Re: PLS HELP!! Think I've been hacked!!!

From: Mike Burgess (winhelp2002_at_spamthis.com)
Date: 01/11/04


Date: Sat, 10 Jan 2004 23:04:53 -0500

Alan,
t.rack.cc = coolwebsearch trojan

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 01-08-04]
Please post replies to this Newsgroup, email address is invalid

--
"Alan" <anonymous@discussions.microsoft.com> wrote in message
news:06fb01c3d7a1$6c141db0$a601280a@phx.gbl...
> Seeing number of symptons that suggest that.
>
> IE homepage keeps resetting to a "t.track..." address.
> Received scam e-mail re:AT&T bill, and tried to ffwd to
> AT&T. Got this reply ...
> *****************
> Hi. This is the qmail-send program at mailwallout.sgi.int.
> I'm afraid I wasn't able to deliver your message to the
> following addresses.
> This is a permanent error; I've given up. Sorry it didn't
> work out.
>
> <scamcheck@mindspring.com>:
> 207.69.200.154 does not like recipient.
> Remote host said: 554 This mailbox is full.  Please try
> again later. for
> scamcheck@mindspring.com
> Giving up on 207.69.200.154.
> ******************
>
> I have ZoneAlarm, and NAV. Still I can't get rid of the IE
> homepage thing. I real worried about my stuff. Do I need
> to close accounts, etc?
>
> Please help.
>
> Thanks in advance.
>


Relevant Pages

  • Re: search-direct.net
    ... search-direct.net = Coolwebsearch trojan ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... > bunch of links for search-direct.net. ...
    (microsoft.public.security.virus)
  • Re: Norton Virus Report - C:WINDOWSFontswin.hta
    ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... > scripts. ...
    (microsoft.public.security.virus)
  • Re: cant set home page
    ... this type hijack indicates an unpatched machine, ... in "Defense". ... Please visit Windows Update to avoid these exploits. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Home Page
    ... real-yellow-page.com = Coolwebsearch trojan ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... >>ShaZaa from inserting itself as my home page. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: SearchPage
    ... this type hijack indicates an unpatched machine, ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ... "Matt" wrote in message ...
    (microsoft.public.windows.inetexplorer.ie6.browser)

Quantcast