Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Smitfraud.c-888toolbar Infection


  • This topic is locked This topic is locked
8 replies to this topic

#1 simplexify

simplexify

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:34 PM

Posted 23 May 2007 - 04:18 AM

Hi guys,
everything started, when I infected my computer with Smitfraud.C. I then was infected with several more trojans.
To get rid of these I scanned my computer with Avast AntiVirus in the intense mode, Spybot Search&Destroy, Ad-Aware SE Personal and followed the tutorial to get rid of Smitfraud.C using SmitFraudFix.exe ([post="www.bleepingcomputer.com/forums/topic17258.html"]Here![/post]).
Nevertheless, Spybot still shows me that I have the Smitfraud-Toolbar, although Stinger, Ad-Aware and my AntiVirus programd find nothing.
I am sure I still have Smitfraud, because I get popups, which want me to buy AntiVirus products.
Please help me!



Logfile of HijackThis v1.99.1
Scan saved at 11:14:15, on 23.05.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\avast! Antivirus\aswUpdSv.exe
C:\WINDOWS\Explorer.EXE
D:\avast! Antivirus\ashServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
D:\AVAST!~1\ashDisp.exe
C:\Programme\Microsoft IntelliType Pro\itype.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
D:\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HijackThis\HijackThis.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] D:\AVAST!~1\ashDisp.exe
O4 - HKLM\..\Run: [itype] "C:\Programme\Microsoft IntelliType Pro\itype.exe"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{6C3B5EB8-1125-4DD2-ABD0-75C7BDF806C8}: NameServer = 192.168.178.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{6C3B5EB8-1125-4DD2-ABD0-75C7BDF806C8}: NameServer = 192.168.178.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{6C3B5EB8-1125-4DD2-ABD0-75C7BDF806C8}: NameServer = 192.168.178.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\avast! Antivirus\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\avast! Antivirus\ashServ.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe

BC AdBot (Login to Remove)

 


#2 Rosty

Rosty

    Skydive junkie


  • Malware Response Team
  • 1,220 posts
  • OFFLINE
  •  
  • Local time:10:34 PM

Posted 23 May 2007 - 04:32 AM

Hi simplexify,
welcome to BleepingComputer. My name is Rosty and I'm going to help you with your log.

Please download VundoFix.exe
to your desktop.
  • Double-click VundoFix.exe to run it.
  • Click the Scan for Vundo button.
  • Once it's done scanning, click the Remove Vundo button.
  • You will receive a prompt asking if you want to remove the files, click YES
  • Once you click yes, your desktop will go blank as it starts removing Vundo.
  • When completed, it will prompt that it will reboot your computer, click OK.
  • Please post the contents of C:\vundofix.txt and a new HiJackThis log.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above
instructions starting from "Click the Scan for Vundo button." when
VundoFix appears at reboot.

Regards,

Rosty.
Posted Image
Proud member of ASAP since 2007

#3 simplexify

simplexify
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:34 PM

Posted 23 May 2007 - 09:17 AM

Hello Rosty,
first of all, I want to express my appreciation of your work. I wouldn't know what to do without you.
Here are both logs:

VundoFix

VundoFix V6.4.1

Checking Java version...

Sun Java not detected
Scan started at 15:45:54 23.05.2007

Listing files found while scanning....

C:\WINDOWS\system32\awtrssr.dll
C:\WINDOWS\system32\byxvurq.dll
C:\WINDOWS\system32\cvefpdkg.ini
C:\WINDOWS\system32\ddcaayy.dll
C:\WINDOWS\system32\ddcccba.dll
C:\WINDOWS\system32\gkdpfevc.dll
C:\WINDOWS\system32\iovenpuy.ini
C:\WINDOWS\system32\ngprstfp.dll
C:\WINDOWS\system32\ststv.bak1
C:\WINDOWS\system32\ststv.bak2
C:\WINDOWS\system32\ststv.ini
C:\WINDOWS\system32\tuvsttr.dll
C:\WINDOWS\system32\vtsts.dll
C:\WINDOWS\system32\wvuursr.dll
C:\WINDOWS\system32\xxyyaay.dll
C:\WINDOWS\system32\xxyyawu.dll
C:\WINDOWS\system32\yupnevoi.dll

Beginning removal...

