need help very badly!

I posted this on alt.comp.viruses too and I know cross posts are frowned
upon but honestly I'm desperate at this point. Sorry!

Hi, I hope I have found the right place as I really need some info. My
husbands computer has some sort of virus / malware on it that McAfee Prof
Edition 7 and 2 online scanners including housecall could not find. I even
ran a bunch of spyware and adware removers - nothing. We've run AV programs
in safe mode too and over a network from another computer - nothing there
either. I've been working on this for weeks and it looks like this will be
my last ditch effort before a reinstall which really bums.
It cerates a program called IIC***.exe. The *** appears to be a random hex
number that changes each time. This process tries to go out to the internet
usually around 10 or 11PM and Zone Alarm notifies us. The thing is if you
find and delete this file, or just say no on Zone Alarm, another with a
different random number comes up. Earlier on we were also having problems
with random processes and registry entries coming up but that mysteriously
stopped. Also, I looked at the .exe file in notepad for kicks and it said
something about a spyware program called goblinicon. I checked and there are
directions for removing this goblinicon thing but the files they tell you to
remove are not on my computer and there are some differences in behavior.
Maybe it is a mutated version but I am really uncomfortable with this. It
did actually get out onto the internet once as ZoneAlarm had crashed for a
different reason. Can anyone help?

--

Laura
ICQ 174756639
AIM poetstrm425
www.lioddities.com

On Mon, 12 Jan 2004 00:15:01 GMT, "PoetStorm" <poetstrm@optonline.net>
wrote:

>I posted this on alt.comp.viruses too and I know cross posts are frowned
>upon but honestly I'm desperate at this point. Sorry!
>
>Hi, I hope I have found the right place as I really need some info. My
>husbands computer has some sort of virus / malware on it that McAfee Prof
>Edition 7 and 2 online scanners including housecall could not find. I even
>ran a bunch of spyware and adware removers - nothing. We've run AV programs
>in safe mode too and over a network from another computer - nothing there
>either. I've been working on this for weeks and it looks like this will be
>my last ditch effort before a reinstall which really bums.
>It cerates a program called IIC***.exe. The *** appears to be a random hex
>number that changes each time. This process tries to go out to the internet
>usually around 10 or 11PM and Zone Alarm notifies us. The thing is if you
>find and delete this file, or just say no on Zone Alarm, another with a
>different random number comes up. Earlier on we were also having problems
>with random processes and registry entries coming up but that mysteriously
>stopped. Also, I looked at the .exe file in notepad for kicks and it said
>something about a spyware program called goblinicon. I checked and there are
>directions for removing this goblinicon thing but the files they tell you to
>remove are not on my computer and there are some differences in behavior.
>Maybe it is a mutated version but I am really uncomfortable with this. It
>did actually get out onto the internet once as ZoneAlarm had crashed for a
>different reason. Can anyone help?

This is related to adgoblin. The information is here.
http://forums.spywareinfo.com/index.php?showtopic=18919

Taff..............




www.sounds-pa.com | www.thecomputerworkshop.com

Quoth the raven named PoetStorm:

> I posted this on alt.comp.viruses too and I know cross posts are frowned
> upon but honestly I'm desperate at this point. Sorry!

Just a note: you didn't crosspost it, you multiposted it. That means
that those who answer in alt.comp.anti-virus will not know if you've
already received an answer in the other group.

See: http://www.cs.tut.fi/~jkorpela/usenet/xpost.html#how

--
-bts
-This space intentionally left blank.

"PoetStorm" <poetstrm@optonline.net> wrote in
news:9GlMb.140231$Cs3.27936932@news4.srv.hcvlny.cv.net:

> I posted this on alt.comp.viruses too and I know cross posts are
> frowned upon but honestly I'm desperate at this point. Sorry!
>
> Hi, I hope I have found the right place as I really need some info. My
> husbands computer has some sort of virus / malware on it that McAfee
> Prof Edition 7 and 2 online scanners including housecall could not
> find. I even ran a bunch of spyware and adware removers - nothing.
> We've run AV programs in safe mode too and over a network from another
> computer - nothing there either. I've been working on this for weeks
> and it looks like this will be my last ditch effort before a reinstall
> which really bums. It cerates a program called IIC***.exe. The ***
> appears to be a random hex number that changes each time. This process
> tries to go out to the internet usually around 10 or 11PM and Zone
> Alarm notifies us. The thing is if you find and delete this file, or
> just say no on Zone Alarm, another with a different random number
> comes up. Earlier on we were also having problems with random
> processes and registry entries coming up but that mysteriously
> stopped. Also, I looked at the .exe file in notepad for kicks and it
> said something about a spyware program called goblinicon. I checked
> and there are directions for removing this goblinicon thing but the
> files they tell you to remove are not on my computer and there are
> some differences in behavior. Maybe it is a mutated version but I am
> really uncomfortable with this. It did actually get out onto the
> internet once as ZoneAlarm had crashed for a different reason. Can
> anyone help?
>

http://www.spywareguide.com/product_show.php?id=573
http://www.pestpatrol.com/PestInfo/...dsincontext.asp

Hopefully, the above links may help you understand the situation, if it is
really the problem you're having with sypware.

Duane