this web site safe?

Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend under
'IE Antivirus 3.3' and gave numerous results and under its 9th item quote
'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE Antivirus
3-3-a.html

May I know if this website is safe? Anyone been to this site...?. Appreciate
if you can advice, as scared stiff trying to go sone unfamiliar sites.
......thanks

AlmostBob
Fri Jul 04 07:28:09 PDT 2008

EVERYTHING that 'pop up'-s on your computer on its own is bad,
malware typically behaves in this fashion,
a small almost innocuous piece of software that tries to trick you into
installing a worse one
begin with adaware or spybot and a full scan with a reliable AV

--
Adaware http://www.lavasoft.de
spybot http://www.safer-networking.org
AVG free antivirus http://www.grisoft.com
Etrust/Vet/CA.online Antivirus scan
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/
Catalog of removal tools (1)
http://www.pandasoftware.com/download/utilities/
Catalog of removal tools (2)
http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?CID=40387
Blocking Unwanted Parasites with a Hosts file
http://mvps.org/winhelp2002/hosts.htm
links provided as a courtesy, read all instructions on the pages before use

Grateful thanks to the authors and webmasters
_


"shah" <shah@discussions.microsoft.com> wrote in message
news:BE0F100C-D732-4C11-B3BD-046CD05CED92@microsoft.com...
> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend
> under
> 'IE Antivirus 3.3' and gave numerous results and under its 9th item quote
> 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE
> Antivirus
> 3-3-a.html
>
> May I know if this website is safe? Anyone been to this site...?.
> Appreciate
> if you can advice, as scared stiff trying to go sone unfamiliar sites.
> ......thanks

Still
Fri Jul 04 07:45:58 PDT 2008

http://forums.techguy.org...that website I've been to before. They *help*
you get rid of spyware and malware. It sounds like they have a solution to
that problem.

"shah" <shah@discussions.microsoft.com> wrote in message
news:BE0F100C-D732-4C11-B3BD-046CD05CED92@microsoft.com...
> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend
> under
> 'IE Antivirus 3.3' and gave numerous results and under its 9th item quote
> 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE
> Antivirus
> 3-3-a.html
>
> May I know if this website is safe? Anyone been to this site...?.
> Appreciate
> if you can advice, as scared stiff trying to go sone unfamiliar sites.
> ......thanks

shah
Fri Jul 04 07:46:01 PDT 2008

Many thanks and at the moment, I am scanning using Adaware 2007, Spybot 1.52.
I have AVG 8.0 in my other pc but somehow its seems to take up a lot of the
cpu resources. So not keen to install on this infected pc.
Reading from the google result, it appears the pc in question been Hjacked?
So I was wondering if the site I mentioned is it safe to click and see how
they resolve the issue as I don't want to create another problem(infected)
for this pc. Thanks


"AlmostBob" wrote:

> EVERYTHING that 'pop up'-s on your computer on its own is bad,
> malware typically behaves in this fashion,
> a small almost innocuous piece of software that tries to trick you into
> installing a worse one
> begin with adaware or spybot and a full scan with a reliable AV
>
> --
> Adaware http://www.lavasoft.de
> spybot http://www.safer-networking.org
> AVG free antivirus http://www.grisoft.com
> Etrust/Vet/CA.online Antivirus scan
> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/
> Catalog of removal tools (1)
> http://www.pandasoftware.com/download/utilities/
> Catalog of removal tools (2)
> http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?CID=40387
> Blocking Unwanted Parasites with a Hosts file
> http://mvps.org/winhelp2002/hosts.htm
> links provided as a courtesy, read all instructions on the pages before use
>
> Grateful thanks to the authors and webmasters
> _
>
>
> "shah" <shah@discussions.microsoft.com> wrote in message
> news:BE0F100C-D732-4C11-B3BD-046CD05CED92@microsoft.com...
> > Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend
> > under
> > 'IE Antivirus 3.3' and gave numerous results and under its 9th item quote
> > 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
> > 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE
> > Antivirus
> > 3-3-a.html
> >
> > May I know if this website is safe? Anyone been to this site...?.
> > Appreciate
> > if you can advice, as scared stiff trying to go sone unfamiliar sites.
> > ......thanks
>
>

Malke
Fri Jul 04 07:48:30 PDT 2008

shah wrote:

> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend
> under 'IE Antivirus 3.3' and gave numerous results and under its 9th item
> quote 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE
> Antivirus 3-3-a.html
>
> May I know if this website is safe? Anyone been to this site...?.
> Appreciate if you can advice, as scared stiff trying to go sone unfamiliar
> sites. ......thanks

No. Your computer is infected with the IE Antivirus malware and probably
lots of other malware besides. You need to clean it up.

