Malicious code???

[Brenda1231]

Uggg...okay some kind of trojan or something has gotten into hubby's PC.

Whenever we click search from IE toolbar a bunch of(really bad...kiddie stuff) porn sites come up.
I have tried installing a firewall, run antivirus, etc. I have managed to get rid of most of the pop ups by putting them into the restricted sites thru IE security, but there is still one that comes up into the window where the favorite places should be and I can't seem to get that out. Can't find a web address.


Anyone know how to get this off the pc???
We have deleted all files and cookies that we can track to this....it's something like lolitas.net(I would't advise anyone to go there).

Thanks,
Brenda

[Bullet-Man-2]

formating your PC would be the best thing to do.

a: if there is bad "kiddie" stuff, then you SHOULD format. It is illilage to have that kind of stuff on your computer.

b: ...I cant think of any..

I would more then recommence a format

[Philip1952]

Have you tried the program called. Ad-ware.
Here (http://download.cnet.com/downloads/0-10106-108-63806.html) is a place to down load it at. See if it can find an remove the offending piece of spyware causing your problem.
Also check msconfig and see if some program you don't know about is running in the background.
Go into C:windows
Empty the temp folder. The temp internet folder.
If you still have the problem install the program Window Washer. It removes a lot of garbage that most people can't get to. It might get the link that is causing your the problem also.
You can get windows washer Here (http://www.webroot.com/washer.htm). Try it for thirty days.

[Brenda1231]

To Bullet-man...my first thought was to format also..either that or call police. The last thing I need is I need is my hard drive to be called into court for some off the wall reason. In fact I tried to copy some of the web addresses and put them into a word document...and I thought..what will I name this file so that it won;t look like I am looking at these things???
And anyway by blocking all the addreses I could get, eventually I will format the hard drive just to be safe.

Anyway I think I have tracked down the trojan that is causing the problem as a' JS seeker' or something of the sort and have deleted it and everything associated with it.
But the wierd thing is that I was searching for sod(as in grass for lawn) when the sh*$ hit the fan and the pages started coming up. Literally, fifty or so pages would come up until I hit ctrl alt del.
I have a firewall and antivirus and Nortons came up saying it was blocking malicious code, so how did this happen??/ or was it sitting in the PC waiting to be triggered?


And to PHILLIP, I am going to send those sites to hubbys pc and try them in the am.
If you are experienced iv virus/firewall/cable modem then please see and respond to my next post.....

Oh and thanks guys...I was a big No wonder user and somehow lost the link(if anyone know what I am talking about and has a link..sharing is appreciated:)), but am glad to have found this place..y'all are a lot of help!

[Bullet-Man-2]

sure np. Im one of those anti-firewall ppl, mainly because I feel that a firewall just gets in your way. Well mainly for me. I had to configure 10 seperate applications a day for a single firewall (norton at that time). This is mainly because I work a lot with the internet, and I cannot be waiting time trying to configure a firewall!

oh well.

to make my life easyer I just have a secondary backup drive were I store files that I dont want deleted, and just format my harddrive every month or two. It makes windows faster, and more stable =\/.

[Brenda1231]

Bullet man...

actually I used to be a format freak..
Really I did../I used to formta every few months just to clean my hard drive.
I now have a ten month old(Plus two teens) I go to school at night, run a home daycare during the day..and between school and my daycare there is soo much stuff that I cannot afford to lose, formatting has not become as feasable as it used to be.But...I was really wary of the firewall...I thought it would be popping up all the time...but it hasn't. It came up a few times saying an outside PC (remote it said) was trying to access mine, that was it.
But somehow things got thru..cuz both my PC's got viuruses.

[michaeln]

The information that IE browser uses for Start Page/Search Page etc...is stored in the registry at HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main

There you will see an entry in the right hand side of the screen for Start Page Search Page etc...


Just edit the Search Page entry to whatever Search Page you wish to use.

[Bullet-Man-2]

Originally posted by Brenda1231
Bullet man...

actually I used to be a format freak..
Really I did../I used to formta every few months just to clean my hard drive.
I now have a ten month old(Plus two teens) I go to school at night, run a home daycare during the day..and between school and my daycare there is soo much stuff that I cannot afford to lose, formatting has not become as feasable as it used to be.But...I was really wary of the firewall...I thought it would be popping up all the time...but it hasn't. It came up a few times saying an outside PC (remote it said) was trying to access mine, that was it.
But somehow things got thru..cuz both my PC's got viuruses.

im having that problem right now.. It seems with school and homework, and with all these stupid French teachers giving me 2 quizes a week, I barly have time for any good old fasion DOS rumaging.

Well im goning to try to find a GOOD firewall program, maybe that would help me =\

[Fatal_Exception]

when you do search, what is the very first page that comes up? is it an English site? if so, they have a download that will remove their software....

[Brenda1231]

Okay thanks for all the advice.
Somehow we got the prob fixed by customizing search options...although I am going to take a look at the registry keys in a little while.

Again thanks all!
:)

[krazefinn]

A reformat will NOT clean the drive, only a low level format, shredder, or write zeros to drive (or just rewrite something all over the drive) will ERASE suspect disc content. A ereformat simply renames the clusters via the mbr/fat table, but the files themselves will still contain most of their original data. However a reformat will allow you to write over those sectors.

A "government level" shredding rewrites each cluster 7 times, ensuring nothing can "unformat" the drive and identify most, if not all, of the content. Beware!!