I came home to visit my family for new years and was basically handed my sister's laptop. "It's being weird." was what I was told. AVG was off and wouldn't start. I couldn't get to AVG or Spybot's site. So I burned a CD with AVG and Spybot on it, installed them, and ran both. Spybot found a couple things, mywebsearch.com popups and trojans, but it cleaned everything it found. AVG found only one trojan, but wouldn't clean it and instead returned an error. I tried going to Trendmicro's Housecall page, same problem, inaccessible. Googling Trendmicro and then clicking the resulting link just gets me redirected to a scam site, same for googling just about any combination of antivirus software keywords or anything to do with viruses.
She had Windows firewall running (Vista Home Premium on the laptop), so I searched the exception list and "tinyproxy" showed up. While a legit program, it's not something my sister would have any reason to have on her laptop, as I don't think looking at Tiger Beat websites require a proxy. So I'm left believing the laptop is infected with backdoor.tinyproxy, as the symptoms I'm finding are pretty much in line with it. But as I can't get to any of the sites that offer removal tools etc, I'm still stuck.
This has all been done in safe mode already too. I'm running AVG for a second time in safe mode for shits and giggles, but still with the same issue. AVG can't update either, it just returns an error.
So, any ideas guys?
Posts
http://www.411-spyware.com/backdoor-tinyproxy