Miracleburn?

trendless · May 19, 2005

I keep getting IE popups, whether i'm surfing the net or not, that have ads for miracleburn crap in them. That, and after a restart there is a dailer window that comes and and asks for confirmation b/c "it costs $2.99 a minute"... of course I say no, but that's beside the point. I was wondering if there's something specific to get rid of this? I've downloaded the latest AdAware SE Personal and Spybot S&D and updated both, run scans, restarted and run scans before anything else loads, run scans in safemode, manually removed suspicious looking startup items, manually deleted all the files in the local settings\temporary internet files folder, disabled system restore etc etc etc... still it pops up. Now it delays until I first start IE, but it's still there. Anyone? Any suggestions? I've also scanned for viruses using Panda 2k4 (also updated). Help!?

Tl..

trendless · May 19, 2005

Miracleburn Update

So I've gotten rid of everything but that popup (ads1.revenue.net)... it comes back as either ISTbar or Elitebar in PestPatrol. I've scanned in safemode and not, standard and custom scans... and it keeps coming back. Still don't get it.. it shows up in hkey_local_machine\software\lq and hkey_current_user\software\lq

stupid spyware.

Tl..

chaslang · May 21, 2005

Re: Miracleburn Update

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

Log in or Sign up

Miracleburn?

trendless Private E-2

trendless Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member