Re: IE opens on its own with sms rington site

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance


Deleted everything in the Temporary files and practically stripped the whole
pc.
I did a scan in safe mode. No virus found. Did 2 scans with Ad-Aware, got
rid of 36 objects but still one of the website keeps popping up. I even
looked at the registry to see if I could find anything with the URL but
couldn't
I shall carry on with all the advice but the question now is, WHY have
antivirus, Firewall etcetc, if you have to go through all this palaver???
I'm very bluuuuu

"KOrland" <KOrland@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:84DC544D-80E9-4556-9529-9E47D55E4BD6@xxxxxxxxxxxxxxxx
> Another good product is CCleaner.exe - google it. It'll help delete
> temporary
> internet files etc. Great way to clean up. There's also CWShredder too.
> Also, don't forget Microsoft's Anti-spyware software. It's a free download
> and quite a nice little spyware program. Usually though I'll run 3-4
> antispyware applications to make sure that I get rid of as much as
> possible.
> There seems to be very few that catch everything. Sunbelt's CounterSpy is
> a
> good antispyware program but it's not free.
>
> "jb" wrote:
>
>> Thank you !!!
>> I'll give it a go
>> J
>>
>> "Jan Il" <abuse@xxxxxxxxxxxxx> wrote in message
>> news:eCKLSUDRFHA.3544@xxxxxxxxxxxxxxxxxxxxxxx
>> > Hi jb :-)
>> >
>> > You have a hijacker or other malware on your system. Download, install
>> > and run the programs below in Safe Mode with Hidden Files enabled.
>> > This
>> > will remove the nasty you have and any others it may have let in the
>> > back
>> > door. Some malware can replicate itself repeatedly if not removed
>> > properly, so even if you have already run some programs, run them again
>> > according to the information below. Follow all instructions carefully:
>> >
>> > First, Clear the TIF's and empty the recycle bin:
>> > http://www.mvps.org/winhelp2002/delcache.htm
>> >
>> > If so, then do the following:
>> >
>> > WARNING>>>> Backup all documents and files before removing any
>> > spyware!!
>> >
>> > How to properly scan for scumware (read first, if possible)
>> > http://aumha.org/forum/viewtopic.php?t=5878
>> >
>> > Download and install BHODemon from
>> > http://www.definitivesolutions.com/bhodemon.htm
>> > Your problem may be caused by a bad BHO.
>> >
>> > Most importantly, download install and run CWShredder here
>> > http://www.majorgeeks.com/download3019.html
>> > and About Buster, which searches for hidden .dlls that recreate the
>> > malware.
>> > http://www.majorgeeks.com/download4289.html
>> > Then visit these two sites to test for parasites and help basic
>> > cleaning:
>> > On-Line Check
>> > http://aumha.org/a/noads.htm
>> > and
>> > Quick-Fix Protocol.
>> > http://aumha.org/a/quickfix.php
>> > Basically, throw everything here at your "infection".
>> >
>> > Then download, install and immediately update these two programs before
>> > running:
>> >
>> > AdAware SE - Update immediately after installing
>> > http://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button
>> > AdAware Tutorial -
>> > http://www.bleepingcomputer.com/forums/index.php?showtutorial=48
>> > SpyBot S &D - Update immediately after installing
>> > http://www.majorgeeks.com/download2471.html
>> > SpyBot S&D Tutorial -
>> > http://www.bleepingcomputer.com/forums/index.php?showtutorial=43
>> > Microsoft Windows Antispyware Program (Beta)
>> > http://www.microsoft.com/athome/security/spyware/software/default.mspx
>> >
>> > Next, do an Online scan here (if possible) -
>> > http://www.pandasoftware.com/activescan/com/activescan_principal.htm
>> > Make sure that you choose "fix" or "clean".
>> >
>> > Download pocket killbox from
