this web site safe?

[Guest shah]

Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend under

'IE Antivirus 3.3' and gave numerous results and under its 9th item quote

'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE Antivirus

3-3-a.html

 

May I know if this website is safe? Anyone been to this site...?. Appreciate

if you can advice, as scared stiff trying to go sone unfamiliar sites.

.......thanks

[Guest AlmostBob]

Re: this web site safe?

 

EVERYTHING that 'pop up'-s on your computer on its own is bad,

malware typically behaves in this fashion,

a small almost innocuous piece of software that tries to trick you into

installing a worse one

begin with adaware or spybot and a full scan with a reliable AV

 

--

Adaware http://www.lavasoft.de

spybot http://www.safer-networking.org

AVG free antivirus http://www.grisoft.com

Etrust/Vet/CA.online Antivirus scan

http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/

Catalog of removal tools (1)

http://www.pandasoftware.com/download/utilities/

Catalog of removal tools (2)

http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?CID=40387

Blocking Unwanted Parasites with a Hosts file

http://mvps.org/winhelp2002/hosts.htm

links provided as a courtesy, read all instructions on the pages before use

 

Grateful thanks to the authors and webmasters

_

 

 

"shah" <shah@discussions.microsoft.com> wrote in message

news:BE0F100C-D732-4C11-B3BD-046CD05CED92@microsoft.com...

> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend

> under

> 'IE Antivirus 3.3' and gave numerous results and under its 9th item quote

> 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE

> Antivirus

> 3-3-a.html

>

> May I know if this website is safe? Anyone been to this site...?.

> Appreciate

> if you can advice, as scared stiff trying to go sone unfamiliar sites.

> ......thanks

[Guest Still learning]

Re: this web site safe?

 

http://forums.techguy.org...that website I've been to before. They *help*

you get rid of spyware and malware. It sounds like they have a solution to

that problem.

 

"shah" <shah@discussions.microsoft.com> wrote in message

news:BE0F100C-D732-4C11-B3BD-046CD05CED92@microsoft.com...

> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend

> under

> 'IE Antivirus 3.3' and gave numerous results and under its 9th item quote

> 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE

> Antivirus

> 3-3-a.html

>

> May I know if this website is safe? Anyone been to this site...?.

> Appreciate

> if you can advice, as scared stiff trying to go sone unfamiliar sites.

> ......thanks

[Guest shah]

Re: this web site safe?

 

Many thanks and at the moment, I am scanning using Adaware 2007, Spybot 1.52.

I have AVG 8.0 in my other pc but somehow its seems to take up a lot of the

cpu resources. So not keen to install on this infected pc.

Reading from the google result, it appears the pc in question been Hjacked?

So I was wondering if the site I mentioned is it safe to click and see how

they resolve the issue as I don't want to create another problem(infected)

for this pc. Thanks

 

 

"AlmostBob" wrote:

> EVERYTHING that 'pop up'-s on your computer on its own is bad,

> malware typically behaves in this fashion,

> a small almost innocuous piece of software that tries to trick you into

> installing a worse one

> begin with adaware or spybot and a full scan with a reliable AV

>

> --

> Adaware http://www.lavasoft.de

> spybot http://www.safer-networking.org

> AVG free antivirus http://www.grisoft.com

> Etrust/Vet/CA.online Antivirus scan

> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

> Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/

> Catalog of removal tools (1)

> http://www.pandasoftware.com/download/utilities/

> Catalog of removal tools (2)

> http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?CID=40387

> Blocking Unwanted Parasites with a Hosts file

> http://mvps.org/winhelp2002/hosts.htm

> links provided as a courtesy, read all instructions on the pages before use

>

> Grateful thanks to the authors and webmasters

> _

>

>

> "shah" <shah@discussions.microsoft.com> wrote in message

> news:BE0F100C-D732-4C11-B3BD-046CD05CED92@microsoft.com...

> > Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend

> > under

> > 'IE Antivirus 3.3' and gave numerous results and under its 9th item quote

> > 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

> > 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE

> > Antivirus

> > 3-3-a.html

> >

> > May I know if this website is safe? Anyone been to this site...?.

