Re: http://cashsearch.biz/redir.php - can't get rid of it!
From: BG250 (anon_at_anon.com)
Date: 05/28/04
- Next message: Malke: "Re: Internet disconnection virus"
- Previous message: Jim Macklin: "Re: victim of premium call rate dialler software needs help"
- In reply to: Jason Wade: "Re: http://cashsearch.biz/redir.php - can't get rid of it!"
- Next in thread: Jason Wade: "Re: http://cashsearch.biz/redir.php - can't get rid of it!"
- Reply: Jason Wade: "Re: http://cashsearch.biz/redir.php - can't get rid of it!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 28 May 2004 07:36:11 -0400
I booted to safe mode with network, backed up the data. I reinstalled
Windows 2000 (formatting HDD).
I'm disappointed that couldn't get rid of this one. It takes forever to
reload a computer with all the software and patches we have to load. It
would be nice if someone with experience with this stubborn scumware can
ring in here incase it happens again. I'm considering taking away the
Internet access from people in the office because some people will not
listen and surf non business related sites and pickup the scum.
bg
"Jason Wade" <savon1414_050404+gb2.nospam@earthlink.net> wrote in message
news:pan.2004.05.27.20.45.46.428490.756@earthlink.net...
> On Thu, 27 May 2004 13:29:07 -0500, BG250 wrote:
>
> > I can't get rid of this. I used adaware and spybot 1.3. I got the latest
> > downloads for these and removed everything. I killed some running
> > processes I wasn't familiar with. I search the registry and replaced it
> > with www.google.com yet it resets itself back to cashsearch. It also
> > keeps changing the HOSTS file if I clean it and it adds it back.
> > Computer keeps locking up when I try to backup files from it (I was just
> > going to reformat and reload windows). I can't browse the Web either. I
> > unplugged the Internet connection to try to clean it.
> >
> > This is a difficult one and very little about it on the Web. Any ideas?
> > bg
>
> Hello BG250
>
> Some of today's nasties prevent you from backing up because, they know
> that a reformat is the next thing.
>
> Since the scumware won't let you backup to cdrom, I suggest that you put
> another hard disk into the 'puter and copy your data (data only!) to that
> disk.
>
> Then reformat and reinstall and copy your stuff back from the extra hd.
>
> You should still do another virus check after the system is rebuilt
> because some of the data you saved might have been infected.
>
> Remember, even word documents can contain viruses.
>
> Also, this is important, enable your firewall before you go online again.
> If you have winxp, use the icf:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;283673
>
> If on w2k, get zonealarm:
> http://www.zonelabs.com/store/content/home.jsp
>
> And if you haven't already, please read these documents:
> http://www.sans.org/rr/papers/index.php?id=1298
> http://www.cert.org/tech_tips/before_you_plug_in.html
>
> good luck and safe computing
>
> --
> Stop probing me on port 445 please.
>
- Next message: Malke: "Re: Internet disconnection virus"
- Previous message: Jim Macklin: "Re: victim of premium call rate dialler software needs help"
- In reply to: Jason Wade: "Re: http://cashsearch.biz/redir.php - can't get rid of it!"
- Next in thread: Jason Wade: "Re: http://cashsearch.biz/redir.php - can't get rid of it!"
- Reply: Jason Wade: "Re: http://cashsearch.biz/redir.php - can't get rid of it!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
