Russian Writing appearing on website and news server????

[David Delmonte]

Hi,

Can anyone help ????????

Last night, checked a couple newsgroup whereby some (only some) of the
headers appeared in what looked like Russian writing.......thought little of
this and plodded on.

Today, checked BBC website and one of the news stories under the sports
section was in Russian writing.....this seemed a bit too coincedental for my
liking.

Norton Security alert then popped up stating that someone was trying to
access the web from my computer. Look at details and it stated that this
could be a hacker......

Any advice please!

Have virus scanned with latest updates of norton and no viruses.....

There was a runtime error message at the end of the scan though


What shall I do


TIA - Clive

 

[David H. Lipman]

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt255.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) Update Adaware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinXP, create a new Restore point

* * * Please report back your results * * *

Dave





| Hi,
|
| Can anyone help ????????
|
| Last night, checked a couple newsgroup whereby some (only some) of the
| headers appeared in what looked like Russian writing.......thought little of
| this and plodded on.
|
| Today, checked BBC website and one of the news stories under the sports
| section was in Russian writing.....this seemed a bit too coincedental for my
| liking.
|
| Norton Security alert then popped up stating that someone was trying to
| access the web from my computer. Look at details and it stated that this
| could be a hacker......
|
| Any advice please!
|
| Have virus scanned with latest updates of norton and no viruses.....
|
| There was a runtime error message at the end of the scan though
|
|
| What shall I do
|
|
| TIA - Clive
|
|

 

[David Delmonte]

Dear Dave,

I have managed to go through your instructions.

The virus scan found nothing but the Adaware found about 200 - 300 critical
files which I have deleted.

Since deleting these, I have had a number of attempts from 2 trojans, 'Soket
de Trois VI' and 'Netbus'. Do you think there was any concern ?

Thanks for all your help Dave and hopefully, no one can now access my PC.

Clive