> > Appreciate

> > if you can advice, as scared stiff trying to go sone unfamiliar sites.

> > ......thanks

>

>

[Guest Malke]

Re: this web site safe?

 

shah wrote:

> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend

> under 'IE Antivirus 3.3' and gave numerous results and under its 9th item

> quote 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE

> Antivirus 3-3-a.html

>

> May I know if this website is safe? Anyone been to this site...?.

> Appreciate if you can advice, as scared stiff trying to go sone unfamiliar

> sites. ......thanks

 

No. Your computer is infected with the IE Antivirus malware and probably

lots of other malware besides. You need to clean it up.

 

http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

Find the IE Antivirus removal steps here:

 

Bleeping Computer removal how-to's -

http://www.bleepingcomputer.com/forums/forum55.html

 

If you can't find it or need further help, register at Bleeping Computer or

one of the other specialty forums listed below in no particular order. Read

its posting FAQ and post whatever log they require. PLEASE DO NOT POST LOGS

IN THE MS NEWSGROUPS.

 

http://aumha.net/ - Click on the HijackThis forum. Read the announcement and

the stickies *first*.

http://www.atribune.org/forums/index.php?showforum=9

http://aumha.net/viewforum.php?f=30

http://www.dslreports.com/forum/cleanup

http://www.cybertechhelp.com/forums/forumdisplay.php?f=25

http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html

http://gladiator-antivirus.com/forum/index.php?showforum=170

http://spywarewarrior.com/viewforum.php?f=5

http://forums.techguy.org/54-security/

http://forums.tomcoyote.org/

 

If you can't do the work yourself (and there is no shame in admitting this

isn't your cup of tea), take the machine to a professional computer repair

shop (not your local equivalent of BigComputerStore/GeekSquad). Please be

aware that not all local shops are skilled at removing malware and even if

they are, your computer may be so infested that Windows will need to be

clean-installed. If possible, have all your data backed up before you take

the machine into a shop.

 

Malke

--

MS-MVP

Elephant Boy Computers - Don't Panic!

FAQ - http://www.elephantboycomputers.com/#FAQ

[Guest Still learning]

Re: this web site safe?

 

Go here: http://www.superantispyware.com/ download FREE version...it will

rid your system of a lot of nasty malware.

 

"shah" <shah@discussions.microsoft.com> wrote in message

news:27C604F0-3631-4BCA-B6FE-C7D974840EF9@microsoft.com...

> Many thanks and at the moment, I am scanning using Adaware 2007, Spybot

> 1.52.

> I have AVG 8.0 in my other pc but somehow its seems to take up a lot of

> the

> cpu resources. So not keen to install on this infected pc.

> Reading from the google result, it appears the pc in question been

> Hjacked?

> So I was wondering if the site I mentioned is it safe to click and see how

> they resolve the issue as I don't want to create another problem(infected)

> for this pc. Thanks

>

>

> "AlmostBob" wrote:

>

>> EVERYTHING that 'pop up'-s on your computer on its own is bad,

>> malware typically behaves in this fashion,

>> a small almost innocuous piece of software that tries to trick you into

>> installing a worse one

>> begin with adaware or spybot and a full scan with a reliable AV

>>

>> --

>> Adaware http://www.lavasoft.de

>> spybot http://www.safer-networking.org

>> AVG free antivirus http://www.grisoft.com

>> Etrust/Vet/CA.online Antivirus scan

>> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

>> Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/

>> Catalog of removal tools (1)

>> http://www.pandasoftware.com/download/utilities/

>> Catalog of removal tools (2)

>> http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?CID=40387

>> Blocking Unwanted Parasites with a Hosts file

>> http://mvps.org/winhelp2002/hosts.htm

>> links provided as a courtesy, read all instructions on the pages before

>> use

>>

>> Grateful thanks to the authors and webmasters

>> _

>>

>>

>> "shah" <shah@discussions.microsoft.com> wrote in message

>> news:BE0F100C-D732-4C11-B3BD-046CD05CED92@microsoft.com...

>> > Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend

>> > under

>> > 'IE Antivirus 3.3' and gave numerous results and under its 9th item

>> > quote

>> > 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

>> > 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE

>> > Antivirus

>> > 3-3-a.html

>> >

>> > May I know if this website is safe? Anyone been to this site...?.

