Porn Tool Bar

[Steve]

I have this new toolbar installed on IE which has links to
porn sites. It has also added porn sites to my links and
to my favourites.
I thought I could delete the registry keys but now I cant
run systedit or regedit. The window opens up very breifly
then closes.
I am not sure if my computer has been hijacked or I have
some kind of virus as well, as I noticed that the latter
problem could be caused by one.

Any help is welcomed

 

[Jim Byrd]

Hi Steve - It sounds like you've been hijacked.

Download HijackThis, free, here:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Unzip it to any convenient folder, start it then press Scan. Click on
SaveLog when it's finished which will create hijackthis.log. Now click the
Config button, then Misc Tools and click on Generate StartupList.log which
will create Startuplist.txt

Go to Spyware and Hijackware Removal Support, here:
http://www.spywareinfo.com/forums/index.php?s=8a236cdf61469fbad3bddbe810be0374&act=SF&f=11

Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).



--
Regards, Jim Byrd, MS-MVP
Please respond in original thread in Newsgroup.


In

 

[YK]

I have this new toolbar installed on IE which has links to
porn sites. It has also added porn sites to my links and
to my favourites.
I thought I could delete the registry keys but now I cant
run systedit or regedit. The window opens up very breifly
then closes.
I am not sure if my computer has been hijacked or I have
some kind of virus as well, as I noticed that the latter
problem could be caused by one.

Any help is welcomed

Sounds like a variation of the Spybot virus/worm? (Not to be confused with
SpyBot Search and Destroy) This is a rampant very new mutating nasty.
What anti virus application are you running? Is it up to date? Sounds like
the "wincfg.scr" virus/worm.

Some descriptions:
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.dr.html
http://www.annoyances.org/exec/forum/win98/r1049994825

Run this on-line virus checker:
http://housecall.trendmicro.com/housecall/

 

[siljaline]

I have this new toolbar installed on IE which has links to
porn sites. It has also added porn sites to my links and
to my favourites.
I thought I could delete the registry keys but now I cant
run systedit or regedit. The window opens up very breifly
then closes.
I am not sure if my computer has been hijacked or I have
some kind of virus as well, as I noticed that the latter
problem could be caused by one.

Any help is welcomed

*Before* you take Jim Byrd's advice, run these and see if anything shows up in a
Spyware scan.

Removal Tool, your choice, novice users, Lavasoft's Ad-aware,
http://ftp.pcworld.com/pub/new/privacy___security/aaw6181.exe
Lavasoft/Ad-aware home: http://www.lavasoftusa.com
Mirror site: http://www.lavasoft.de/

Advanced users, SpyBot Search & Destroy,
http://studserver.uni-dortmund.de/~su1669/spybotsd12.exe

SpyBot home: http://security.kolla.de/
SpyBot How-To: http://www.tomcoyote.org/SPYBOT/

Install either but both are not necessary, reboot, read FAQ and overview, use
online update feature to obtain the latest reference files, scan for Spyware
much like you would with your pre-installed anti-virus scanner.
Rid your machine of unwanted Spyware pests.

HTH

n.b. Jim Byrd - best to run a scanner prior to running Hijack This.


--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_