 |
|
|
|
|
|
|
|
|
|
|
|
|
Security Alert:
Fix for 'Trojan.Sinkin' virus recently effecting CommonName installer.
Threat Assessment
We have recently been alerted to the Trojan virus called 'Sinkin'. Sinkin is a Trojan Horse that changes the Internet Explorer start and search pages, sends AOL Instant Messenger information to a remote host. Unfortunately another side-effect is that it re-installs the CommonName program after removal. CommonName is not responsible for this virus, and we regret that this virus may cause installation problems. We strongly recommend you remove this virus to uninstall CommonName completely.
To help you remove the 'Sinkin virus' and 'CommonName', we have provided instructions for using 'Hijack This', a program we found that is designed to remove 'Trojan' type viruses. Please note that 'Hijack This' is not a CommonName product. We are in no way affiliated with or responsible for 'Hijack This' software. CommonName suggests using this program because we have found it to be effective with regards to removing Trojan 'Sinkin'. You may prefer to use your own anti-virus software to remove this virus. Please see the Symantec website for further details about 'Sinkin'.
Removal Instructions: If you would like to proceed with 'Hijack This' please follow these instructions:
Stage 1 - Sinkin Removal:
- Please click here to download the program called 'Hijack This'. This program is designed to remove 'Trojan' type viruses. For peace of mind, you may prefer to go to downloads.com to download this software.
- Save the file to disk, Unzip it, and then run the program.
- Once you Have opened 'Hijack This', select 'Scan'. 'Hijack This' will know scan for 'Trojan' type viruses and 'Browser Hijacking software'.
- When the scan has finished you should see a list of potential 'Problem files'. Unfortunately 'Hijack This' can't determine what is potentially harmful and what is merely customized by you. For this reason PLEASE DO NOT DELETE EVERYTHING THAT IS HIGHLIGHTED.
- Go through the list and highlight (Check/Tick) the following files:
- R3 - Default URLSearchHook is missing
- O2 - BHO: (no name) - {000020DD-C72E-4113-AF77-DD56626C6C42} - C:\WINDOWS\twaintec.dll
- O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - C:\WINDOWS\Downloaded Program Files\bridge.dll
- O3 - Toolbar: (no name) - {71ED4FBA-4024-4bbe-91DC-9704C93F453E} - (no file)
- O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\Downloaded Program Files\bridge.dll",Load
- O4 - HKLM\..\Run: [winnet] C:\PROGRA~1\COMMON~2\ADDRES~1\winnet.exe
- O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/12b7b98998357127aa20/netzip/RdxIE601.cab
Don't worry if you can't find all of the above files.
- It's also worth looking through the list for any other files with 'Bridge' or 'CommonName' in the title. If you find any, highlight (Check/Tick) them. Whilst testing we have found that it's generally a good idea to highlight (Check/Tick) any file that you don't recognise (Some of the files my link to programs that you didn't know where on your system).
- Once you have highlighted (Checked/Ticked) the suspect files, select 'Fix Checked' (BEFORE YOU DO THIS PLEASE CLOSE ALL BROWSER WINDOWS)
- When 'Hijack This' has finished fixing the problem files, exit out of the program and then boot your PC into 'Safe Mode'. If you are unsure of how to do this (safe mode), please follow the instructions here http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406.
Stage 2 - Removing CommonName:
- When your PC has booted into safe mode delete the CommonName folder in C:/Program files/.
- Once you have deleted the CommonName folder, please open 'Recycle Bin' ,select 'Empty recycle bin', and then reboot in to normal windows mode.
Going through the first stage of the process above should ensure the correct removal of the 'Sinkin' virus. The 'Safe mode' deletion of the CommonName folder should ensure our software is removed. If you are still experiencing problems, please email us at support@commonname.com.
|
|
|
Simplified Navigation & Search
|
|
|
|
|
|
|
