Please help with Spyware / Malware

[bfrench]

Hi, Folks,

I'm running Windows 2000 along with a current and updated Norton Anti-Virus,
updated SpyBot, updated Ad-Aware plus a hardware firewall - a Linksys Broadband Firewall Router.

Today I downloaded a DVD BackUp program and installed a copy of Nero 7.0 from a friend of mine and have wound up getting some kind of spyware / malware that takes control of the home page for Windows IE and shows this paragraph below along with two porno pics.

Here is the paragraph

Spyware Detected
eTrust Spyware Remover has detected "Porn_w32" spyware on your computer. "Porn_w32" is the latest spyware not detected by any antivirus or anti-spyware software. Your computer was infected when someone using this system was browsing adult content related websites. "Porn_w32" spyware takes your personal data (documents, emails, banking passwords) and sends your sensitive information to remote attackers. These pictures were found on your computer.

Click Here to download eTrust Spyware Remover, remove sexual content and clean up your computer from spyware.

I've tried everything including sample and trial spyware / malware programs to get rid of this.

Is there anything I can do to discover where this came from and please, please how do I get rid of it short of fromating the hard drive.

I'm not even averse to formatting the drive but will never know how to handle this if it ever arises again.

Many thanks,

Bill French

[PhilliePhan]

Is there anything I can do to discover where this came from and please, please how do I get rid of it short of fromating the hard drive.
I'm not even averse to formatting the drive but will never know how to handle this if it ever arises again.

Hi Bill,

Before we can do anything, we'll need to have a closer look. To that end, please do the following:

-- Please submit a HijackThis Log as per the instructions in the link below:

ATTENTION: Read Me Before Posting For Help!!

-- Please go to this link and follow the instructions to scan with WinPFind by OldTimer


Submit both logs and we'll go from there.

Best Luck
PP

[bfrench]

Hi Bill,

Before we can do anything, we'll need to have a closer look. To that end, please do the following:

Submit both logs and we'll go from there.

Best Luck
PP

Hi, PP,

First I have to apologize for being so dumb as to not read the FAQ.

I ran all the spyware as you suggested and after working at it all day Friday I finally got the system cleaned out including erasing the web site from the default setting in the registry.

I'm still amazed as to how powerful some of this spyware / malware is.

Again thanks for the help and most of all for the pointer to read the FAQ.

Happy New Year.

Bill French

[PhilliePhan]

First I have to apologize for being so dumb as to not read the FAQ.

LOL! No worries! A lot of people miss it

Actually, all I really wanted you to do was to give me a HJT Log and a WinPFind Log. I can tell a lot from those and determine the best way to proceed - I just posted the linky because it includes instructions for the proper installation of HijackThis.

Glad to were able to sort it all out on your own! If you would still like to submit those two logs I requested, I'd be happy to double-check them for you.

Happy New Year
PP