Re: The Terminator

anonymous_at_discussions.microsoft.com
Date: 08/16/04


Date: Mon, 16 Aug 2004 10:42:15 -0700

I had a very similar virus and could not get rid of it
with any AV scanner. I finally found an application
called Adware Away (NOT Adaware). Then, I ran the hijaker
scan and could eliminate the virus.

Hope this helps :-)

>-----Original Message-----
>On Sun, 15 Aug 2004 22:47:55 -0400, "Jim"
<no_email_pls@nomail.com>
>wrote:
>
>>I'm having a virus and/or spyware problem I can't
eliminate. First, it
>>hijacks my IE homepage and I can't change it back. The
hijack web address
>>includes a five-character file name (always five
characters, different name
>>everytime I eliminate the problem and it comes back)
with a dll extension.
>>It takes me to a search site where fake pop-up windows
float down from
>>within IE telling me I have a spyware problem and to
click OK. I usually
>>just right-click on the IE app on the task bar to close.
>>
>>Also while I'm on the web I get real pop-up windows
with the phrase "Only
>>the best" in the title bar. Again, I've been closing
these down from the
>>taskbar.
>>
>>Finally, every time I run an app I get a window saying
it is preparing to
>>install MS Office XP. It says it needs to install a
missing component. I
>>get this window for most apps I start, even Norton!
>>
>>I use Norton AntiVirus v10.0.1.13 which checks for
threats as well as
>>viruses. I update my virus definitions at least once a
week, usually more
>>often. I also run Ad-Aware and Spybot. After the
above incidents occur, I
>>run all three in Safe Mode (restarting after each app
runs) and it turns up
>>all sorts of files and/or registry entries to delete.
Ad-Aware and Spybot
>>seem to delete the nasty files it finds. But often
Norton can't delete the
>>file, message say "Delete failed." I then use Windows
Explorer to
>>find/delete the files.
>>
>>I've run these programs dozens of times and the problem
keeps coming back
>>("I vill be back"). Any helpful suggestions would be
most appreciated. I'm
>>at the point where I'm ready to just re-format my hard
drive and re-install
>>everything. In advance, Thanks.
>>
>>Jim
>>
>Have you tried a second opinion on the AV side of things.
>Try an on-line scan @ www.pandasoftware.com/activescan
>I have found some AV products don't sometimes do what I
need them to.
>
>I have been playing with this product lately also
>Advanced Process manipulation (APM) from
www.diamondcs.com.au
>It tells me what processes are running on the machine
and what hooks
>they have. Has helped in a couple of spyware tracings
that really
>ticked me off.
>
>There is also Hijack this, helps in some of these cases.
>hth
>John Brown
>Bears are always happy, we get to hibern8
>.
>



Relevant Pages

  • Re: Dummyapplication open! Help
    ... When you suspect a virus, use multiple AV resources, since you have Norton ... Which is bad, you must be familiar with every non-system app that loads, ... >>> screen game it minimizes the game to the taskbar, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: The Terminator
    ... >just right-click on the IE app on the task bar to close. ... >get this window for most apps I start, even Norton! ... There is also Hijack this, helps in some of these cases. ...
    (microsoft.public.security.virus)
  • Re: help again !!!
    ... Were the virus definitions up-to-date? ... If Windows XP, was internal firewall enabled? ... Third party firewall (like Zone Alarm or Norton Personal Firewall) present? ...
    (microsoft.public.security.virus)
  • Re: hacktool.rootkit HELP
    ... | Thanks for the advice. ... Norton Antivirus reported the following: ... |>> online virus scanners and Norton antivirus numerous times and all ... |>> The virus definitions date that found this problem was 10/19/05. ...
    (microsoft.public.security.virus)
  • Re: Anti-spy ware
    ... Norton Alert that comes up says it's from windows/addins/tuilabs.dll and the ... had a Norton Antivirus alert that tells me it has detected a virus and is ... Any threats around and we can take care of it. ...
    (microsoft.public.security)