//flex table opened by JP

Click to See Complete Forum and Search --> : virus/spyware problem needs solving


Avner
04-09-2006, 10:32 AM
Ladies and Gentlemen, thankyou for your attention :)

I just got back from tour and found that my brothers has completely messed up the pc by going on sites that he really shudnt have been on (i.e. porn)

Ive cleared up most of the spyware, diallers and stuff he managed to get, but the following thigs still happen, and Norton says my pc is perfectly clean. har har

here is what goes on:

Every half hour or so, my modem is disconnected, and a dialler pops up. I terminate it by going on task manager and stopping the application. When I do this, it tells me that the process being terminated is dcomcfg.exe. I cannot find this .exe file anywhere on my pc

4 sites are routinely moved to the "trusted sites" section of IE. They are all porn sites, and when I move them to the restricted sites section, they are, after a certain period of time, moved back to the trusted sites section.

My starting page is set at www.skymasters.biz, and reverts back to this after a while even when i change it.

When my modem disconnects and the dialler pops up, 4 links are created, one on my desktop, one in my documents and two in my start menu. All these links lead to one site, www.archiviosex.net, an italian website (im italian, to explain that)

When I disconnect my pc totally from the net, every half hour or so a pop up comes up with the header www.skymasters.biz/301, which says "You cannot proceed", failing when trying to connect to the net. I close this, and then an IE window opens trying to connect to www.sexvideopro.com or .net, and doesnt succeed.


Neither I nor Norton can find anything that might be causing this mess...

So, while I counterfeit a 7,000 euro phone bill to give to my brother, could I have some thoughts and help please?

Danke schon

Avner :r

Sterling_Aug
04-09-2006, 10:37 AM
http://www.sysopt.com/forum/showthread.php?t=161595


Start with Adware Away, then Windows Defender, then keep trying others until it is cleaned.

Delete IE from your shortcuts, program lists and start using Fitefox browser.

Rocketmech
04-09-2006, 10:49 PM
Tip : Scan and clean in safe mode as much as possible . You may need to scan / clean several times with the same program .

herosrest
04-11-2006, 05:48 PM
A quick wiz on google flips up some stuff -

http://www.google.co.uk/search?hs=Slk&hl=en&lr=&client=opera&rls=en&q=skymasters&as_q=dialer&btnG=Search+within+results

It's a nasty little booga.

Other searches l skimmed made brief reference to the Lovegate worm.

Various fixes are detailed in the search hits.

Might be time for a drive format and clean re install.

Best keep an eye on the phone bill.