Re: web popup virus?

Article View: alt.comp.virus

Article #384

#384

From: Mathew Carter ( Home Scene )
Date: Mon, 10 Dec 2001 23:48

21 lines
1680 bytes

i had this sort of thing last week, it ended up being a trojan horse

i downloaded a trojan remover program and it cleaned it up fine

Mathew Carter
www.homescene.com.au

"Hiroko" <jnapier@spam@21stcentury.net> wrote in message
news:9v3bqo$m0h$1@bob.news.rcn.net...
> I seem to have a virus that pops open web sites at random times.
>
> It spawns a IE session with only ... as the identifier, then it opens and
> ad.
> It has some intelligence since it wont open more than 3 ads at a time and
> sometimes will resize the window of my current app so I can't ignore the
ad.
>
> How do I trace it down and kill it?
> It's not through my service provider.
>
>

Technical Details

Message-ID: <3c1549b8$0$9869$afc38c87@news.optusnet.com.au>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!news1.optus.net.au!optus!spool01.syd.optusnet.com.au!spool.optusnet.com.au!210.49.20.122.MISMATCH!not-for-mail

References: <9v3bqo$m0h$1@bob.news.rcn.net>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fcd68,6cc82d2705e4587d
X-Google-Attributes: gidfcd68,public
X-Google-Thread: 10e835,6cc82d2705e4587d
X-Google-Attributes: gid10e835,public
X-Google-ArrivalTime: 2001-12-10 15:50:02 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!news1.optus.net.au!optus!spool01.syd.optusnet.com.au!spool.optusnet.com.au!210.49.20.122.MISMATCH!not-for-mail
From: "Mathew Carter \( Home Scene \)" <mathew@homescene.com.au>
Newsgroups: alt.comp.virus,chi.general
References: <9v3bqo$m0h$1@bob.news.rcn.net>
Subject: Re: web popup virus?
Date: Tue, 11 Dec 2001 09:48:00 +1000
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Lines: 23
Message-ID: <3c1549b8$0$9869$afc38c87@news.optusnet.com.au>
NNTP-Posting-Host: 203.164.195.111
X-Trace: 1008028088  9869 203.164.195.111

Reply to Parent Message