bluekarin Posted January 7, 2009 Share Posted January 7, 2009 (edited) I have somehow managed to get 'something' on my computer. My hubby is in IT and a computer wizz, but he is unsure what to do and so far the only suggestion is to format my computer The problem is as follows When I click on Google (I use Firefox) it comes up in a tab which I'm pretty sure it didn't do before. When I do a search in Google, for BBC say, then click on the first link, it'll send me off somewhere completely different, but if I click the back button and click the link again, it's totally fine. The redirection usually involves ecata.info Today when I started my machine, this came up avgwdsvc.exe application error the instruction at "0x7814742d" referenced memory at "0x008b30000" The memory could not be "read" click ok to terminate click cancel to debug If anyone has any suggestions, I would be most grateful edit ecata not ecato Edited January 7, 2009 by Guest Quote Link to comment Share on other sites More sharing options...
Guest Posted January 7, 2009 Share Posted January 7, 2009 Bad luck! I just hate that happening. Have you googled ecato? That might give you some ideas. I run CCleaner regularly, which might be worth a try, but it sounds as if something has got into your registry and you need someone who knows what should and shouldn't be there to go through it. As it was a AVG error, you could send them those details and see what they say. I have always found them amazingly helpful. Quote Link to comment Share on other sites More sharing options...
clootie Posted January 7, 2009 Share Posted January 7, 2009 FRED! I'm sure he'll be along soon !!! Quote Link to comment Share on other sites More sharing options...
jess Posted January 7, 2009 Share Posted January 7, 2009 Are you running vista? If so, I would go to the start menu and in the search box type RESTORE Then click system restore, it will offer to restore your settings to an earlier date, I had to do this recently and it is perfectly safe x Quote Link to comment Share on other sites More sharing options...
bluekarin Posted January 7, 2009 Author Share Posted January 7, 2009 Nope we don't have Vista; Hubby says its a nightmare. I use Windows XP. I am about to dowload a Rootkit scanner as this thing seems to hide in the root index (sounds like I know what I am talking about, but I don't really ) so we shall see if this sorts it out. Just spoke to hubby and he says that it should sort it. Quote Link to comment Share on other sites More sharing options...
jess Posted January 7, 2009 Share Posted January 7, 2009 well no idea what that is either but it sounds good! hope it works! Quote Link to comment Share on other sites More sharing options...
Leicester_H Posted January 7, 2009 Share Posted January 7, 2009 see http://help.lockergnome.com/general/Google-Hijack-ecata-ftopict56673.html for someone who had same problem and suggested soultion or http://www.techsupportforum.com/security-center/virus-trojan-spyware-help/305963-new-instructions-read-before-posting-malware-removal-help.html or http://www.bleepingcomputer.com/forums/lofiversion/index.php/t191577.html Have a read and see which looks easiest - hope that helps (a little) H Quote Link to comment Share on other sites More sharing options...
bluekarin Posted January 7, 2009 Author Share Posted January 7, 2009 Well, I would make a marvelous IT professional. NOT I did the root scan and nothing has changed. I think I shall wait until OH gets home and get him to sort it out. Thank you all for your help though. If we have any success I shall let you know just in case any of you encounter it. Fingers are crossed you won't. Quote Link to comment Share on other sites More sharing options...
Geoid Posted January 7, 2009 Share Posted January 7, 2009 Have you run a virus scan? Quote Link to comment Share on other sites More sharing options...
bluekarin Posted January 7, 2009 Author Share Posted January 7, 2009 Have you run a virus scan? It caused AVG to fail, so nothing would scan. My OH has now fixed it. The Rootkit I downloaded worked as it found the name of the hidden file - which you could only find if you knew the actual name of it and search for it! They are getting too clever these torjan/virus writers He then had to go into safe mode and delete things from the registry files (don't do this at home kids). And after a shut down and then restart, everything works! AVG did an update, as well as Spybot and Ccleaner. So all looks good. I still have a tab in Firefox when on my homepage, but we think that must be a setting within the browser itself. Quote Link to comment Share on other sites More sharing options...
Guest Posted January 7, 2009 Share Posted January 7, 2009 Good news! Well done. Quote Link to comment Share on other sites More sharing options...
Ain't Nobody Here Posted January 7, 2009 Share Posted January 7, 2009 I've come to this a bit late, but am glad you managed to sort it . We know where to come for advice now . Quote Link to comment Share on other sites More sharing options...
bluekarin Posted January 7, 2009 Author Share Posted January 7, 2009 I've come to this a bit late, but am glad you managed to sort it . We know where to come for advice now . And he only charges £45 an hour plus VAT Quote Link to comment Share on other sites More sharing options...
Ain't Nobody Here Posted January 7, 2009 Share Posted January 7, 2009 I meant you, not him . Quote Link to comment Share on other sites More sharing options...
bluekarin Posted January 7, 2009 Author Share Posted January 7, 2009 lol unfortunatly I would probably give you the wrong advice and completely mess up your machine. I am very good at the using the machine, just not that good at fixing it. Bit like how I am with money really. Very good at spending not so good at earning Quote Link to comment Share on other sites More sharing options...
Geoid Posted January 7, 2009 Share Posted January 7, 2009 I've come to this a bit late, but am glad you managed to sort it . We know where to come for advice now . And he only charges £45 an hour plus VAT I only charge £20 an hour! Quote Link to comment Share on other sites More sharing options...