Re: trusted web sites in ie6.0
From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 02/25/05
- Previous message: bbxrider: "trusted web sites in ie6.0"
- In reply to: bbxrider: "trusted web sites in ie6.0"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 24 Feb 2005 21:11:32 -0500
"bbxrider" <bxtrap01@comcast.net> wrote in message
news:OIUcs3tGFHA.576@TK2MSFTNGP15.phx.gbl
| don't see a group for ie security specifically so thought i'd try here
| if there's a more appropriate group for this problem please let me know
| i was infected by trojan.admincash, norton antivirus got some of it, there
| were
| some deletions i had to manually do in the registry, and hijackThis found a
| lot too, but there
| are 3 'trusted site' entries left from the hijackThis scan that the
| hijackThis fix doesn't
| get rid of and i have searched all over the registry and in i6/tools/etc and
| can't find
|
| O15 - Trusted Zone: *.finefind.nettraffic2cash.biz
| O15 - Trusted Zone: *.frame.crazywinnings.com
| O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
|
| does anybody know where these might be locatated and how i can get rid of
| them
| the only place i have seen trusted zones is in ie6
| my system seems to be ok/disinfected but i would much prefer to clean this
| out
| as well
Dump the contents of the IE Temporary Internet Folder cache (TIF)
start --> settings --> control panel --> internet options --> delete files
1) Download the following three items...
Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp
Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp
Ad-aware SE (free personal version v1.05)
http://www.lavasoftusa.com/
Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt442.zip
Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.
2) Update Ad-aware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
5) Using both the Trend Sysclean utility and Ad-aware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point
* * * Please report back your results * * *
-- Dave http://www.claymania.com/removal-trojan-adware.html
- Previous message: bbxrider: "trusted web sites in ie6.0"
- In reply to: bbxrider: "trusted web sites in ie6.0"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|