Attempting to delete C:\WINDOWS\system32\awtrssr.dll
C:\WINDOWS\system32\awtrssr.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\byxvurq.dll
C:\WINDOWS\system32\byxvurq.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\cvefpdkg.ini
C:\WINDOWS\system32\cvefpdkg.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\ddcaayy.dll
C:\WINDOWS\system32\ddcaayy.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\ddcccba.dll
C:\WINDOWS\system32\ddcccba.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\gkdpfevc.dll
C:\WINDOWS\system32\gkdpfevc.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\iovenpuy.ini
C:\WINDOWS\system32\iovenpuy.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\ststv.bak1
C:\WINDOWS\system32\ststv.bak1 Has been deleted!

Attempting to delete C:\WINDOWS\system32\ststv.bak2
C:\WINDOWS\system32\ststv.bak2 Has been deleted!

Attempting to delete C:\WINDOWS\system32\ststv.ini
C:\WINDOWS\system32\ststv.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\tuvsttr.dll
C:\WINDOWS\system32\tuvsttr.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\vtsts.dll
C:\WINDOWS\system32\vtsts.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\wvuursr.dll
C:\WINDOWS\system32\wvuursr.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\xxyyaay.dll
C:\WINDOWS\system32\xxyyaay.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\yupnevoi.dll
C:\WINDOWS\system32\yupnevoi.dll Has been deleted!

Performing Repairs to the registry.
Done!

Beginning removal...

Attempting to delete C:\WINDOWS\system32\wvuursr.dll
C:\WINDOWS\system32\wvuursr.dll Has been deleted!

Performing Repairs to the registry.
Done!



HiJackThis

Logfile of HijackThis v1.99.1
Scan saved at 16:06:17, on 23.05.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\avast! Antivirus\aswUpdSv.exe
D:\avast! Antivirus\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\RUNDLL32.EXE
D:\AVAST!~1\ashDisp.exe
C:\Programme\Microsoft IntelliType Pro\itype.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\HijackThis\HijackThis.exe

O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {76817D4F-D976-41AE-9518-3D9F98989C6F} - C:\WINDOWS\system32\vtsts.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] D:\AVAST!~1\ashDisp.exe
O4 - HKLM\..\Run: [itype] "C:\Programme\Microsoft IntelliType Pro\itype.exe"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{6C3B5EB8-1125-4DD2-ABD0-75C7BDF806C8}: NameServer = 192.168.178.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{6C3B5EB8-1125-4DD2-ABD0-75C7BDF806C8}: NameServer = 192.168.178.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{6C3B5EB8-1125-4DD2-ABD0-75C7BDF806C8}: NameServer = 192.168.178.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: winzwr32 - C:\WINDOWS\SYSTEM32\winzwr32.dll
O20 - Winlogon Notify: xxyyawu - xxyyawu.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\avast! Antivirus\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\avast! Antivirus\ashServ.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe

#4 Rosty

Rosty

    Skydive junkie


  • Malware Response Team
  • 1,220 posts
  • OFFLINE
  •  
  • Local time:10:34 PM

Posted 23 May 2007 - 09:28 AM

Hi simplefixy,
thanks for the logs.

Download ATF Cleaner.
Do not run it yet, we will shortly.

Open hijackthis and click Open the Misc Tools section

Then click Delete a file on reboot

In the File Name field, copy and paste this:

C:\WINDOWS\SYSTEM32\winzwr32.dll

Then click Open

Hijackthis will tell you that this file will be deleted when the system reboots and ask you if you want to reboot now. Click Yes

Your system should then reboot

When the system reboots run Hijack This and choose Do A System Scan then place a check next to this entries:


O2 - BHO: (no name) - {76817D4F-D976-41AE-9518-3D9F98989C6F} - C:\WINDOWS\system32\vtsts.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O20 - Winlogon Notify: winzwr32 - C:\WINDOWS\SYSTEM32\winzwr32.dll
O20 - Winlogon Notify: xxyyawu - xxyyawu.dll (file missing)

Close all other windows and browsers, except HijackThis, and clck Fix Checked. Close HijackThis.

Now run ATF-Cleaner:
  • Double-click ATF-Cleaner.exe to run the program.
  • Click Select All found at the bottom of the list.
  • Click the Empty Selected button.
If you use Firefox browser, do this also:
  • Click Firefox at the top and choose Select All from the list.
  • Click the Empty Selected button.
  • NOTE : If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser, do this also:
  • Click Opera at the top and choose Select All from the list.
  • Click the Empty Selected button.
  • NOTE : If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.

Please reboot and post a new HijackThis log.

