ive been hacked Help!

[stalwart9]

a program has got past my firewall/anti virus,everytime i
start up my computer it autodials out and connects me to
a strange site (www.outwar.com ?!!!).i have virus checked
= nothing there,spyware check = 2 x spyware, squire and
stardialer both found and deleted. I have searched the
reg + all files for "outwar", "stardialer" etc but found
nothing else to delete. I seem to have stopped the
autodial but the "program" still tries to connect and
find the site.(internet window saying cannot connect on
screen) Is it embedded in IE somewhere?? Help before I
end up FORMATTING.

 

[dev]

stalwart9 said:

A program has got past my firewall/anti virus. Everytime I
start up my computer it autodials out and connects me to
a strange site (www.outwar.com ?!!!). I have virus checked
= nothing there,spyware check = 2 x spyware, squire and
stardialer both found and deleted. I have searched the
reg + all files for "outwar", "stardialer" etc but found
nothing else to delete. I seem to have stopped the
autodial but the "program" still tries to connect and
find the site (internet window saying cannot connect on
screen) Is it embedded in IE somewhere?? Help before I
end up FORMATTING.

You have scanned with one or both of these?
http://www.lavasoftusa.com (AdAware)
http://security.kolla.de (SpyBot)

 

[Guest]

http://www.merijn.org

Hijack This can find it or try spybot

 

[Guest]

You say it occurs whenever you start the machine up, check out your msconfig startup items.

start > run > msconfig > top startup tab > untick any suspicious files.

This will prevent thius program loading when windows boots up.

Jonathan

 

[Guest]

Do you have system restore enabled? If you do, you may
want to disable it, run your adaware and antivirus to
delete all the files, then when you are sure the files
have been removed, turn your system restore back on.

 

[Guest]

Jon your advise worked, I found it using msconfig,
tracked it down to system 32 files then deleted it.
cheers