help!!! my god

[Andy]

this is really hard...
I used:
-norton antivirus (updated)
-Adaware (updated)
-search and destroy (updated)
-spysweeper
-CWShredder (updated)
-disspy

and in my system (xp sp2) are still present malware! Sometimes when i click
a link this malware hijack my browser and send me to a porn page,
otherwise...simply close the browser window...
can You help me?

[Ian JP Kenefick]

On Wed, 06 Apr 2005 23:10:14 GMT, "Andy" <Andy@****spam.spam> wrote:

>this is really hard...
>I used:
>-norton antivirus (updated)
>-Adaware (updated)
>-search and destroy (updated)
>-spysweeper
>-CWShredder (updated)
>-disspy
>
>and in my system (xp sp2) are still present malware! Sometimes when i click
>a link this malware hijack my browser and send me to a porn page,
>otherwise...simply close the browser window...
>can You help me?

Hmmm - why do you suspect you have malware?Does a program report it?
Sysclean_FE might detect it. This program is located at the link in my
profile.

--

Regards,
Ian Kenefick
http://antivirus.ik-cs.com

[Vervynckt's]

how about the microsoft anti-spyware utility?

"Ian JP Kenefick" <ian_kenefick@eircom.net> wrote in message
news:mhr851lljd16sm05dqnn0gppc5psun3944@4ax.com...
> On Wed, 06 Apr 2005 23:10:14 GMT, "Andy" <Andy@****spam.spam> wrote:
>
>>this is really hard...
>>I used:
>>-norton antivirus (updated)
>>-Adaware (updated)
>>-search and destroy (updated)
>>-spysweeper
>>-CWShredder (updated)
>>-disspy
>>
>>and in my system (xp sp2) are still present malware! Sometimes when i
>>click
>>a link this malware hijack my browser and send me to a porn page,
>>otherwise...simply close the browser window...
>>can You help me?
>
> Hmmm - why do you suspect you have malware?Does a program report it?
> Sysclean_FE might detect it. This program is located at the link in my
> profile.
>
> --
>
> Regards,
> Ian Kenefick
> http://antivirus.ik-cs.com

[Ian JP Kenefick]

On Wed, 6 Apr 2005 18:22:13 -0500, "Vervynckt's"
<vervynckts@comcast.net> wrote:

>how about the microsoft anti-spyware utility?

That might do the job but I think is a trojan.startpage or similar.

--

Regards,
Ian Kenefick
http://antivirus.ik-cs.com

[David H. Lipman]

From: "Andy" <Andy@****spam.spam>

| this is really hard...
| I used:
| -norton antivirus (updated)
| -Adaware (updated)
| -search and destroy (updated)
| -spysweeper
| -CWShredder (updated)
| -disspy
|
| and in my system (xp sp2) are still present malware! Sometimes when i click
| a link this malware hijack my browser and send me to a porn page,
| otherwise...simply close the browser window...
| can You help me?
|

What version Ad-aware and what version of SpySweeper ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Lew/+Silat]

If you have a problem, you can go to these forums and sign up
http://help.lockergnome.com/index.php?showforum=50 and click on the
"HIJACKTHIS LOGS" forums. Register and post your problem. An expert will get
to you within a few days to guide you to a clean machine
To post your problem download Hijack this. It is in the list below. The
techs at the forum will guide you to a clean machine.



http://www.javacoolsoftware.com/downloads.html - download and install :
SpywareBlaster and SpywareGuard FREE

http://www.safer-networking.org/index.php?page=download - Download and
install Spybot - Search & Destroy FREE

http://www.spywareinfo.com/~merijn/downloads.html - Download Hijackthis. Put
it in a new folder named "Hijackthis". Put the folder on c drive. This is
important for proper logging of info when you get hijacked. Do not use this
program unless you completely know what you are doing. FREE

http://www.intermute.com/products/cwshredder.html - CWShredder . Download
the standalone version. FREE

http://www.lavasoftusa.com/support/download/ - Download the free version of
Adaware and install. Or pay for the advanced version if you want. FREE

http://www.microsoft.com/athome/secu...e/default.mspx -
Windows AntiSpyware (Beta) FREE

http://www.grisoft.com/us/us_dwnl_free.php - If you don't have an antivirus
program and don't want to pay for one then get AVG . It is free and good.
FREE
http://www.free-av.com/ - another antivirus FREE

http://www.ccleaner.com/ - Crap Cleaner. Windows system cleaner like Window
Washer FREE

