How Can This Happen? How is it "Cured?"

[Michael A.]

Within the past month I installed Norton AV 2003 Professional Edition.
I run full system scans 2X per week and go to Live Update when
prompted.Running Windows XP.

Even after Installing NAV,I have been getting the same Virus Warnings
soon after I go online. Every time. They are:

"NAV has detected a virus on your computer. Name:
JS.EXCEPTION.EXPLOIT. Unable to repair this File. Access to the File
was Denied"

AND

"NAV has detected a virus on your computer. Name: DOWNLOAD.TROJAN. The
File was automatically deleted". [Seems to be in
WindowsMediaPlayer/wmplayer.exe]


Three things confuse me. First these same "detected Virus" Warnings
again occur the next time I go online (via IE 5.X). Every time. A full
system scan shows I have "No infected files" on my entire system.

Second, if the Virus is detected and deleted(see above), how can it
keep reinserting itself on my system (apparently via Windows Media
Player) after it has been deleted by Norton AV and my DAT files are
subsequently brought up to date?

Third, this would be in the merely annoying category, except yesterday
for the first time in the midst of routine surfing (Bankruptcy Law
info via Google) my screen froze,and a Porn Program came up
out-of-nowhere which could not be stopped even with CTR-ALT-DELETE. If
I hit "End process" the Porn Program would either start Running again
immediately or roll over to another (or a Third) equally disgusting
Porn Program.

The Porn sites that invade in the midst of my routine surfing have
never been knowingly visited by me. The scary part is that they
intrude in the midst of regular surfing (though for the past 10
minutes I have been able to type this Message w/o interruption).

Any ideas? My sense is that it's somehow caused by files on my Windows
Media Player perhaps exacerbated by the three or four video files I
have DL'd from Kazaa. But I have no clue.

Thanks for any assistance. The uninvited Porn stuff is as scary as it
is disgusting.

 

[Ferengi]

"NAV has detected a virus on your computer. Name:
JS.EXCEPTION.EXPLOIT. Unable to repair this File. Access to the File
was Denied"

Try to turn off system restore, then check. It's only idea.

Good luck,
Ferengi

 

[Michael A.]

I'm the OP. System Restore was already Off. But I'm not sure what you
meant by "then check".

It appears that a Porn Dialler is somehow being activated when I
surf.Once the Dialler takes hold it seems to start inserting the other
stuff.
If I intercept it while it is loading nothing further bad or out of my
control happens (until I log on to the Internet again).

Again, thanks for any ideas.

 

[Ferengi]

Maybe you could try with Trojan Remover or HijackThis.

Ferengi

 

[taff]

Try to turn off system restore, then check. It's only idea.

Good luck,
Ferengi

Try Adaware or Spybot which are free spyware and dialer removal
programs.

Taff..............



www.sounds-pa.com | www.thecomputerworkshop.com

 

[Gigi]

Within the past month I installed Norton AV 2003 Professional Edition.
I run full system scans 2X per week and go to Live Update when
prompted.Running Windows XP.

Even after Installing NAV,I have been getting the same Virus Warnings
soon after I go online. Every time. They are:

"NAV has detected a virus on your computer. Name:
JS.EXCEPTION.EXPLOIT. Unable to repair this File. Access to the File
was Denied"

AND

"NAV has detected a virus on your computer. Name: DOWNLOAD.TROJAN. The
File was automatically deleted". [Seems to be in
WindowsMediaPlayer/wmplayer.exe]


Three things confuse me. First these same "detected Virus" Warnings
again occur the next time I go online (via IE 5.X). Every time. A full
system scan shows I have "No infected files" on my entire system.

Second, if the Virus is detected and deleted(see above), how can it
keep reinserting itself on my system (apparently via Windows Media
Player) after it has been deleted by Norton AV and my DAT files are
subsequently brought up to date?

Third, this would be in the merely annoying category, except yesterday
for the first time in the midst of routine surfing (Bankruptcy Law
info via Google) my screen froze,and a Porn Program came up
out-of-nowhere which could not be stopped even with CTR-ALT-DELETE. If
I hit "End process" the Porn Program would either start Running again
immediately or roll over to another (or a Third) equally disgusting
Porn Program.

The Porn sites that invade in the midst of my routine surfing have
never been knowingly visited by me. The scary part is that they
intrude in the midst of regular surfing (though for the past 10
minutes I have been able to type this Message w/o interruption).

Any ideas? My sense is that it's somehow caused by files on my Windows
Media Player perhaps exacerbated by the three or four video files I
have DL'd from Kazaa. But I have no clue.

Thanks for any assistance. The uninvited Porn stuff is as scary as it
is disgusting.

If it's turning on a dial-up site you can try deleting their dial-up
in Windows Internet Explorer.
Click Tools
Click Internet Options
Click the Connections tab
In the Dial-up & Network Settings block (white) check for something
other than your normal dial-up connection. It should be obvious by its
name if it is there.
Write down the name in case you have to add it back if its the wrong
one. Then Delete it.
Sometimes these viruses replace themselves from a system restore
function in later versions of Windows. In my case I have a DSL line
and don't use the dial-up, so my dial-up modem is not connected.
Gigi