"One frustrated guy!!!" <One frustrated
[email protected]> wrote in message
An internet site occasionally pops up on my computer and I can't
figure out
how to stop it. The site address is mmm2.media-motor.net/to63.php. If
I
re-boot my computer it pops up after a couple of minutes. I close it
down and
later (not sure how much later) there it is again!!! Deleted all
history,
cookies, temp files, everything i could think of, nothing helps!!!
Close all instances of IE. Check the Processes tab in Task Manager to
make sure ALL instances of iexplore.exe have been killed (i.e., kill any
that still exist). Do you still have the problem? Some sites will load
a "hidden" instance of IE (without a window) to use it to run scripts to
run a timer that will periodically open another visible instance of IE.
If you kill all instances of iexplore.exe and do not open IE yourself
but a new instance of iexplore.exe shows up in Task Manager, you are
infected. Run a full scan using a recently updated anti-virus program,
scan for malware using Ad-Aware, Spybot S&D, CWshredder, MS AntiSpyware,
and online PestScan. If they turn up nothing, then try the trial
versions of Trojan Hunter, TDS-3, or BOClean.
Your firewall might also provide for fireholing (where an authorized
application uses an authorized application to make an Internet
connection). Norton's firewall and the free Sygate Personal Firewall
include options for fireholing detect. ZoneAlarm (free) does not but
their Pro version (paid) does. You could then delete the application
rule for IE or clear the file signature list that called IE to then get
prompted when a process was trying to call IE to make a connection.
Alternatively, you could see if SysInternals' FileMon utility might tell
you who is loading iexplore.exe (create a filter so you only see
iexplore.exe instead of all files being accessed).
