Hello

after opening the browser with variant time (1-30 minutes) another windows
appears automatically, some of them are minimized and i can not browse
unless press F11 to maximize, then i can see:

http://nitrous.exitfuel.com and
http://adserv.internetfuel.com and
http://nitrous.internetfuel.com

then after a short time many other windows appears automatically with sex
and other subjects, i downloaded many shareware spareware programs like
spyBot , ad-aware 6 , spyware-blaster , spyware-guard to clean and remove my
system.

BUT

i still have them back, i checked my RUN registry key under:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

and found a strange filename.exe /install and DLLRun32.exe pointing to a DLL
in my c:\windows called : BSX5.DLL , i found also a BSX32.ini , i renamed
those and removed this autorun exe from the registry, it seems ads are gone
for now!

i just need to know where in the registry there would be a key for a program
to autorun after the browser is open ? just for my knowledge, would you pls
help

Thank you
Bassam

Sounds to me like your computer is infected with at least
one virus, possibly the trojan called JS/NoClose.

>-----Original Message-----
>Hello
>
>after opening the browser with variant time (1-30
minutes) another windows
>appears automatically, some of them are minimized and i
can not browse
>unless press F11 to maximize, then i can see:
>
>http://nitrous.exitfuel.com and
>http://adserv.internetfuel.com and
>http://nitrous.internetfuel.com
>
>then after a short time many other windows appears
automatically with sex
>and other subjects, i downloaded many shareware spareware
programs like
>spyBot , ad-aware 6 , spyware-blaster , spyware-guard to
clean and remove my
>system.
>
>BUT
>
>i still have them back, i checked my RUN registry key
under:
>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run
>
>and found a strange filename.exe /install and
DLLRun32.exe pointing to a DLL
>in my c:\windows called : BSX5.DLL , i found also a
BSX32.ini , i renamed
>those and removed this autorun exe from the registry, it
seems ads are gone
>for now!
>
>i just need to know where in the registry there would be
a key for a program
>to autorun after the browser is open ? just for my
knowledge, would you pls
>help
>
>Thank you
>Bassam
>
>
>.
>

"Bassam" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)
> Hello
>
> after opening the browser with variant time (1-30 minutes) another
> windows appears automatically, some of them are minimized and i can
> not browse unless press F11 to maximize, then i can see:
>
> http://nitrous.exitfuel.com and
> http://adserv.internetfuel.com and
> http://nitrous.internetfuel.com
>
> then after a short time many other windows appears automatically with
> sex and other subjects, i downloaded many shareware spareware
> programs like spyBot , ad-aware 6 , spyware-blaster , spyware-guard
> to clean and remove my system.
>
> BUT
>
> i still have them back, i checked my RUN registry key under:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
>
> and found a strange filename.exe /install and DLLRun32.exe pointing
> to a DLL in my c:\windows called : BSX5.DLL , i found also a
> BSX32.ini , i renamed those and removed this autorun exe from the
> registry, it seems ads are gone for now!
>
> i just need to know where in the registry there would be a key for a
> program to autorun after the browser is open ? just for my knowledge,
> would you pls help
>
> Thank you
> Bassam

You downloaded some spyware or other scumware. If you had one, you probably
have more.
First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com

Well, I have WinXP Pro, SP1 , fully patch updated from windows update,
MCAFEE AntiVirus installed with last DAT file installed dated Nov,14 , i
scanned my PC and its clear, no mention of this JS/NoClose or anything else.

Thanks
Bassam

"Rick H" <(E-Mail Removed)> wrote in message
news:049c01c3ac2f$c678ed00$(E-Mail Removed)...
> Sounds to me like your computer is infected with at least
> one virus, possibly the trojan called JS/NoClose.
>
> >-----Original Message-----
> >Hello
> >
> >after opening the browser with variant time (1-30
> minutes) another windows
> >appears automatically, some of them are minimized and i
> can not browse
> >unless press F11 to maximize, then i can see:
> >
> >http://nitrous.exitfuel.com and
> >http://adserv.internetfuel.com and
> >http://nitrous.internetfuel.com
> >
> >then after a short time many other windows appears
> automatically with sex
> >and other subjects, i downloaded many shareware spareware
> programs like
> >spyBot , ad-aware 6 , spyware-blaster , spyware-guard to
> clean and remove my
> >system.
> >
> >BUT
> >
> >i still have them back, i checked my RUN registry key
> under:
> >HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
> on\Run
> >
> >and found a strange filename.exe /install and
> DLLRun32.exe pointing to a DLL
> >in my c:\windows called : BSX5.DLL , i found also a
> BSX32.ini , i renamed
> >those and removed this autorun exe from the registry, it
> seems ads are gone
> >for now!
> >
> >i just need to know where in the registry there would be
> a key for a program
> >to autorun after the browser is open ? just for my
> knowledge, would you pls
> >help
> >
> >Thank you
> >Bassam
> >
> >
> >.
> >

thanks a lot for this great source of useful info !

Bassam

"Frank Saunders, MS-MVP" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> "Bassam" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)
> > Hello
> >
> > after opening the browser with variant time (1-30 minutes) another
> > windows appears automatically, some of them are minimized and i can
> > not browse unless press F11 to maximize, then i can see:
> >
> > http://nitrous.exitfuel.com and
> > http://adserv.internetfuel.com and
> > http://nitrous.internetfuel.com
> >
> > then after a short time many other windows appears automatically with
> > sex and other subjects, i downloaded many shareware spareware
> > programs like spyBot , ad-aware 6 , spyware-blaster , spyware-guard
> > to clean and remove my system.
> >
> > BUT
> >
> > i still have them back, i checked my RUN registry key under:
> > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
> >
> > and found a strange filename.exe /install and DLLRun32.exe pointing
> > to a DLL in my c:\windows called : BSX5.DLL , i found also a
> > BSX32.ini , i renamed those and removed this autorun exe from the
> > registry, it seems ads are gone for now!
> >
> > i just need to know where in the registry there would be a key for a
> > program to autorun after the browser is open ? just for my knowledge,
> > would you pls help
> >
> > Thank you
> > Bassam
>
> You downloaded some spyware or other scumware. If you had one, you
probably
> have more.
> First eliminate any scumware.
> See
> Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
> http://mvps.org/winhelp2002/unwanted.htm
>
> --
> Frank Saunders, MS-MVP, IE/OE
> Please respond in Newsgroup. Do not send email
> http://www.fjsmjs.com
>