Regards,

Rosty.
Posted Image
Proud member of ASAP since 2007

#5 simplexify

simplexify
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:34 PM

Posted 23 May 2007 - 10:55 AM

Hi Rosty,
you don't have to thank me for anything - I have to thank YOU!
I followed your instructions carefully, but in ATF Cleaner I can't click on "Firefox", which is only in grey colour. But I think it is the same as if I clicked on ->Extras, then ->Delete private data, in Mozilla Firefox. Well, that's what I did.
Anyway, here is the new HijackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 17:44:40, on 23.05.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\avast! Antivirus\aswUpdSv.exe
D:\avast! Antivirus\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\RUNDLL32.EXE
D:\AVAST!~1\ashDisp.exe
C:\Programme\Microsoft IntelliType Pro\itype.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HijackThis\HijackThis.exe

O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] D:\AVAST!~1\ashDisp.exe
O4 - HKLM\..\Run: [itype] "C:\Programme\Microsoft IntelliType Pro\itype.exe"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{6C3B5EB8-1125-4DD2-ABD0-75C7BDF806C8}: NameServer = 192.168.178.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{6C3B5EB8-1125-4DD2-ABD0-75C7BDF806C8}: NameServer = 192.168.178.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{6C3B5EB8-1125-4DD2-ABD0-75C7BDF806C8}: NameServer = 192.168.178.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\avast! Antivirus\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\avast! Antivirus\ashServ.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe

#6 Rosty

Rosty

    Skydive junkie


  • Malware Response Team
  • 1,220 posts
  • OFFLINE
  •  
  • Local time:10:34 PM

Posted 23 May 2007 - 11:19 AM

Hi simplefixy,

this log looks clean to me.
However, I don't see a Firewall present in your log!!

IMPORTANT

It is important that you use a software firewall, to prevent unauthorised traffic both out of and into your computer.
Your log doesn't show a firewall running. If you have disabled it, please re-enable it.
If you do not have a firewall installed, please download and instal these excellent (and free) product: Zone Alarm.

Please let me know how things are running and post a new HijackThis log just to be safe.

Regards,

Rosty.
Posted Image
Proud member of ASAP since 2007

#7 simplexify

simplexify
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:34 PM

Posted 23 May 2007 - 11:54 AM

:thumbsup:

Thank you!

Looks clean to me, too :flowers: Windows works smoothly!
It is true that I don't have a software firewall, but doesn't my router function as a hardware firewall, which is superior to the software layer?
I haven't used a software firewall since one year and never had problems. This was my first real infection and I know I got it through downloading a fake crack.

#8 Rosty

Rosty

    Skydive junkie


  • Malware Response Team
  • 1,220 posts
  • OFFLINE
  •  
  • Local time:10:34 PM

Posted 23 May 2007 - 02:01 PM

Hi simplefixy,its good to hear you don't have any problems.

Disable and Enable System Restore. - You should disable and enable system restore to make sure there are no infected files found in a restore point.

You can find instructions on how to enable and re-enable system restore here:
Windows XP System Restore Guide.

Below I have included a number of recommendations for how to protect your computer in order to prevent future malware infections. Please take these recommendations seriously; these few simple steps can stave off the vast majority of spyware problems. As happy as we at BC are to help you, for your sake we would rather not have repeat customers. :thumbsup:

1) In order to protect yourself against spyware, you should consider installing and running the following free programs:

Ad-Aware SE
A tutorial on using Ad-Aware to remove spyware from your computer may be found here.

SpywareBlaster
A tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found here.

SpywareGuard
A tutorial on using SpywareGuard for realtime protection against spyware and hijackers may be found here.

AVG-AntiSpyware
Install it,update it to the latest definitions, and perform a full system scan.

Make sure to keep these programs up-to-date and to run them regularly, as this can prevent a great deal of spyware hassle.

3) Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in popup blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from here:
http://www.mozilla.org/products/firefox/

4) Also make sure to run your antivirus software regularly, and to keep it up-to-date.


Please also read Tony Klein's excellent article: So how I got Infected in the First Place

Hopefully this should take care of your problems! Good luck. :D (prevention speech by Swandog46)

With friendly regards,

Rosty.

Edited by Rosty, 23 May 2007 - 02:05 PM.

Posted Image
Proud member of ASAP since 2007

#9 Rosty

Rosty

    Skydive junkie


  • Malware Response Team
  • 1,220 posts
  • OFFLINE
  •  
  • Local time:10:34 PM

Posted 02 June 2007 - 04:47 PM

Since this issue appears resolved ... this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team
a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
Posted Image
Proud member of ASAP since 2007




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users