>> > http://www.thespykiller.co.uk/files/killbox.exe
>> > and put it on the desktop where you can find it easily
>> >
>> > Download, install, and run HiJackThis - it is one of the most important
>> > tools to help clean your system of scumware. Follow the instructions
>> > carefully:
>> >
>> > How to download and install HiJackThis: (it does not need to be
>> > updated)
>> > http://www.bleepingcomputer.com/forums/topict309.html
>> >
>> > Please DO NOT post your log to this newsgroup. It is important that
>> > you
>> > go
>> > to one of the HiJackThis Support Forums below and allow the experts
>> > there
>> > to analyze it for youPlease DO NOT post your log to this newsgroup. It
>> > is
>> > important that you go to one of the HiJackThis Support Forums below
>> > and
>> > allow the experts there to analyze it for you.::
>> > AumHa HiJackThis Forum
>> > http://forum.aumha.org/viewforum.php?f=30
>> > or Bleeping Computer Forum
>> > http://www.bleepingcomputer.com/forums/forum22.html
>> > to allow the experts there to evaluate your log and advise you of any
>> > necessary steps to clean your system.
>> > (Note: You will have to Register before posting on these Forums.
>> > Please
>> > follow all posting instructions carefully to avoid having your log
>> > deleted
>> > or ignored.)
>> >
>> > Also, please post a link to the forum where you post your HJT log back
>> > to
>> > this thread so that we can follow your progress there.
>> >
>> > CAUTION!!!!! Before you try to remove spyware using any of the
>> > programs
>> > below, download a copy of LSPFIX from any of the following sites:
>> > http://www.cexx.org/lspfix.htm
>> > http://www.spychecker.com/program/winsockxpfix.html
>> > (if your OS is Win2k or XP) The process of removing certain malware may
>> > kill
>> > your internet connection. If this should occur, this program, LSPFIX,
>> > will
>> > enable you to regain your connection.
>> >
>> > You should also get a copy of WINSOCKXPFIX available at:
>> > http://www.spychecker.com/program/winsockxpfix.html
>> > and
>> > WinsockXP Fix- WinXP
>> > http://www.spychecker.com/program/winsockxpfix.html
>> > with instructions, at
>> > http://www.iup.edu/house/resnet/winfix.shtm
>> > also... From LavaSoft- all versions of Windows-
>> > http://digital-solutions.co.uk/lavasoft/whndnfix.zip
>> > (NOTE: It is reported that in XP SP2, the command netsh winsock reset
>> > will fix this problem without the need for these programs.)
>> > or Winsock Fix Utility
>> > http://www.dfwonline.net/files/WinsockFix.zip
>> >
>> > How to Restart in Safe Mode
>> > http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406
>> >
>> > How to Show Hidden Files
>> > http://snipurl.com/6rl8
>> >
>> > Hope this helps :-)
>> >
>> > Jan :)
>> > MS MVP - IE/OE
>> > Smiles are meant to be shared,
>> > that's why they're so contagious.
>> >
>> > Replies are posted only to the newsgroup for the benefit or other
>> > readers.
>> > How to make a good newsgroup post:
>> > http://www.dts-l.org/goodpost.htm
>> >
>> >
>> >
>> >> Hi.
>> >> Today I have done several virus scans, Anti spy scan, enabled latest
>> >> McAfee firewall, enabled add blocker on my sons pc , yet the internet
>> >> browser keeps suddenly opening up with this ringtone site. and you
>> >> can't
>> >> just click the close x at the top, coz there's also a grey window with
>> >> a
>> >> message and an ok button which I won't touch, I have to click the X
>> >> to
>> >> close and very quickly the X on the browser to get rid of it. Then it
>> >> comes back 15 minutes later.
>> >> Also when going to either Windows Update site or Office update site,
>> >> the
>> >> browser crashes.
>> >> I can't get there through Help & Support either.(OS XP)
>> >> Please help
>> >> J
>> >>
>> >>
>> >
>>
>>
>>


.

Quantcast