Security

Ask something
Discussion Locked

Fast Loans Virus / Spyware

0 helpful
14 replies

by bldsm

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have fallen victim to either a virus or spyware that will not go away. Two icons appear on my desktop at various times when I am browsing the net. One says "Fast Loans" and the other"ONline Pharmacy". Also a bookmark appears in my IE 6 called VIP Porn. This is something I have never looked at or subscribed to. I delete the 3 entries, runb Spybot S&D, it remnoves the registry entries and says all is well but the next time I log in the 3 things come back.

I haven't found an anti-virus program that can remove it. Now it hangs my internet connection up and dials a porn site.

There are no dialer programs listed in control panel - add or remove programs.

HELPPPPPPP.

Thanks Bruce

14 replies

by bldsm

Also the properties of the icons list a URL called aboutclicker and the web page that always comes up replacing my own web page is about: blank but displays a list of dozens of site links.

by carlos.nino

That's strange, Spybot should be able to do the trick. Did you update Spybot and made your system inmune after solving the problems?

by bldsm

Yep, updated it every day. I agree it's worked for everything until now.

by tabcomputers2002

You didn't mention what OS you have, but if you have 2000 or XP, you need to disable the "SYSTEM RESTORE" option before you run spybot. Otherwise your system will keep putting them back. After you disable the restore and run spybot or ad-aware, you'll want to reboot and re-enable the system restore.

Hope this helps.
Tim

by pierrejamme

As Tim said, sometimes you need to disable system restore for ME & Xp. If you don't know how to do this check this link:
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
I would also check yours hosts file, see:
http://support.microsoft.com/?kbid=326155

the file is located in your 386 directory and it should only contain the following:
127.0.0.1 localhost
If there is anything else in there, delete it and reboot, with system restore off.
Hope this helps,
Peter

This discussion is closed to new replies.