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Find the IE Antivirus removal steps here:

Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

If you can't find it or need further help, register at Bleeping Computer or
one of the other specialty forums listed below in no particular order. Read
its posting FAQ and post whatever log they require. PLEASE DO NOT POST LOGS
IN THE MS NEWSGROUPS.

http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/

If you can't do the work yourself (and there is no shame in admitting this
isn't your cup of tea), take the machine to a professional computer repair
shop (not your local equivalent of BigComputerStore/GeekSquad). Please be
aware that not all local shops are skilled at removing malware and even if
they are, your computer may be so infested that Windows will need to be
clean-installed. If possible, have all your data backed up before you take
the machine into a shop.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

Still
Fri Jul 04 07:52:55 PDT 2008


"Malke" <malke@invalid.invalid> wrote in message
news:%23DHBIUe3IHA.5112@TK2MSFTNGP03.phx.gbl...
> shah wrote:
>
>> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend
>> under 'IE Antivirus 3.3' and gave numerous results and under its 9th item
>> quote 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
>> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE
>> Antivirus 3-3-a.html
>>
>> May I know if this website is safe? Anyone been to this site...?.
>> Appreciate if you can advice, as scared stiff trying to go sone
>> unfamiliar
>> sites. ......thanks
>
> No. Your computer is infected with the IE Antivirus malware and probably
> lots of other malware besides. You need to clean it up.

I've been to that site before and got help with malware.

(snipped)

Still
Fri Jul 04 07:51:03 PDT 2008

Go here: http://www.superantispyware.com/ download FREE version...it will
rid your system of a lot of nasty malware.

"shah" <shah@discussions.microsoft.com> wrote in message
news:27C604F0-3631-4BCA-B6FE-C7D974840EF9@microsoft.com...
> Many thanks and at the moment, I am scanning using Adaware 2007, Spybot
> 1.52.
> I have AVG 8.0 in my other pc but somehow its seems to take up a lot of
> the
> cpu resources. So not keen to install on this infected pc.
> Reading from the google result, it appears the pc in question been
> Hjacked?
> So I was wondering if the site I mentioned is it safe to click and see how
> they resolve the issue as I don't want to create another problem(infected)
> for this pc. Thanks
>
>
> "AlmostBob" wrote:
>
>> EVERYTHING that 'pop up'-s on your computer on its own is bad,
>> malware typically behaves in this fashion,
>> a small almost innocuous piece of software that tries to trick you into
>> installing a worse one
>> begin with adaware or spybot and a full scan with a reliable AV
>>
>> --
>> Adaware http://www.lavasoft.de
>> spybot http://www.safer-networking.org
>> AVG free antivirus http://www.grisoft.com
>> Etrust/Vet/CA.online Antivirus scan
>> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
>> Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/
>> Catalog of removal tools (1)
>> http://www.pandasoftware.com/download/utilities/
>> Catalog of removal tools (2)
>> http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?CID=40387
>> Blocking Unwanted Parasites with a Hosts file
>> http://mvps.org/winhelp2002/hosts.htm
>> links provided as a courtesy, read all instructions on the pages before
>> use
>>
>> Grateful thanks to the authors and webmasters
>> _
>>
>>
>> "shah" <shah@discussions.microsoft.com> wrote in message
>> news:BE0F100C-D732-4C11-B3BD-046CD05CED92@microsoft.com...
>> > Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend
>> > under
>> > 'IE Antivirus 3.3' and gave numerous results and under its 9th item
>> > quote
>> > 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
>> > 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE
>> > Antivirus
>> > 3-3-a.html
>> >
>> > May I know if this website is safe? Anyone been to this site...?.
>> > Appreciate
>> > if you can advice, as scared stiff trying to go sone unfamiliar sites.
>> > ......thanks
>>
>>

Daave
Fri Jul 04 08:03:10 PDT 2008

"Still learning" <notrealaddy@rukidding.com> wrote in message
news:euOxkWe3IHA.3576@TK2MSFTNGP06.phx.gbl...
>
> "Malke" <malke@invalid.invalid> wrote in message
> news:%23DHBIUe3IHA.5112@TK2MSFTNGP03.phx.gbl...
>> shah wrote:
>>
>>> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my
>>> friend
>>> under 'IE Antivirus 3.3' and gave numerous results and under its 9th
>>> item
>>> quote 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
>>> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE
>>> Antivirus 3-3-a.html
>>>
>>> May I know if this website is safe? Anyone been to this site...?.
>>> Appreciate if you can advice, as scared stiff trying to go sone
>>> unfamiliar
>>> sites. ......thanks
>>
>> No. Your computer is infected with the IE Antivirus malware and
>> probably
>> lots of other malware besides. You need to clean it up.
>
> I've been to that site before and got help with malware.

