Need to request a remote session and advice

Superuser

Re: Need to request a remote session and advice

Hello,

 

Sorry for my reply.

But when F-Secure prompted about current detection (about trojan.html-redirector)?

Does it's just as pop-up during idle for system and by real-time scanning (background).

Or comes as "result of manual scan" (full scan).

Or during use a browser?

 

Anyway... if Quarantine not helpful. Can it's be that else one place have information about "detection"?

I mean -> main user-interface of F-Secure (AV/Computer Security). Settings. Part about manual scan or real-time scanning.. and there will open "History of removal spyware and viruses" (Removal history list). There can be information about ?! this notifications. such as it's can be marked that "mistake" during action.

Such as.. it's anyway should be placed under some of?!?! (if it's not placed under log-report as result of scan).

Also with "pop-up/notification" should be also information about "file" - where is it... and how it called. ?!

 

With current information (where and which file triggered deteection) you can to understand what is it.

It's can be, for example, part of zipped archive. And it's not available to be removed automatically. But you can to do manually.

And it's mean you system can be safe, but just "static" file with "malicious signature". Or something else.

 

If it's happened during browsing.. so.. maybe trouble with page.. which trying to use something as "exploit".

Supporter

Re: Need to request a remote session and advice

Thank you Ukko.  It came up during browsing with Internet Explorer.  It said "failed."  I think Simon's help may have got it, although F Secure identified the virus as "Trojan.HTML.REDIRECTOR.U" and the one I found with Simon's help was called "RRSavings.A"  I am assuming they are the same thing?  Anyhow, that one is cleaned

Advocate

Re: Need to request a remote session and advice

Jack, I see you already received good help but I don't think anyone has informed you about this yet, to ease your mind:

 

"When an F-Secure security product reports anything malicious on your computer it has already detected and stopped it, preventing it from causing any harm to your system or your data. Our security software  will not remove infected files under some circumstances, they will however do no more harm than wasting your disk space and cause additional virus warnings whenever you or a system process is accessing that file."

From: Viruses were found but were not automatically cleaned. What can I do?

 

RRSavings.A is not malware but adware, and is classified as a PUP - Potentially Unwanted Program. It display ads typically not associated with the sites you are visiting.

 

An F-Secure search for "Trojan.HTML.Redirector.U" results in this page: https://www.f-secure.com/v-descs/trojan_js_redirector_i.shtml

Description of what it does: users navigating to a particular website are redirected to a pornographic website

 

If malware is detected in the Temporary Internet files folder F-Secure recommends that you delete all the files in the folder. Because the files are only cached copies, no actual data is lost.

To delete the files in Windows Vista, 7 and 8:

 

  1. Do one of the following:
    • Click Start > Control Panel > Internet Options and, on the General tab under Browsing history, click the Delete... button.
    • Open Internet Explorer and click Tools > Internet Options and, on the General tab under Browsing history, click the Delete... button.
    • Open Internet Explorer and click Safety > Delete Browsing History.
    The Delete Browsing History dialog box opens:

    Delete Browsing History

  2. Select the Temporary Internet files checkbox and click the Delete button to delete the temporary Internet files.

From: Cleaning temporary Internet files in Internet Explorer

 

Even if you don't know where this "virus" file is/was, there's no harm in following the above instructions to clear the cache and browsing history of Internet Explorer.

Highlighted
Supporter

Re: Need to request a remote session and advice

Thank you.  I'm going to assume I'm okay now.  I thank everyone for the advice and assistance.  I tried to look at the F Secure action center feature and it says "All issues have been solved you can continue using your computer normally." 

 

Thank you again for all the research and help

View solution in original post