>> > Appreciate

>> > if you can advice, as scared stiff trying to go sone unfamiliar sites.

>> > ......thanks

>>

>>

[Guest Still learning]

Re: this web site safe?

 

 

"Malke" <malke@invalid.invalid> wrote in message

news:%23DHBIUe3IHA.5112@TK2MSFTNGP03.phx.gbl...

> shah wrote:

>

>> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend

>> under 'IE Antivirus 3.3' and gave numerous results and under its 9th item

>> quote 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

>> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE

>> Antivirus 3-3-a.html

>>

>> May I know if this website is safe? Anyone been to this site...?.

>> Appreciate if you can advice, as scared stiff trying to go sone

>> unfamiliar

>> sites. ......thanks

>

> No. Your computer is infected with the IE Antivirus malware and probably

> lots of other malware besides. You need to clean it up.

 

I've been to that site before and got help with malware.

 

(snipped)

[Guest Daave]

Re: this web site safe?

 

"Still learning" <notrealaddy@rukidding.com> wrote in message

news:euOxkWe3IHA.3576@TK2MSFTNGP06.phx.gbl...

>

> "Malke" <malke@invalid.invalid> wrote in message

> news:%23DHBIUe3IHA.5112@TK2MSFTNGP03.phx.gbl...

>> shah wrote:

>>

>>> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my

>>> friend

>>> under 'IE Antivirus 3.3' and gave numerous results and under its 9th

>>> item

>>> quote 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

>>> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE

>>> Antivirus 3-3-a.html

>>>

>>> May I know if this website is safe? Anyone been to this site...?.

>>> Appreciate if you can advice, as scared stiff trying to go sone

>>> unfamiliar

>>> sites. ......thanks

>>

>> No. Your computer is infected with the IE Antivirus malware and

>> probably

>> lots of other malware besides. You need to clean it up.

>

> I've been to that site before and got help with malware.

 

Agreed. The forums at http://forums.techguy.org/ are very helpful and

recommended for cleaning up the OP's infection. Perhaps Malke didn't

read shah's entire post and thought she asked if it was okay to download

and install IE ANTIVIRUS 3.3.

[Guest shah]

Re: this web site safe?

 

Many thanks for the responses. I have just started the SuperAntispyware scan

(hope I am not choking the pc as the other scans are still running). I am now

more assure that the forums.techguy.org is safe to peep. Will post the HJ log

to the appropriate forum, thanks

 

"Daave" wrote:

> "Still learning" <notrealaddy@rukidding.com> wrote in message

> news:euOxkWe3IHA.3576@TK2MSFTNGP06.phx.gbl...

> >

> > "Malke" <malke@invalid.invalid> wrote in message

> > news:%23DHBIUe3IHA.5112@TK2MSFTNGP03.phx.gbl...

> >> shah wrote:

> >>

> >>> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my

> >>> friend

> >>> under 'IE Antivirus 3.3' and gave numerous results and under its 9th

> >>> item

> >>> quote 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

> >>> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE

> >>> Antivirus 3-3-a.html

> >>>

> >>> May I know if this website is safe? Anyone been to this site...?.

> >>> Appreciate if you can advice, as scared stiff trying to go sone

> >>> unfamiliar

> >>> sites. ......thanks

> >>

> >> No. Your computer is infected with the IE Antivirus malware and

> >> probably

> >> lots of other malware besides. You need to clean it up.

> >

> > I've been to that site before and got help with malware.

>

> Agreed. The forums at http://forums.techguy.org/ are very helpful and

> recommended for cleaning up the OP's infection. Perhaps Malke didn't

> read shah's entire post and thought she asked if it was okay to download

> and install IE ANTIVIRUS 3.3.

>

>

>

[Guest nass]

RE: this web site safe?

 

 

 

"shah" wrote:

> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend under

> 'IE Antivirus 3.3' and gave numerous results and under its 9th item quote

> 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE Antivirus

> 3-3-a.html

>

> May I know if this website is safe? Anyone been to this site...?. Appreciate

> if you can advice, as scared stiff trying to go sone unfamiliar sites.