If you dont have an antivirus you can do free scans at
Trend Micro - Free online virus Scan
http://housecall.trendmicro.com/
http://housecall.antivirus.com

McAfee Security - FreeScan
http://www.mcafee.com/myapps/mfs/default.asp

Panda ActiveScan - Free online scanner
http://www.pandasoftware.com/actives..._principal.htm

Computer Associates:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

DialogueScience:
http://www.antivir.ru/english/www_av/

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

BitDefender
http://www.bitdefender.com/scan/license.php

Freedom Online scanner
http://www.freedom.net/viruscenter/index.html




All the downloaded programs need updating regularly.



Lew/+Silat

[Andy]

"Ian JP Kenefick" <ian_kenefick@eircom.net> ha scritto nel messaggio
news:mhr851lljd16sm05dqnn0gppc5psun3944@4ax.com...
> On Wed, 06 Apr 2005 23:10:14 GMT, "Andy" <Andy@****spam.spam> wrote:

>
> Hmmm - why do you suspect you have malware?Does a program report it?
> Sysclean_FE might detect it. This program is located at the link in my
> profile.

Last week I needed to test some javscript and others. So I closed pop-killer
and others.
I cleaned my system with adaware and search and destroy. All are in the new
version and updated. I felt something strnage and i used spy sweeper and it
deleted a dialer.
After this the sysem seems clean but sometime when i click on a link the
browser is redirected to a random porn page!
I installed and updated cwshredder and disspy. and BHOdemon I check with
this and again with adaware and the others...but nothing

[CWatters]

"Andy" <andy@****spam.spam> wrote in message
news:Mn55e.1188529$35.43799939@news4.tin.it...

> After this the sysem seems clean but sometime when i click on a link the
> browser is redirected to a random porn page!

Take a look in your hosts file..

C:\WINDOWS\system32\drivers\etc\hosts

Normally contains just one entry...

Example:

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

[Andy]

"CWatters" <colin.watters@pandoraBOX.be> ha scritto nel messaggio
news:Al75e.57503$YP4.4381756@phobos.telenet-ops.be...
>
> "Andy" <andy@****spam.spam> wrote in message
> news:Mn55e.1188529$35.43799939@news4.tin.it...
>
>> After this the sysem seems clean but sometime when i click on a link the
>> browser is redirected to a random porn page!
>
> Take a look in your hosts file..
>
> C:\WINDOWS\system32\drivers\etc\hosts
>
> Normally contains just one entry...
>

I know that file. My was clean. I used sysclean and found me a trojan
"TROJ_SMALL.AFG"
now i hope my system is clean
thanks all

[steves-place www.bigun.serverbox.org]

"Ian JP Kenefick" <ian_kenefick@eircom.net> wrote in message
news:mhr851lljd16sm05dqnn0gppc5psun3944@4ax.com...
> On Wed, 06 Apr 2005 23:10:14 GMT, "Andy" <Andy@****spam.spam> wrote:
>
> >this is really hard...
> >I used:
> >-norton antivirus (updated)
> >-Adaware (updated)
> >-search and destroy (updated)
> >-spysweeper
> >-CWShredder (updated)
> >-disspy
> >
> >and in my system (xp sp2) are still present malware! Sometimes when i
click
> >a link this malware hijack my browser and send me to a porn page,
> >otherwise...simply close the browser window...
> >can You help me?
>
> Hmmm - why do you suspect you have malware?Does a program report it?


maybe because his homepage keeps going back to a pornsite ???

get bullitproff software from www.bigun.serverbox.org/bpssr.exe
use number to register it