WEBSEARCH and FORTNIGHT

Discussion in 'adware, spyware & hijack cleaning' started by jerry4dos, May 18, 2004.

Thread Status:
Not open for further replies.
  1. jerry4dos

    jerry4dos Registered Member

    Joined:
    May 17, 2004
    Posts:
    1
    Location:
    Hollywood, CA
    This is my first forum post. I've been chasing strange behavior in a friend's WinXP-Pro machine for two days. Most of the usual Virus/Spyware tools have turned up nothing (AVG, F-PROT, VCleaner, Stinger, CWShredder, Ad-Aware, SptBotS&D).

    (1) TM-HOUSECALL consistently returned "Found and cleaned JS_FORTNIGHT.M" every time it was run. Deleting (well, RENAMING, actually) the "C:\WINDOWS\SYSTEM32\IEHOST.EXE" file seems to have fixed the HOUSECALL problem.

    (2) HIJACKTHIS entries showing WEBSEARCH.COM repeatedly returned -- no matter how many times I removed them with HIJACKTHIS. This seems to have been fixed after I hid (renamed) a folder called "C:\Program Files\WINTOOLS".

    Are these known baddies? I can ZIP and FORWARD them if anyone wants them for analysis.

    Best regards,

    Jerry
     
  2. Unzy

    Unzy Registered Member

    Joined:
    Nov 2, 2003
    Posts:
    1,098
    Location:
    Belgium
Thread Status:
Not open for further replies.