> ......thanks

 

 

Your computer been hijacked and you need to perform a thorough scan for both

malware and viruses.

Yoy may have Zalop or Vundo variants on your machine.

 

BTW the techguy website is safe and will help you to clean up your machine

and guide step-by-step to solve it.

 

Go through these Cleaning steps:

1... Click start >> Control Panel >> Double Click Network and Internet

Connections >> Double click Internet Options, on the IE Properties window

you will see these Options:

General | Security | Privacy | Content | Connections | Programs

| Advanced .

 

Click on General Tab (1st Tab on the left) and you will see a Button called

[ Clear History ..] click on it to clear your History caches, then click on

[Delete Files..] to delete Internet Files created over the time, click on [

Delete Cookies...] to delete your cookies left by visiting websites.

 

Then click on Advanced tab and scroll down to under the Browsing Option:

[&] Browsing

[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.

= Then try to Disable the Add-Ons on your Browser somehow installed on your

browser, On how to disable the Add-ons follow this:

Click on Programs Tab and then click the Manage Add-Ons Button there Disable

the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one

later and see which is the culprit .

How to manage Add-Ons:

http://support.microsoft.com/kb/883256

Scan for malware from here:

 

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah

http://onecare.live.com/standard/en-gb/default.htm

RootkitRevealer v1.71

By Bryce Cogswell and Mark Russinovich

http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

 

Run a scan from here on-line:

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Download Avast Cleaner (off-line scanner) from here:

http://www.avast.com/eng/avast-virus-cleaner.html

 

Lots of tools to download and disinfect your machine (off-line scanner):

http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

 

You may have a bad RAM try to test your RAM by running Memory test by

downloading this tool and unzip it and make a floppy or CD/DVD and run it on

Reboot.

http://oca.microsoft.com/en/windiag.asp.

 

Download the Hijackthis and send the report to one of

many

forums for analysis and troubleshooting:

When all else fails, HijackThis v2.0.2

(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is

the preferred tool to use.

It will help you to both identify and remove any hijackware/spyware. Post

your log to:

http://www.spywareinfo.com/

http://aumha.net/viewforum.php?f=30,

http://castlecops.com/forum67.html,

http://forums.subratam.org/index.php?showforum=7

http://www.bleepingcomputer.com/tutorials/tutorial42.html

http://www.bleepingcomputer.com/forums/

Or other appropriate

forums for expert analysis, not here.

Let us know your progress.

nass

----

http://www.nasstec.co.uk

[Guest AlmostBob]

Re: this web site safe?

 

hijackthis is a repair tool. it creates a log of what is loading and when,

you post the log to a forum similar to this one (the one in the google

answer was at techguys.org) for hijackthis gurus to explain what is wrong

and how to fix it.

some hijackthis gurus are also msMVPs

That the program appears in a hijackthis forum as 'solved' suggests it is

malware.

AVG8 may use resources dunno I have 7.5 on win98 win98se winme and 8.0 on XP

and Vista boxes, (never throw anything away till it dies) and never notice

any slowdown

- that malware which you have may cause more 'interesting' effects than just

popups,

which do you prefer,

slightly slowed,

or dead.

 

 

--

Adaware http://www.lavasoft.de

spybot http://www.safer-networking.org

AVG free antivirus http://www.grisoft.com

Etrust/Vet/CA.online Antivirus scan

http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/

Catalog of removal tools (1)

http://www.pandasoftware.com/download/utilities/

Catalog of removal tools (2)

http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?CID=40387

Blocking Unwanted Parasites with a Hosts file

http://mvps.org/winhelp2002/hosts.htm

links provided as a courtesy, read all instructions on the pages before use

 

Grateful thanks to the authors and webmasters

_

 

 

"shah" <shah@discussions.microsoft.com> wrote in message

news:27C604F0-3631-4BCA-B6FE-C7D974840EF9@microsoft.com...

> Many thanks and at the moment, I am scanning using Adaware 2007, Spybot

> 1.52.

> I have AVG 8.0 in my other pc but somehow its seems to take up a lot of

> the

> cpu resources. So not keen to install on this infected pc.

