - 99% of which is probably total cr*p which I'll never need to access anyway!   I've had Orange's McAfee running for 2 days now but still getting sent to the handbag shop - now what colour matches my eyes? - no, there's nothing quite that bloodshot..................

[FACTflights]

Over the years I've also tried them all.  I can recommend Mirosoft Security Essentials, it works well for me.  I use Microsoft XP Pro.

I also run Spybot now and then.


Had a worm yesterday, removed it with Spybot.  It was W3i.IQ5.fraud.  Don't know where it came from.


John

[Hawkeye]

Hi Jon,

Brimon reported in Reply#17 that like you he was being redirected to another site and it seems that TDSSKiller cured his problem.

Obviously good advice from Rod, Alan and Martin re protection,  but  ……….
In my case the trojans etc reappeared several times when revisiting this site even though they were found and removed by over half a dozen other malware and antivirus programmes the guy I mentioned in my last posting carries around on a memory stick in relation to his job. Even MS Defender Offline which runs from a bootup disc didn’t stop ‘em coming back after detection and removal.  As I said, he told me this situation can only be resolved by eliminating them at their source. Presumably, if it wasn't, the same situation would occur even after a Windows reinstall

It would seem that  the general problem has now been resolved but a response from AND to my last posting could perhaps reassure us that this is the case.

Good luck,
Syd

[CoastGuardJon]

Hi John and Syd, many thanks for the comments, will have a look at MSE.