Re: trusted web sites in ie6.0

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 02/25/05

  • Next message: Belfastlad: "HotBar issue"
    Date: Thu, 24 Feb 2005 21:11:32 -0500
    
    

    "bbxrider" <bxtrap01@comcast.net> wrote in message
    news:OIUcs3tGFHA.576@TK2MSFTNGP15.phx.gbl
    | don't see a group for ie security specifically so thought i'd try here
    | if there's a more appropriate group for this problem please let me know
    | i was infected by trojan.admincash, norton antivirus got some of it, there
    | were
    | some deletions i had to manually do in the registry, and hijackThis found a
    | lot too, but there
    | are 3 'trusted site' entries left from the hijackThis scan that the
    | hijackThis fix doesn't
    | get rid of and i have searched all over the registry and in i6/tools/etc and
    | can't find
    |
    | O15 - Trusted Zone: *.finefind.nettraffic2cash.biz
    | O15 - Trusted Zone: *.frame.crazywinnings.com
    | O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
    |
    | does anybody know where these might be locatated and how i can get rid of
    | them
    | the only place i have seen trusted zones is in ie6
    | my system seems to be ok/disinfected but i would much prefer to clean this
    | out
    | as well

    Dump the contents of the IE Temporary Internet Folder cache (TIF)

    start --> settings --> control panel --> internet options --> delete files

    1) Download the following three items...

             Trend Sysclean Package
             http://www.trendmicro.com/download/dcs.asp

             Latest Trend signature files.
             http://www.trendmicro.com/download/pattern.asp

             Ad-aware SE (free personal version v1.05)
             http://www.lavasoftusa.com/

    Create a directory.
    On drive "C:\"
    (e.g., "c:\New Folder")
    or the desktop
    (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

    Download SYSCLEAN.COM and place it in that directory.
    Download the Trend Pattern File by obtaining the ZIP file.
    For example; lpt442.zip

    Extract the contents of the ZIP file and place the contents in the same directory as
    SYSCLEAN.COM.

    2) Update Ad-aware with the latest definitions.
    3) If you are using WinME or WinXP, disable System Restore
            http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
    4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
    5) Using both the Trend Sysclean utility and Ad-aware, perform a Full Scan of your
            platform and clean/delete any infectors/parasites found.
            (a few cycles may be needed)
    6) Restart your PC and perform a "final" Full Scan of your platform using both the
            Trend Sysclean utility and Adaware
    7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
            System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
    8) Reboot your PC.
    9) If you are using WinME or WinXP, create a new Restore point

    * * * Please report back your results * * *

    --
    Dave
    http://www.claymania.com/removal-trojan-adware.html
    

  • Next message: Belfastlad: "HotBar issue"

    Relevant Pages

    • Re: restore Cd how to use
      ... Do you highlight the text and use the 'copy' function such that you can ... start by turning OFF the System Restore function.. ... >> You will also need to download Spyware removal software.. ... >> HijackThis is a popular and effective tool.. ...
      (microsoft.public.windowsxp.newusers)
    • Re: Virus/Worms
      ... Download the following two items... ... If you are using WinME or WinXP, disable System Restore ... Reboot your PC into Safe Mode ...
      (microsoft.public.windowsxp.security_admin)
    • Re: heretofind problem
      ... (e.g., "c:\New Folder") ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ...
      (microsoft.public.scripting.virus.discussion)
    • Re: Need help IE uncrontrollable website access
      ... (e.g., "c:\New Folder") ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ...
      (microsoft.public.security.virus)
    • Re: mcafee32.exe
      ... Dump the contents of the IE Temporary Internet Folder cache ... Download SYSCLEAN.COM and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ...
      (microsoft.public.security.virus)

  • Quantcast