Re: Porno site attacks

From: TonyKlein (jekaspam_at_xs4all.nl)
Date: 05/17/03


Date: Sat, 17 May 2003 13:05:27 +0200


Ad-Aware usually does do a fine job.
SpyBot S&D is another fine program: http://spybot.eon.net.au/

After installing, press Online, and search for, put a check mark at, and install all updates.

Now close all browser windows, hit 'Check for Problems', and have SpyBot remove all it finds.

NOTE: SSD will sometimes not be able to remove all active components in the first 'run'.
In that case you will get a dialog asking you to run SSD at next start.
Click yes and reboot.
Subsequently SSD will come up before the system puts these components 'in use', and it will then be
able to 'fix' the rest.

When you've done all that, test your system, and see whether your problem is gone.

If it isn't, go to http://www.tomcoyote.org/hjt/ , and download Hijack This.

Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, and save the log somewhere

Next, go to http://www.spywareinfo.com/forums/

Sign in, go to the Browser Hijacking/Spyware Removal section, press "new topic", and copy and
paste the contents of the Hijack This log into your new message. You'll get expert assistance in
dealing with your problem, and you'll be rid of it in no time at all.

And you may want to read this: So how did I get this spyware in the first place?:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi?s=3eb8155d5ca3ffff;act=ST;f=38;t=3051

-- 
Cheers,  Tony
NOTE:  Please reply to the group,  and not to me personally.
E-mail address is void.
"Lanwench [MVP - Exchange]" <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in
message news:e7qf8gAHDHA.2236@TK2MSFTNGP10.phx.gbl...
> General housekeeping:
> Get rid of spyware and other critters with AdAware - www.lavasoftusa.com
> Get a firewall - www.sygate.com or www.zonealarm.com are some freebies
> Get good AV software - www.grisoft.com has a free one
> Run Windows Update religiously.
>
>
> Joseph Miller wrote:
> > I have tracked the url to WINDOWS\SYSTEM\SHDOCLC.DLL
> > \dnserror.htm#http:\\sexmaxx.com\\freegalleries.htm
> > if i cannot find a way to remove these people from my
> > computer i will have to travel by regular mail and the
> > internet will have been a could of been dream. can you
> > help or am i employing the federal post office.
>
>

Quantcast