Re: http://cashsearch.biz/redir.php - can't get rid of it!
From: Jason Wade (savon1414_050404+gb2.nospam_at_earthlink.net)
Date: 05/28/04
- Next message: Jupiter Jones [MVP]: "Re: Worm removal not working...."
- Previous message: anonymous_at_discussions.microsoft.com: "google doesnt load..."
- In reply to: BG250: "http://cashsearch.biz/redir.php - can't get rid of it!"
- Next in thread: BG250: "Re: http://cashsearch.biz/redir.php - can't get rid of it!"
- Reply: BG250: "Re: http://cashsearch.biz/redir.php - can't get rid of it!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 28 May 2004 01:24:31 GMT
On Thu, 27 May 2004 13:29:07 -0500, BG250 wrote:
> I can't get rid of this. I used adaware and spybot 1.3. I got the latest
> downloads for these and removed everything. I killed some running
> processes I wasn't familiar with. I search the registry and replaced it
> with www.google.com yet it resets itself back to cashsearch. It also
> keeps changing the HOSTS file if I clean it and it adds it back.
> Computer keeps locking up when I try to backup files from it (I was just
> going to reformat and reload windows). I can't browse the Web either. I
> unplugged the Internet connection to try to clean it.
>
> This is a difficult one and very little about it on the Web. Any ideas?
> bg
Hello BG250
Some of today's nasties prevent you from backing up because, they know
that a reformat is the next thing.
Since the scumware won't let you backup to cdrom, I suggest that you put
another hard disk into the 'puter and copy your data (data only!) to that
disk.
Then reformat and reinstall and copy your stuff back from the extra hd.
You should still do another virus check after the system is rebuilt
because some of the data you saved might have been infected.
Remember, even word documents can contain viruses.
Also, this is important, enable your firewall before you go online again.
If you have winxp, use the icf:
http://support.microsoft.com/default.aspx?scid=kb;en-us;283673
If on w2k, get zonealarm:
http://www.zonelabs.com/store/content/home.jsp
And if you haven't already, please read these documents:
http://www.sans.org/rr/papers/index.php?id=1298
http://www.cert.org/tech_tips/before_you_plug_in.html
good luck and safe computing
-- Stop probing me on port 445 please.
- Next message: Jupiter Jones [MVP]: "Re: Worm removal not working...."
- Previous message: anonymous_at_discussions.microsoft.com: "google doesnt load..."
- In reply to: BG250: "http://cashsearch.biz/redir.php - can't get rid of it!"
- Next in thread: BG250: "Re: http://cashsearch.biz/redir.php - can't get rid of it!"
- Reply: BG250: "Re: http://cashsearch.biz/redir.php - can't get rid of it!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|