MSAS Can't get rid of them!

[Guest]

I have these three that keep showing up and no matter how
many times I run this program and "remove" them, they
keep coming back! They are:

Possible Browser Hijack Browser Hijacker more
information...
Details: Possible Browser Hijack redirects Internet
Explorer.
Status: Removed
High threat - High risk threats typically are remotely
exploitable vulnerabilities, which can lead to system
compromise. Successful exploitation does not normally
require any interaction. May open up communication ports,
use polymorphic tactics, stealth installations, and/or
anti-spy counter measures. May us a security flaw in the
operating system to gain access to your computer.


Possible Hosts File Hijack Spyware more information...
Details: Possible Hosts File Hijack changes your Windows
hosts file.
Status: Removed
High threat - High risk threats typically are remotely
exploitable vulnerabilities, which can lead to system
compromise. Successful exploitation does not normally
require any interaction. May open up communication ports,
use polymorphic tactics, stealth installations, and/or
anti-spy counter measures. May us a security flaw in the
operating system to gain access to your computer.


eXact.Downloader Trojan Downloader more information...
Details: eXact Downloader is a Trojan used by eXact
Bargain Buddy and Cash Back to download and install
additional components.
Status: Removed
High threat - High risk threats typically are remotely
exploitable vulnerabilities, which can lead to system
compromise. Successful exploitation does not normally
require any interaction. May open up communication ports,
use polymorphic tactics, stealth installations, and/or
anti-spy counter measures. May us a security flaw in the
operating system to gain access to your computer.

Infected files detected
c:\windows\system32\vx2.nls

I keep getting these pop up windows taking me to all
kinds of crap. How do I stop it??

 

[Bill Sanderson]

As a start, please restart Windows in safe mode--by pressing F8 before the
initial Windows screen appears. Once started in safe mode, do at least two
FULL scans, using Microsoft Antispyware--until a scan comes through clean.
Ideally, do the same thing as well with your antivirus application with
current definitions.

 

[Guest]

The file listed below is part of the VX2 Better Internet infection. It IS
tough to get rid of. I don't know how "kosher" it is for me to mention
other products in this forum, but, when one of my machines was infected by
this, I seem to remember using both Spybot Search & Destroy AND Lavasoft's
Ad-Aware to get rid of it. It just seemed that the two programs
supplemented each other's shortfalls. You may need one of these other
programs in addition to MSAS. Then again, maybe not. You may also want to
consider turning off System Restore until the machine is cleaned and then
turn it back on.