Re: New Home Page, task bar, and history

From: "Lionking 88" <Lionking88@xxxxxxxxxxxxxxxxxxxxxxxxx>

| The other day, I came was searching for mapson the internet for school, and
| suddenly, a very inaproppiate site came up as a pop-up. I quickly x-ed out
| of it, and a moment later, another thing came up. It wasn'tanother site, but
| a virus program that wanted me to scan for viruses. I thought that something
| like that was a virus it-self, so i clicked (and i'm 100% sure of this) inthe
| upper right hand corner, in the red "x," and it went away. But about 5
| minutes later, abox popped up that said "virusbuster virus protection has
| completed installation on you computer." I quickly went to control panel,
| unistalled it, and itold my mom what happened. That there had been an
| inoproppiate site pop-up, and a virus protection software that i had x-ed out
| off had installed itself on my computer. She said just to run a Norton
| Internet Security scan, and delete everything that it found.
|
| Later that day, I came back, and my home page was changed. My regular home
| page is Yahoo, because I have my email address there, but now it said
| http://iewarning.com/ in the address bar, and i can't get rid of it. I can
| get to my mail from searching on google, but not the regular home page. And
| it won't go away.
|
| Just below my address bar, it has another tool bar that says protection bar,
| remove adaware popups, SPAM protection, scan for spyware, and security test.
| I never put that there, and I don't download things off the internet. I
| tried right-clicking, the going down to the bottom where it says "protection
| toolbar" nad a check by it. I click it, and nothing happens. I tried it
| with all the other features on the toolbar, and if it has a check by it, and
| i click it, then it goes away. But not for this one.
|
| The last thing that i have a problem with is the history. Everything of my
| history is cleared off my computer when i click clear history, but one thing.
| It says that i searched "porn videos" on google, which i would NEVER do. I
| don't know who searched that or how it got there, but it won't go away. No
| matter how many times i clear the history, or delete the files, cookies, etc.
| it never goes away.
|
| If anyone can help me with any of these problems, i would really appreciate
| it. Thank you very much for your help.
|
| Lion King 88



Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate section.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click%20counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in your bowser
but your PC will automatically be shutdown. It is suggested that you move the report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.


ALTERNATE:

S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


.

Relevant Pages

  • Re: Personal Firewalls
    ... automatically report abuse to ISP's and to the DShield.org web site. ... BlackICE PC Protection ... malicious activity in both applications and Internet protocols. ... Freedom Personal Firewall ...
    (Security-Basics)
  • Use VBSCRIPT to report the installed version of Office
    ... I know someone out there must have a vbscript that will report what version ... of office is installed on a workstation. ... I have been searching the internet ...
    (microsoft.public.office.misc)
  • Re: People Online
    ... Today almost everybody in the world has access to the internet. ... People online use the internet for many needs such as searching for ... "Usenet Filters - Learn to shut yourself the fuck up!" ... "Those who record history are those who control history." ...
    (alt.2600)
  • Re: Web pages not loading on XP - a virus ?
    ... which should complement your current protection: ... > Start by closing all Internet Explorer and Outlook windows, ... > If removal of any spyware affects your ability to access the internet ... > safer when posting to open forums. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Indecent pics of children and possession
    ... IMO, based on over a decade of Internet use, I would estimate that the ... there *is* child pornography ... If you spent only 1 hour by yourself searching for these ... Are you networking with others who may ...
    (uk.legal)