porn site keeps popping up

  palinka 17:26 29 Jul 04
Locked

A neighbour had computer problems; advice from this forum suggested it was caused by possibly a virus and also perhpas spyware. I ran Avast - no virus found. I ran Spybot - it found 4or 5 suspect files and dealt with them. Then I dialled up using OE and the following web site appeared in an IE window (it's a porn site, obviously, so beware)click here.

I'm sure that this is what is causing the problems eg.could not update Norton; it kept dissappearing from the monitor while in the update process). I've deleted Norton (due to expire tomorrow anyway). Now I find I can't install AVG from a disk onto the infected computer. Sometimes it allows me as far as entering the serial number, but while I'm doing that the box disappears from the monitor. Neighbour's connection to isp NASCR is pathetic: still only 31.2 again today, so I imagine it's always as slow as that. Could that be anything to do with the problem? But chiefly, how do I get rid of the porn site?

  Fruit Bat /\0/\ 17:36 29 Jul 04

Anti Virus :-
Avast4

click here
Antivir click here
AVG antivirus click here

Antivirus on line checks:-
Panda click here
Trend Online Check click here

Anti Spyware :-
Adaware click here
Spybot S&D click here
Spywareblaster click here

  Indigo 1 17:58 29 Jul 04

Also this site may help click here

  Nellie2 18:30 29 Jul 04

Download hijackthis click here, save it to it's own folder eg My Documents/hijackthis. Run it and click the scan button, if you wait a little while the scan button will change to save log... when you click save log you will be prompted to save the logfile somewhere. When you do this a text file will pop up. Copy and paste the whole of the text file here for me to have a look at, you may have to do it in two posts as there is a limit to the number of words you can post in one post here.

DO NOT fix anything yet because a lot of what hijack this lists is useful and even essential to the running of your PC.

I will pop back later on to see if you have posted back

  palinka 18:46 29 Jul 04

thanks, Nellie2. I'll do as you say, but it won't be before tomorrow.

I first described this problem in click here but decided I'd better start a new thread as I'd ticked the other resolved.
Fruit Bat /\0/\, thank you; but I've already run Avast which found nothing and Spybot that found 4 or 5 files that were suspect and it dealt with them.

I'll try Nellie2's suggestions tomorrow.
Thank you very much everyone. Keep the suggestions coming in.

  Nellie2 19:06 29 Jul 04

I'm out on a girlie night out tomorrow night.. but I shall take a look on Saturday. :)

  palinka 19:24 29 Jul 04

Nellie2, I popped over and did it immediatelty. Here it is: Logfile of HijackThis v1.98.0
Scan saved at 19:10:30, on 29/07/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\smsc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\B'SCLI~1\Win2K\BSCLIP.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\dailin.exe
G:\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [B'sCLiP] C:\PROGRA~1\B'SCLI~1\Win2K\BSCLIP.exe
O4 - HKLM\..\Run: [EPSON Stylus C82 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C82 Series" /O5 "LPT1:" /M "Stylus C82"
O4 - HKLM\..\Run: [avserve2.exe] C:\WINDOWS\avserve2.exe
O4 - HKLM\..\Run: [Win32 USB2 Driver] smsc.exe
O4 - HKLM\..\Run: [Micro Update] dailin.exe
O4 - HKLM\..\RunServices: [Win32 USB2 Driver] smsc.exe
O4 - HKLM\..\RunServices: [Micro Update] dailin.exe
O4 - HKLM\..\RunOnce: [Win32 USB2 Driver] smsc.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Win32 USB2 Driver] smsc.exe
O4 - HKCU\..\Run: [Micro Update] dailin.exe
O4 - HKCU\..\RunOnce: [Win32 USB2 Driver] smsc.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

  Belatucadrus 19:25 29 Jul 04

Next step up from the avast virus cleaner/stinger type freebie is the Microworld anti virus toolkit click here it's much more comprehensive in what it searches for and as such is much bigger, about 4MB so you'd need to run it from a CD if you couldn't download it direct to the infected machine, as with the other downloads, it's a scanner repair program and provides no protection after you've run it and it's done its job. Another one to try is the a² free malware cleaner click here

If you still can't instal AVG try avast!4 the full anti virus package click here I think it's a better product than AVG 6 anyway.

  palinka 19:45 29 Jul 04

thanks, Belatucadrus. If I can't install AVG, then will I have any more luck with Avast4? I download to my pc and save to disk then take it to neighbour, and even by that method can't install AVG.
I think it's whatever is causing the pop-up is also having an effect on any AV. I even had difficulty uninstalling Norton.
I'll try mwti.net - thanks for the suggestion. I'll consider installing Avast4 when I've completed the process that I've now started following Nellie2's advice. Neighbour is now without any AV, but she won't be going on line until this is fixed, and I'll deal with the AV asap after that.

  gudgulf 19:46 29 Jul 04

click here something to be reading before Nellie2 replies.

  gudgulf 19:56 29 Jul 04

You might also find this useful click here (MicroWorld anti virue toolkit)

This thread is now locked and can not be replied to.

iPhone 7 review: a range of small updates add up to an excellent phone

1995-2015: How technology has changed the world in 20 years

How New York’s Stylin’ Seniors became a golden social media campaign

23 Apple Watch tips & secret features: Master your Apple Watch, Apple Watch Series 1 or Apple…