Acting like a DIVA!

[penniwinkleb]

Don't get me wrong: I love my Pentium II with Windows
98SE! It ran great UNTIL I PUT IT ON THE INTERNET LAST
MONTH!!!!!
I have babied it to www.microsoft.com; gotten it all the
IE updates it was supposed to have; updated my McAffee v4
to v6, got it Ad Aware and Sygate; found the Repair
Internet Explorer tool in SYSTEMS TOOLS.
And still, it gives me the DIVA act: "I don't like where
you're going, so I'll tell you your time has expired. Or
I'll tell you I can't find their server. Or I'll just
freeze up. There you sit, stuck in the middle of a page
and can't even move your mouse curser. Can't go back,
can't go forward."
And about that time, my ISP hangs up on me, so I hit reset
and then go through all the maintenance stuff. Clean as a
whistle. Go back out on the Net. Same ol' DIVA. This
time after I hit reset, I happen to look in Temporary
Internet Files, and what do I see? A javascript applet
calling itself "spy", and claiming to come from MSN!!!
And then, MSN and Hotmail refuse to let me access my e-
mail.
Don't tell me I am just a newbie--I'm an old IBM Dos/vs
programmer! HELP guys!!!!

 

[PA Bear]

Dealing with Trojans & Hijackware

A. Trojans

1. Check in at Windows Update and install all critical updates & reboot.

2. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

3. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
and then run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html)
and follow *all* Removal steps, including editing the Registry if directed.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then:

Disk Cleanup > More options > Delete all but the most recent Restore
Point.

B. Hijackware

Help with Hijackware (MS MVP sites all)
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder v1.59.1 (no updates available currently; fix all found)

2. Ad-Aware *SE* (v1.05 core) (reconfigure per Post #2 in
http://aumha.org/forum/viewtopic.php?t=5877; run Custom Scan and fix all
found)

3. Spybot v1.3 (RTFM, Immunize and then scan; generally, fix everything in
red)

Important: You must seek updates for Ad-Aware, Spybot, etc., before each and
every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis *v1.98.2*
(http://forum.aumha.org/downloads/hijackthis.zip) is the preferred tool to
use. It will help you to both identify and remove any hijackware/spyware.
**Post your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957