PLEASE HELP! I'm being re-routed to sites by a terrorist spyware!

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by iceonfire, Sep 22, 2004.

  1. iceonfire

    iceonfire Private E-2

    Hi all,

    Hope someone out ther can give me some help!
    This started happening just this week and has got me STUMPED!
    Am running Win XP Home SR1 on a laptop and have Norton's Anti-Virus with updated definitions, AdAware, SpyBot, EasyCleaner and STILL managed to get whacked by this trojan, virus, rogue, whatchamacallit which now re-routes IE6 on startup to these sites:

    ReV0lt.net and loveearth.net

    Also every now and then I receive a message telling me my system has been compromised and to go to a spyware site which I believe is palsoft?

    I have updated with MS patches, have run norton's, AdAware, Spybot all in Safe Mode and NOTHING comes up yet my system is so very slow suddenly esp. IE6 which normally whizzes through pages!

    I have the Hijaak This log but won't attach unless requested. There are some weird lines in the log including KIMOCHI.EXE??? What in heaven is that program? Sounds like pickled lettuce!

    Anyway guys, if anyone has suggestions on how to fix this without having to reformat the HDD, Please respond! Thanks kindly!

    Sincerely....
    IceonFire
     
  2. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

  3. iceonfire

    iceonfire Private E-2

    Okay, thanks....I downloaded no less than 6 different spyware-remover programs last night and ran them, deleting all the located stuff BUT....as soon as I startup Win XP and connect to the Net, IE6 gets hijacked and re-routed to www.rev0lt.net......how and why is it still doing this? Where do I locate its origins in the Registry? <sigh>
    I will post a copy of my Hijaakthis log text file shortly......hoping for a "vaccine" to cure all trojans, spyware, hijackers and virii!!!!!

    Cheers for a great forum!

    IceOnFire
     
  4. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Post your Hijack This log file per instructions and we will track it down for you.
     
  5. iceonfire

    iceonfire Private E-2

    Muchas Gracias! If you need a copy of my Win Registry file, just yell out! I'm pullin' my hair out trying to weed out this rogue but doesn't show up in any of the dozen spy removers nor in Norton's AV????!!

    Have posted my HijaakThis log text file as an attachment in a seperate thread.

    My advice is to ensure you have up-to-date definitions and firwall protection! If it ain't on, IT AIN'T ON!

    Cheers
    IoF
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds