simonrex22

I got a virus that keeps popping up little windows on my desktop asking "Poker?", or "Casino". You click cancel and it brings you to a web page that is powered by google. the url is usually www.easysearch.com, and sometimes www.formyuser.com. They are both the same page. Also If i try to go to one of my bookmarks it takes me to one of those pages.

I ran spybot, Adaware, and NAV. Spydob and AW got the same usual thing. But NAV got about 13 viruses that it could not fix, so i quarantined them and it deleted them. Now when i run Norton it says no immediate threats.

finally, sometimes i got a dangerous script alert. Its usually two files called: iau.exe or msxmidi.exe

I looked those two files up on google and it seemed like they were regular functioning files for windows, but i got confused with everything they were saying.

If you got any suggestions, thanks in advance.

liquidlight

It's not a virus, it's spyware, and it sounds like you've got one of the REALLY nasty heuristic ones.

You can attempt to manually clean it but with a hijack that severe you may be looking at a reformat or using the System Restore wizard to rollback the computer.

Anybody know of any good browser hijacking detection/removal programs?

__________________
Halfway to hell and picking up speed.

feelgood

Please check out http://www.tfproject.org/tfp/showthread.php?t=48137 since it's a thread discussing execlusively (sp) on how to get rid of spywares/virus as well recommended spyware removers.

I recommend spyboy search and destroy and Ad ware.

Also, check your startup configuration (go to run->cmd->msconfig) and click on to startup tab and uncheck anything that doesn't seem right.

__________________
Looking out the window, that's an act of war. Staring at my shoes, that's an act of war. Committing an act of war? Oh you better believe that's an act of war

vinaur

After checking your startup list, check your running processes and lookup what each of them does over (Task List Program descriptions)

__________________
If you multiply that by infinity and take it to the depths of forever, you will, perhaps, get just a glimpse of what I am talking about. --Meet Joe Black--

santafe5000

To get rid of some of the spyware that re-installs itself:
Turn off system restore
Re-start in safe mode
Run Ad-Aware, SpyBot, and any other spyware removal tools you have
Restart in normal mode
Turn system restore back on(if you use it)
This will usually get rid of those that hide in system files that are backed up by system restore. This has worked for me on several difficult removals.
Got this tip from the AVG Forum

__________________
When all else fails, QUIT.

soccerchamp76

http://www.tfproject.org/tfp/showthr...hlight=spyware

I made that thread a bit ago and I feel that it is more comprehensive than the previous thread discussed.

__________________
Brian Griffin: Ah, if my memory serves me, this is the physics department.
Chris Griffin: That would explain all the gravity.

Rlyss

Definitely look into one called CWS shredder, it should be mentioned in the links the guys have posted here. It's one of the lesser known adware removers and I think it gets stuff that Ad-Aware and Spybot have trouble with.