Chuck
Thu May 06 16:16:17 CDT 2004
On Thu, 6 May 2004 13:28:19 -0700, "Helena" <*email_address_deleted*> wrote:
>Hello, i'm brazilian, and maybe there will be a lot of
>mistakes of language. I need your help!
>
>A site called
http://nkvd.us, that after entering this
>name becomes as "
http://searchpage.cc"
>invaded my computer. Some sites that i try to enter
>becomes not available and enter direct in this site of
>search.
>When you enter the link where they say "if problem", it
>opens a page saying this:
>
>If you don't want to continue using this page, follow
>instruction below:
>
>
>1. Download uninstaller (right click and choose "Save
>target as.." from pulldown menu
>
>2. Run it
>
>3. Reboot your PC
>
>4. Run it second time
>
>5. Change your start page to "about:blank" in the IE
>settings (Tools -> Internet Options)
>
>6. Click "Start" -> "Run" -> regedit
>
>7. Go to
>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersio
>n\Explorer\Browser Helper Objects\
>
>8. Select key {FF1BF4C7-4E08-4A28-A43F-9D60A9F7A880} and
>delete it
>
>Enjoy with your clear PC.. and stop looking for free porn -
> try to buy membership on a good paysite
>
>
>
>
>But, the question is that this porn site opened without i
>look for, when i was making a search on Google.
>
>I tried to do what they say, but i couldn't, and i don't
>have money to pay someone do to this to me.
>
>Help me please!
How current is your virus protection? Try these free online virus scans:
<
http://www.bitdefender.com/scan/license.php>
<
http://www.pandasoftware.com/activescan/com/activescan_principal.htm>
<
http://security.symantec.com/ssc/home.asp>
<
http://housecall.trendmicro.com/housecall/start_corp.asp>
Now check for, and learn to defend against, additional carriers of infection.
First, download LSP-Fix and WinsockXPFIx from <
http://www.cexx.org/lspfix.htm>,
and CWShredder from <
http://www.majorgeeks.com/download4086.html>. All are
free.
Next, close all Internet Explorer and Outlook windows, then run CWShredder.
Have it fix all variants.
Now check for, and remove, spyware. Get HijackThis
<
http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<
http://www.safer-networking.org/index.php?page=download>. Both free.
1) Install and run Spybot. First update it ("Search for updates"), then run a
scan ("Check for problems"). Trust Spybot, and make all recommended deletions.
2) Install and run HijackThis. Do NOT make any changes immediately. Save the
HJT Log.
3) Have your HJT log interpreted by experts at one or more of the following
forums (and post it here):
<
http://forums.net-integration.net/>
<
http://www.spywareinfo.com/forums/>
<
http://forums.tomcoyote.org/>
<
http://www.wilderssecurity.com/>
If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix and / or WinsockXPFIx.
Finally, improve your chances for the future.
Harden your browser. There are various websites which will check for
vulnerabilities, here are three which I use.
http://www.jasons-toolbox.com/BrowserSecurity/
http://bcheck.scanit.be/bcheck/
https://testzone.secunia.com/browser_checker/
Harden your operating system. Check at least monthly for security updates.
http://windowsupdate.microsoft.com/
Block possibly dangerous websites with a Hosts file. Three Hosts file sources I
use:
http://www.accs-net.com/hosts/get_hosts.html
http://www.mvps.org/winhelp2002/hosts.htm
(The third is included, and updated, with Spybot (see above)).
Maintain your Hosts file with:
eDexter <
http://www.accs-net.com/hosts/get_hosts.html>
Hostess <
http://accs-net.com/hostess/>
And Helena, please don't contribute to the spread of email address mining
viruses. Learn to munge your email address properly, to keep yourself a bit
safer when posting to open forums. Protect yourself and the rest of the
internet - never post your address unmunged.
http://www.mailmsg.com/SPAM_munging.htm
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.