Agreed. The forums at http://forums.techguy.org/ are very helpful and
recommended for cleaning up the OP's infection. Perhaps Malke didn't
read shah's entire post and thought she asked if it was okay to download
and install IE ANTIVIRUS 3.3.

shah
Fri Jul 04 08:16:00 PDT 2008

Many thanks for the responses. I have just started the SuperAntispyware scan
(hope I am not choking the pc as the other scans are still running). I am now
more assure that the forums.techguy.org is safe to peep. Will post the HJ log
to the appropriate forum, thanks

"Daave" wrote:

> "Still learning" <notrealaddy@rukidding.com> wrote in message
> news:euOxkWe3IHA.3576@TK2MSFTNGP06.phx.gbl...
> >
> > "Malke" <malke@invalid.invalid> wrote in message
> > news:%23DHBIUe3IHA.5112@TK2MSFTNGP03.phx.gbl...
> >> shah wrote:
> >>
> >>> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my
> >>> friend
> >>> under 'IE Antivirus 3.3' and gave numerous results and under its 9th
> >>> item
> >>> quote 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
> >>> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE
> >>> Antivirus 3-3-a.html
> >>>
> >>> May I know if this website is safe? Anyone been to this site...?.
> >>> Appreciate if you can advice, as scared stiff trying to go sone
> >>> unfamiliar
> >>> sites. ......thanks
> >>
> >> No. Your computer is infected with the IE Antivirus malware and
> >> probably
> >> lots of other malware besides. You need to clean it up.
> >
> > I've been to that site before and got help with malware.
>
> Agreed. The forums at http://forums.techguy.org/ are very helpful and
> recommended for cleaning up the OP's infection. Perhaps Malke didn't
> read shah's entire post and thought she asked if it was okay to download
> and install IE ANTIVIRUS 3.3.
>
>
>

nass
Fri Jul 04 10:15:01 PDT 2008



"shah" wrote:

> Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend under
> 'IE Antivirus 3.3' and gave numerous results and under its 9th item quote
> 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
> 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE Antivirus
> 3-3-a.html
>
> May I know if this website is safe? Anyone been to this site...?. Appreciate
> if you can advice, as scared stiff trying to go sone unfamiliar sites.
> ......thanks


Your computer been hijacked and you need to perform a thorough scan for both
malware and viruses.
Yoy may have Zalop or Vundo variants on your machine.

BTW the techguy website is safe and will help you to clean up your machine
and guide step-by-step to solve it.

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Lots of tools to download and disinfect your machine (off-line scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

You may have a bad RAM try to test your RAM by running Memory test by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://oca.microsoft.com/en/windiag.asp.

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html
http://www.bleepingcomputer.com/forums/
Or other appropriate
forums for expert analysis, not here.
Let us know your progress.
nass
----
http://www.nasstec.co.uk

HeyBub
Fri Jul 04 11:00:26 PDT 2008

shah wrote:
> Many thanks and at the moment, I am scanning using Adaware 2007,
> Spybot 1.52. I have AVG 8.0 in my other pc but somehow its seems to
> take up a lot of the cpu resources. So not keen to install on this
> infected pc.
> Reading from the google result, it appears the pc in question been
> Hjacked? So I was wondering if the site I mentioned is it safe to
> click and see how they resolve the issue as I don't want to create
> another problem(infected) for this pc. Thanks
>

You're essentially asking "Is it safe to go to a site recommended by a bit
of malware?"

No, of course not. It is not safe. The site will download something that
turns off the nag but converts your machine into a trojan, a member of a
botnet, and soon you'll be sending out child porn spam to the universe.

AlmostBob
Fri Jul 04 18:21:27 PDT 2008

hijackthis is a repair tool. it creates a log of what is loading and when,
you post the log to a forum similar to this one (the one in the google
answer was at techguys.org) for hijackthis gurus to explain what is wrong
and how to fix it.
some hijackthis gurus are also msMVPs
That the program appears in a hijackthis forum as 'solved' suggests it is
malware.
AVG8 may use resources dunno I have 7.5 on win98 win98se winme and 8.0 on XP
and Vista boxes, (never throw anything away till it dies) and never notice
any slowdown
- that malware which you have may cause more 'interesting' effects than just
popups,
which do you prefer,
slightly slowed,
or dead.


--
Adaware http://www.lavasoft.de
spybot http://www.safer-networking.org
AVG free antivirus http://www.grisoft.com
Etrust/Vet/CA.online Antivirus scan
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/
Catalog of removal tools (1)
http://www.pandasoftware.com/download/utilities/
Catalog of removal tools (2)
http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?CID=40387
Blocking Unwanted Parasites with a Hosts file
http://mvps.org/winhelp2002/hosts.htm
links provided as a courtesy, read all instructions on the pages before use

Grateful thanks to the authors and webmasters
_


"shah" <shah@discussions.microsoft.com> wrote in message
news:27C604F0-3631-4BCA-B6FE-C7D974840EF9@microsoft.com...
> Many thanks and at the moment, I am scanning using Adaware 2007, Spybot
> 1.52.
> I have AVG 8.0 in my other pc but somehow its seems to take up a lot of
> the
> cpu resources. So not keen to install on this infected pc.
> Reading from the google result, it appears the pc in question been
> Hjacked?
> So I was wondering if the site I mentioned is it safe to click and see how
> they resolve the issue as I don't want to create another problem(infected)
> for this pc. Thanks
>
>
> "AlmostBob" wrote:
>
>> EVERYTHING that 'pop up'-s on your computer on its own is bad,
>> malware typically behaves in this fashion,
>> a small almost innocuous piece of software that tries to trick you into
>> installing a worse one
>> begin with adaware or spybot and a full scan with a reliable AV
>>
>>
>> "shah" <shah@discussions.microsoft.com> wrote in message
>> news:BE0F100C-D732-4C11-B3BD-046CD05CED92@microsoft.com...
>> > Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend
>> > under
>> > 'IE Antivirus 3.3' and gave numerous results and under its 9th item
>> > quote
>> > 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
>> > 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE
>> > Antivirus
>> > 3-3-a.html
>> >
>> > May I know if this website is safe? Anyone been to this site...?.
>> > Appreciate
>> > if you can advice, as scared stiff trying to go sone unfamiliar sites.
>> > ......thanks
>>
>>

shah
Sat Jul 05 08:01:01 PDT 2008

Many thanks and went through the various scanners and manage to get rid of
tons of trojan etc and back to working condition.

"nass" wrote:

>
>
> "shah" wrote:
>
> > Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend under
> > 'IE Antivirus 3.3' and gave numerous results and under its 9th item quote
> > 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
> > 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE Antivirus
> > 3-3-a.html
> >
> > May I know if this website is safe? Anyone been to this site...?. Appreciate
> > if you can advice, as scared stiff trying to go sone unfamiliar sites.
> > ......thanks
>
>
> Your computer been hijacked and you need to perform a thorough scan for both
> malware and viruses.
> Yoy may have Zalop or Vundo variants on your machine.
>
> BTW the techguy website is safe and will help you to clean up your machine
> and guide step-by-step to solve it.
>
> Go through these Cleaning steps:
> 1... Click start >> Control Panel >> Double Click Network and Internet
> Connections >> Double click Internet Options, on the IE Properties window
> you will see these Options:
> General | Security | Privacy | Content | Connections | Programs
> | Advanced .
>
> Click on General Tab (1st Tab on the left) and you will see a Button called
> [ Clear History ..] click on it to clear your History caches, then click on
> [Delete Files..] to delete Internet Files created over the time, click on [
> Delete Cookies...] to delete your cookies left by visiting websites.
>
> Then click on Advanced tab and scroll down to under the Browsing Option:
> [&] Browsing
> [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
> = Then try to Disable the Add-Ons on your Browser somehow installed on your
> browser, On how to disable the Add-ons follow this:
> Click on Programs Tab and then click the Manage Add-Ons Button there Disable
> the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
> later and see which is the culprit .
> How to manage Add-Ons:
> http://support.microsoft.com/kb/883256
> Scan for malware from here:
>
> http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
> http://onecare.live.com/standard/en-gb/default.htm
> RootkitRevealer v1.71
> By Bryce Cogswell and Mark Russinovich
> http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx
>
> Run a scan from here on-line:
> http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> Download Avast Cleaner (off-line scanner) from here:
> http://www.avast.com/eng/avast-virus-cleaner.html
>
> Lots of tools to download and disinfect your machine (off-line scanner):
> http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
>
> You may have a bad RAM try to test your RAM by running Memory test by
> downloading this tool and unzip it and make a floppy or CD/DVD and run it on
> Reboot.
> http://oca.microsoft.com/en/windiag.asp.
>
> Download the Hijackthis and send the report to one of
> many
> forums for analysis and troubleshooting:
> When all else fails, HijackThis v2.0.2
> (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
> the preferred tool to use.
> It will help you to both identify and remove any hijackware/spyware. Post
> your log to:
> http://www.spywareinfo.com/
> http://aumha.net/viewforum.php?f=30,
> http://castlecops.com/forum67.html,
> http://forums.subratam.org/index.php?showforum=7
> http://www.bleepingcomputer.com/tutorials/tutorial42.html
> http://www.bleepingcomputer.com/forums/
> Or other appropriate
> forums for expert analysis, not here.
> Let us know your progress.
> nass
> ----
> http://www.nasstec.co.uk
>
>

