TechSpot

Hijackers keep sneaking back

By tjsweeney
Apr 4, 2007
  1. First, thanks for this forum and the resources here. I have had repeated problems with various browser hijackers on my kids basement machine. Followed your 15 step process once before about 4 weeks ago, but a host of problems returned, and NOD32 was firing constant warnings at me, though couldn’t clean things up..

    So…, I have once again followed all the recommended steps. This computer is in need of SP2 upgrade (all my others are there), and if you think its clean now, I will do this.

    AVG rootkit came up negative, other 2 logs are attached. There are 2 suspicious files left with recent dates in windows\system32 (all others thankfully cleaned out now), SCA.exe and SMT.exe (not sure about these,)

    Thanks again
    Terry
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Your system is far from clean.

    You haven`t posted an AVG Antispyware log as per these instructions. Please do so, along with a fresh HJT log.

    Regards Howard :wave: :wave:

    This thread is for the use of tjsweeney only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  3. jobeard

    jobeard TS Ambassador Posts: 9,351   +622

    typo

    Clearly your defensive software needs to be reviewed:
    1. upgrade to SP2 (which you're prepared to do :) )
    2. use a router if at all possible
    3. activate at least one/only one firewall
    4. install Spywareblaster to protect from bad ActiveX code downloads
    5. change browser settings to inhibit installs for the LUA users
    6. install / use an AV program that scans email

    It may be required to monitor the system usage to see which sites are being
    visited -- clearly at least one site is infecting your system.

    Spybot Search & Destroy
    has a feature that installs a special HOST file
    to ensure known adware and trojan sites can not be accessed.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...