IW2F.EXE

[balthus]

i have problems....

this process likes to start itself often....

iw2f.exe

there is no info on it anywhere really...

the symptoms are:

on IE sometimes a page that i am view forwards to a porno page then asks permission for download.

also a smaller window pops up when on or off line the says:

"internet explorer has detected a trojan horse virus, click yes to do free online spyware scan"

of course i say no to everything...but TDS, SpyWare Search and Destroy, and
Ad-Aware have all not found this!!!!


Any know about this process????
balthus
p.s. running winXp sp1

[Jooske]

And what did TDS tell about it, did it indicate any infections with a full system scan?
(during that disable temporary your other av/at scanners and resident protection so TDS has full access to every file to scan it thoroughly)
Also look in this thread 15913 on getting the HijackThis tool and post your HiJackThis log in that forum for expert review as you sound very infected. If you can locate that iw2f.exe thing on your system, please zip it and submit to submit@diamondcs.com.au for further investigation.
Please post back results of your next steps.