View Single Post
Old 12-10-2005, 03:16 PM   #24 (permalink)
MicroBell
Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter
 
MicroBell's Avatar
 
Join Date: Sep 2004
Location: Carmichaels, PA-USA
Posts: 6,963
OS: Windows 7


Send a message via ICQ to MicroBell Send a message via MSN to MicroBell
Lou,

Just running low on Ideas...buddy. This thing acts like the ContextPlus/Apros infection...and the tool we use to discover it and clean it off is only for XP/2000 systems. That said...it still leaves traces on a Windows 98 system..which you seam to be void of. It uses a 'Rootkit' to hide itself...but can't do that on your system as it's not NT based.

I'm going to ask another analyst to take a peek here just to make sure I'm not missing something. In the meantime lets check for a Java infection.....

Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky Online Scanner

Answer Yes, when prompted to install an ActiveX component.
  • The program will then begin downloading the latest definition files.
  • Once the files have been downloaded click on NEXT
  • Locate the Scan Settings button & configure to:
    • Scan using the following Anti-Virus database:
      • Extended
    • Scan Options:
      • Scan Archives
      • Scan Mail Bases
  • Click OK & have it scan My Computer
  • Once the scan is complete, it will display if your system has been infected.
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply
* Turn off the real time scanner of any existing antivirus program while performing the online scan
__________________
We Are The BORG Spyware KILLER and Adware Destroyer!





Spyware/Adware Removal Tools
Hijackthis
Ad-aware SE
Spybot Search&Destroy
SpywareBlaster
CWShredder

Last edited by MicroBell; 12-10-2005 at 04:17 PM.
MicroBell is offline