> Reading from the google result, it appears the pc in question been

> Hjacked?

> So I was wondering if the site I mentioned is it safe to click and see how

> they resolve the issue as I don't want to create another problem(infected)

> for this pc. Thanks

>

>

> "AlmostBob" wrote:

>

>> EVERYTHING that 'pop up'-s on your computer on its own is bad,

>> malware typically behaves in this fashion,

>> a small almost innocuous piece of software that tries to trick you into

>> installing a worse one

>> begin with adaware or spybot and a full scan with a reliable AV

>>

>>

>> "shah" <shah@discussions.microsoft.com> wrote in message

>> news:BE0F100C-D732-4C11-B3BD-046CD05CED92@microsoft.com...

>> > Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend

>> > under

>> > 'IE Antivirus 3.3' and gave numerous results and under its 9th item

>> > quote

>> > 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

>> > 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE

>> > Antivirus

>> > 3-3-a.html

>> >

>> > May I know if this website is safe? Anyone been to this site...?.

>> > Appreciate

>> > if you can advice, as scared stiff trying to go sone unfamiliar sites.

>> > ......thanks

>>

>>

[Guest shah]

RE: this web site safe?

 

Many thanks and went through the various scanners and manage to get rid of

tons of trojan etc and back to working condition.

 

"nass" wrote:

>

>

> "shah" wrote:

>

> > Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend under

> > 'IE Antivirus 3.3' and gave numerous results and under its 9th item quote

> > 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

> > 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE Antivirus

> > 3-3-a.html

> >

> > May I know if this website is safe? Anyone been to this site...?. Appreciate

> > if you can advice, as scared stiff trying to go sone unfamiliar sites.

> > ......thanks

>

>

> Your computer been hijacked and you need to perform a thorough scan for both

> malware and viruses.

> Yoy may have Zalop or Vundo variants on your machine.

>

> BTW the techguy website is safe and will help you to clean up your machine

> and guide step-by-step to solve it.

>

> Go through these Cleaning steps:

> 1... Click start >> Control Panel >> Double Click Network and Internet

> Connections >> Double click Internet Options, on the IE Properties window

> you will see these Options:

> General | Security | Privacy | Content | Connections | Programs

> | Advanced .

>

> Click on General Tab (1st Tab on the left) and you will see a Button called

> [ Clear History ..] click on it to clear your History caches, then click on

> [Delete Files..] to delete Internet Files created over the time, click on [

> Delete Cookies...] to delete your cookies left by visiting websites.

>

> Then click on Advanced tab and scroll down to under the Browsing Option:

> [&] Browsing

> [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.

> = Then try to Disable the Add-Ons on your Browser somehow installed on your

> browser, On how to disable the Add-ons follow this:

> Click on Programs Tab and then click the Manage Add-Ons Button there Disable

> the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one

> later and see which is the culprit .

> How to manage Add-Ons:

> http://support.microsoft.com/kb/883256

> Scan for malware from here:

>

> http://onecare.live.com/site/en-gb/default.htm?s_cid=sah

> http://onecare.live.com/standard/en-gb/default.htm

> RootkitRevealer v1.71

> By Bryce Cogswell and Mark Russinovich

> http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

>

> Run a scan from here on-line:

> http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

> Download Avast Cleaner (off-line scanner) from here:

> http://www.avast.com/eng/avast-virus-cleaner.html

>

> Lots of tools to download and disinfect your machine (off-line scanner):

> http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

>

> You may have a bad RAM try to test your RAM by running Memory test by

> downloading this tool and unzip it and make a floppy or CD/DVD and run it on

> Reboot.

> http://oca.microsoft.com/en/windiag.asp.

>

> Download the Hijackthis and send the report to one of

> many

> forums for analysis and troubleshooting:

> When all else fails, HijackThis v2.0.2

> (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is

> the preferred tool to use.

> It will help you to both identify and remove any hijackware/spyware. Post

> your log to:

> http://www.spywareinfo.com/

> http://aumha.net/viewforum.php?f=30,

> http://castlecops.com/forum67.html,

> http://forums.subratam.org/index.php?showforum=7

> http://www.bleepingcomputer.com/tutorials/tutorial42.html

> http://www.bleepingcomputer.com/forums/

> Or other appropriate

> forums for expert analysis, not here.

> Let us know your progress.

> nass

> ----

> http://www.nasstec.co.uk

>

>

[Guest Ken Blake, MVP]

Re: this web site safe?

 

On Sat, 5 Jul 2008 08:01:01 -0700, shah

<shah@discussions.microsoft.com> wrote:

> Many thanks and went through the various scanners and manage to get rid of

> tons of trojan etc and back to working condition.

 

 

 

You say "tons of trojans." If you really had many infections, there's

a pretty good change you are still infected. On a system with multiple

infections, the best course is always to reformat and reinstall

Windows. Anything less is likely to be only a partial fix.

 

> "nass" wrote:

>

> >

> >

> > "shah" wrote:

> >

> > > Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend under

> > > 'IE Antivirus 3.3' and gave numerous results and under its 9th item quote

> > > 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as

> > > 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE Antivirus

> > > 3-3-a.html

> > >

> > > May I know if this website is safe? Anyone been to this site...?. Appreciate

> > > if you can advice, as scared stiff trying to go sone unfamiliar sites.

> > > ......thanks

> >

> >

> > Your computer been hijacked and you need to perform a thorough scan for both

> > malware and viruses.

> > Yoy may have Zalop or Vundo variants on your machine.

> >

> > BTW the techguy website is safe and will help you to clean up your machine

> > and guide step-by-step to solve it.

> >

> > Go through these Cleaning steps:

> > 1... Click start >> Control Panel >> Double Click Network and Internet

> > Connections >> Double click Internet Options, on the IE Properties window

> > you will see these Options:

> > General | Security | Privacy | Content | Connections | Programs

> > | Advanced .

> >

> > Click on General Tab (1st Tab on the left) and you will see a Button called

> > [ Clear History ..] click on it to clear your History caches, then click on

> > [Delete Files..] to delete Internet Files created over the time, click on [

> > Delete Cookies...] to delete your cookies left by visiting websites.

> >

> > Then click on Advanced tab and scroll down to under the Browsing Option:

> > [&] Browsing

> > [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.

> > = Then try to Disable the Add-Ons on your Browser somehow installed on your

> > browser, On how to disable the Add-ons follow this:

> > Click on Programs Tab and then click the Manage Add-Ons Button there Disable

> > the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one

> > later and see which is the culprit .

> > How to manage Add-Ons:

> > http://support.microsoft.com/kb/883256

> > Scan for malware from here:

> >

> > http://onecare.live.com/site/en-gb/default.htm?s_cid=sah

> > http://onecare.live.com/standard/en-gb/default.htm

> > RootkitRevealer v1.71

> > By Bryce Cogswell and Mark Russinovich

> > http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

> >

> > Run a scan from here on-line:

> > http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

> > http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

> > Download Avast Cleaner (off-line scanner) from here:

> > http://www.avast.com/eng/avast-virus-cleaner.html

> >

> > Lots of tools to download and disinfect your machine (off-line scanner):

> > http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

> >

> > You may have a bad RAM try to test your RAM by running Memory test by

> > downloading this tool and unzip it and make a floppy or CD/DVD and run it on

> > Reboot.

> > http://oca.microsoft.com/en/windiag.asp.

> >

> > Download the Hijackthis and send the report to one of

> > many

> > forums for analysis and troubleshooting:

> > When all else fails, HijackThis v2.0.2

> > (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is

> > the preferred tool to use.

> > It will help you to both identify and remove any hijackware/spyware. Post

> > your log to:

> > http://www.spywareinfo.com/

> > http://aumha.net/viewforum.php?f=30,

> > http://castlecops.com/forum67.html,

> > http://forums.subratam.org/index.php?showforum=7

> > http://www.bleepingcomputer.com/tutorials/tutorial42.html

> > http://www.bleepingcomputer.com/forums/

> > Or other appropriate

> > forums for expert analysis, not here.

> > Let us know your progress.

> > nass

> > ----

> > http://www.nasstec.co.uk

> >

> >

 

--

Ken Blake, Microsoft MVP - Windows Desktop Experience

Please Reply to the Newsgroup