Ken
Sat Jul 05 12:39:59 PDT 2008

On Sat, 5 Jul 2008 08:01:01 -0700, shah
<shah@discussions.microsoft.com> wrote:

> Many thanks and went through the various scanners and manage to get rid of
> tons of trojan etc and back to working condition.



You say "tons of trojans." If you really had many infections, there's
a pretty good change you are still infected. On a system with multiple
infections, the best course is always to reformat and reinstall
Windows. Anything less is likely to be only a partial fix.


> "nass" wrote:
>
> >
> >
> > "shah" wrote:
> >
> > > Our family pc has this pop up 'IE ANTIVIRUS 3.3 and I googled my friend under
> > > 'IE Antivirus 3.3' and gave numerous results and under its 9th item quote
> > > 'Solved IE Antivirus 3.3 - Tech Support Guy forums" Link as
> > > 'forums.techguy.org/malware-emoved-hjackthis-logs/721904-solved IE Antivirus
> > > 3-3-a.html
> > >
> > > May I know if this website is safe? Anyone been to this site...?. Appreciate
> > > if you can advice, as scared stiff trying to go sone unfamiliar sites.
> > > ......thanks
> >
> >
> > Your computer been hijacked and you need to perform a thorough scan for both
> > malware and viruses.
> > Yoy may have Zalop or Vundo variants on your machine.
> >
> > BTW the techguy website is safe and will help you to clean up your machine
> > and guide step-by-step to solve it.
> >
> > Go through these Cleaning steps:
> > 1... Click start >> Control Panel >> Double Click Network and Internet
> > Connections >> Double click Internet Options, on the IE Properties window
> > you will see these Options:
> > General | Security | Privacy | Content | Connections | Programs
> > | Advanced .
> >
> > Click on General Tab (1st Tab on the left) and you will see a Button called
> > [ Clear History ..] click on it to clear your History caches, then click on
> > [Delete Files..] to delete Internet Files created over the time, click on [
> > Delete Cookies...] to delete your cookies left by visiting websites.
> >
> > Then click on Advanced tab and scroll down to under the Browsing Option:
> > [&] Browsing
> > [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
> > = Then try to Disable the Add-Ons on your Browser somehow installed on your
> > browser, On how to disable the Add-ons follow this:
> > Click on Programs Tab and then click the Manage Add-Ons Button there Disable
> > the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
> > later and see which is the culprit .
> > How to manage Add-Ons:
> > http://support.microsoft.com/kb/883256
> > Scan for malware from here:
> >
> > http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
> > http://onecare.live.com/standard/en-gb/default.htm
> > RootkitRevealer v1.71
> > By Bryce Cogswell and Mark Russinovich
> > http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx
> >
> > Run a scan from here on-line:
> > http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
> > http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> > Download Avast Cleaner (off-line scanner) from here:
> > http://www.avast.com/eng/avast-virus-cleaner.html
> >
> > Lots of tools to download and disinfect your machine (off-line scanner):
> > http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
> >
> > You may have a bad RAM try to test your RAM by running Memory test by
> > downloading this tool and unzip it and make a floppy or CD/DVD and run it on
> > Reboot.
> > http://oca.microsoft.com/en/windiag.asp.
> >
> > Download the Hijackthis and send the report to one of
> > many
> > forums for analysis and troubleshooting:
> > When all else fails, HijackThis v2.0.2
> > (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
> > the preferred tool to use.
> > It will help you to both identify and remove any hijackware/spyware. Post
> > your log to:
> > http://www.spywareinfo.com/
> > http://aumha.net/viewforum.php?f=30,
> > http://castlecops.com/forum67.html,
> > http://forums.subratam.org/index.php?showforum=7
> > http://www.bleepingcomputer.com/tutorials/tutorial42.html
> > http://www.bleepingcomputer.com/forums/
> > Or other appropriate
> > forums for expert analysis, not here.
> > Let us know your progress.
> > nass
> > ----
> > http://www.nasstec.co.uk
> >
> >

--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup