Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Resolved Question

Trojan infected system

Nov 6, 2014 1:04AM PST

Not sure if these problems are related, but here are the problems I have on my Win 7 system with Norton 360 fully updated. About a month ago I received frequent "High CPU Usage" messages referencing "Google Chrome" or "Host Process For Windows Services". These continue to this day even though I do not have Google Chrome downloaded on my system, and I don't know what "Host Process" is.

Last week I got two Norton 360 messages, "System infected: Trojan.adclicker activity" followed by Trojan.powerlik activity". I ran Norton Power Eraser, but messages came back. I did a review on the web re. these trojans, but am not competent enough to try the one solution that seems to work. I assumed Norton would come up with a solution and automatically download it to my machine, and a few days later I did find a Norton screen on my machine which said to restart the computer to eliminate some problem. I thought this resolved the issue

Yesterday I kept getting popups referencing a "Web Page Error: Do You Want To debug this Web Page" on almost every new page I brought up on the web. There was no identifier of where this error message was coming from so I believed it was a virus designed to get me to download more malware. I Xed out each time it came up. Today I am getting both the popup and the System Infected messages, and my machine has slowed to a crawl.

How deep is the doo doo I am in and is there anything I can do to correct it? I am using someone elses computer for this message so my responses may be slow.

Thanks.

Discussion is locked

oiptoner has chosen the best answer to their question. View answer

Best Answer

- Collapse -
Try Grif's advice here.
Nov 6, 2014 1:11AM PST
- Collapse -
Can't open site
Nov 6, 2014 2:09AM PST

Trying to download from bleepingcomputer but getting "current security settings do not allow file to be downloaded" message. Tried to change Norton security settings, but didn't work. What do I need to do? Thanks.

- Collapse -
Did you try..
Nov 6, 2014 3:43AM PST

When you wrote you 'tried to change Norton security settings', did it mean you tried temporarily disabling Norton? Or did it mean you only tried to change some settings?

It's along the same lines as Bob suggested, or just short of it. In that if you don't want to uninstall Norton (allowing 'the good stuff in'), you might want to try temporarily disabling it. It may be worth a try, IF you haven't done so already.

Best of luck..
Carol

- Collapse -
(NT) I only temporarily disabled security settings
Nov 6, 2014 5:05AM PST
- Collapse -
Wrong security source
Nov 7, 2014 10:59PM PST

Turns out the blocking Security Service was Internet Explorer. I had very tight security settings. Going back to the default settings solved this problem.

- Collapse -
Frequently, You Need To Download Items Using A Clean Comp
Nov 6, 2014 6:15AM PST

Sometimes, the downloads can't be made from the infected computer. Therefore, use a friend or family member's computer to download the cleanup files, then copy them to a flash drive or CD, then transfer them to the problem machine.

Hope this helps.

Grif

- Collapse -
Found trojans and quarantined
Nov 7, 2014 11:23PM PST

Grif's advice worked for most of my problems. I identified five Trojans and 46 cookies (expected) in C: drive plus two additional items which were not associated with any drive. Removed them and they have not come back. Booted and ran last night with only the debugging problem (more later). This morning I got a Norton window which said Restart To Finish Removal Of Security Risk. Not sure why this popped up, but I restarted and so far no problems (except debugger).

I am still getting the unidentified Webpage Error popup. It is a box with Webpage Error at top left and a red X at the top right. Below a horizontal line is the message "Do you want to debug this webpage......." There is then another box identifying a Line with an identified error. This box even pops up when I am on my desktop, and often pops up back to back to back. I have been Xing out each time rather than accept one of the options presented. Occasionally, when typing the word "my", I get a code box popping up which says, at the top, "Trojan-Infected-System-f12 Developer Tools" and below that a program title of DeBugger. Below that is coding for all the identified errors I have seen in the Line box.

What is this, and is it safe or do I need to remove it. Since none of Grif's recommended programs caught this I am guessing it may be part of MS 7.

Plus, big kudos for all the good advice you folks gave me.

- Collapse -
Re: debug
Nov 7, 2014 11:29PM PST

In Internet Explorer>Tools>Internet Options>Advanced there's the option to enable or disable debugging. If you disable it, the popup should be gone. Does that work?

Kees

- Collapse -
Problem solved
Nov 8, 2014 4:16AM PST

You were correct. The debug for IE was disabled, but the debug for "others" was not. Everything seems to be normal now. Thank you.

- Collapse -
In Addition To Kees' Suggestion, Run ALL Scans Again..
Nov 8, 2014 4:01AM PST

Quite often, a second full scan with all the same tools will find and remove more malware. It's worth the time to run the additional scan.

Hope this helps.

Grif

- Collapse -
Answer
Since Norton didn't stop it
Nov 6, 2014 2:12AM PST

And it's stopping you from getting the good stuff, it may be time to uninstall Norton until you can clean it all up.
Bob

- Collapse -
Answer
re-
Nov 10, 2014 5:49PM PST

Some crucial files or registry are possible damaged or infected, consequently, there will be error pop ups. You can try kaspersky free online scan.

- Collapse -
It seems
Nov 10, 2014 6:04PM PST

the problem is solved and the OP is now satisfied with the advice given and followed.

There would appear to be no need for such scans at this time.

Mark