I need help, I think i have a virusthat effects IE 5.5

Discussion in 'malware problems & news' started by silverhaze73, Aug 30, 2002.

Thread Status:
Not open for further replies.
  1. silverhaze73

    silverhaze73 Registered Member

    Joined:
    Aug 30, 2002
    Posts:
    4
    Location:
    chicago
    I use windows 2000 professional i seem to have some sort of virus that is effecting IE 5.5. When i run IE and vist any website within 2 min i start getting 10 or more pop up windows and the only way to close them is to use ALT+F4. i have used PC-Cillin and Spybot S&D; but i cant seem to find the problem. if someone can help me that would be great. it seems to redirect my browser when i try to go to Hotmail also.
     
  2. ljc1174

    ljc1174 Registered Member

    Joined:
    Aug 15, 2002
    Posts:
    276
    Location:
    Cleveland, Ohio USA
    I had something similar, it was JS/NOCLOSE

    I used a free online virus scan to delete it. But I'm sure someone here might have more info, it may not even be the same thing as I had. Wilder's had free tools on www.wilders.org. I used TrendMicro, but this was b4 I found out about Wilder's sites.

    good luck!
     
  3. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    1)
    Do you see any unusual programs in your program list?
    Run msconfig, look at your startup tab and look for suspicious programs running at start up.

    2) There could be a program in the background that is generating this pop-ups.

    3) Virus js.exception exploit does this! PC-Cillin is not good with these type of viruses...

    Get better Antivirus Program! My suggestion is KAV, DrWeb or RAV!

    Scan on line with RAV for free! http://www.rav.ro/scan/indexie.php


    Technodorme
     
  4. silverhaze73

    silverhaze73 Registered Member

    Joined:
    Aug 30, 2002
    Posts:
    4
    Location:
    chicago
    for some reason i dont have msconfig on my computer but i'll try one of those other Antivirus Program
    thanks
     
  5. Are you running Win2000 or XP?

    If you want a msconfig solution or utility, checkout this link

    http://www.techadvice.com/win2000/m/msconfig_w2k.htm


    Can you tell me more about the popups??
     
  6. This is another solution to see things actually running on your system and it is free but will not work with WinXP.


    Do yourself a favor and download this tool and you will not have to fool around with CTRL+ALT+DEL any more and you will be able to see everything that is really running on your PC.


    http://www.turboware.com/WhatsHappening.htm


    We are now distributing the Freeware version of What's Happening - A handy utility that displays all of the programs and dll's running on your system (and more). The current version is 1.02. What's Happening is also being distributed on the companion diskette for "Microsoft Windows 2000 Professional Expert Companion," a book to be published this summer by Microsoft Press. The author is Carl Siechert.


    What's Happening is a handy utility that shows all of the programs and dlls running in your computer. It runs on Windows 9x, Windows NT and Windows 2000. Installation is simple -- Unzip it to a directory and run it. Uninstall is just as simple, just delete it. Note that on Windows NT systems, an additional file (Psapi.dll) will be created in the same directory as the exe.

    And, of course, it's contained in a zip file so the paranoid among you can extract it and examine it with your favorite viruis checker. I mean, I don't just download .exe's and run them either.
     
  7. Prince_Serendip

    Prince_Serendip Registered Member

    Joined:
    Apr 8, 2002
    Posts:
    819
    Location:
    Canada
    :) What's that up there^? It's a bird? A plane? No, it's MyNethingyman!!! Faster than a speeding electron, more powerful than a Pentium CPU, can leap tall system towers in a single bound! (Really.)

    Thanks my friend! What an excellent little app! :)
     
  8. i had to use a differnt name because for some reason i cant stay logged in with the netscape 7.0 i just downloaded

    i am using Win 2k
    the windows that come up are:

    Traffic 4 sure
    internetseeker.net
    newtopsites.com
    6 of this one: ABCsearch.com
    2 of this one SearchExplorer
    fastseeker.net
    powersearch tool bar from www.trafficsyndicate.com
    i am trying to scan it with Rav now my other post were from another computer
     
  9. silverhaze73

    silverhaze73 Registered Member

    Joined:
    Aug 30, 2002
    Posts:
    4
    Location:
    chicago
    well i downloaded Whats Happening Now its a really good program but it doesnt let you end the process. I looked up every dll and exe listed in there took over an hour and all of them were supose to be there. Rav anti virus has been going for 2 hours (takes a while to get through MS Visual C++ and the MSDN) but i'd say its about 75% done now well then it has the D: drive ::::sigh ::::: but it only happens with IE both Opera and NetScape work fine. When i open a new window its fine for about 1.5 mins then it starts popping open the windows listed in my the prev. message and trys to download a program called fswinst.exe which i cant find anything about. if you have any ideas let me know
    thanks
    silverhaze73
     
  10. Vampirefo

    Vampirefo Guest

    Download ad-aware this is Spyware, ad-aware will get most of it, if not all.
     
  11. silverhaze73

    silverhaze73 Registered Member

    Joined:
    Aug 30, 2002
    Posts:
    4
    Location:
    chicago
    the adware took care of most of it and RAV virus scan deleted the hb.reg file which was a winreg/startpage trojan accordding to the virus definition on Rav site. thanks to all that have helped, i am grateful

    silverhaze73
     
  12. Vampirefo

    Vampirefo Guest

    I am Glad you got rid of it, Happy Computing.

    Best Regards
    Vampirefo
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.