Has anyone else ever had this Virus/Spyware?
 

This shit is fucked up. Everytime I click one of my thumbnails on my sites, or any other TGP out there for that matter, the links go to the virus' tgps and random search querys to google. like it will open a google window with the term "rabbit vibrator" and other random ass sex shit. none of my spyware or virus programs can get rid of this shit! anyone got rid of this before?

Just run adware/spyware remover tool, it's a trojan running on your system so the anti spyware tool should detect it. Perhaps it's CWS related, those are the hardest to get rid of.
Good luck with it, I hate that crap, takes hours and hours to get it from your pc.

StickyGreen, I never heard of that one but had a really nasty trojan a few weeks ago that nothing would remove.

I downloaded Panda Antivirus and it completely got rid of it, and I tried about half a dozen different programs. http://www.pandasoftware.com/

The free demo works great, I used Panda Platinum 2006 Internet Security.

thanx man! i'm gonna give it a try right now...

I still can't get rid of this shit, anyone know how?

post the tgp names it goes to

for some reason the tgps aren't coming up anymore...but all these are...

random sites:
http://slyfind.net/search.php?q=notebook
http://anewsearchengine.net/in.php
http://executivejobsearch.biz/go.php
http://casino-trix.com/search.php?qq=poker

and it also opens up random google links like these...

http://www.google.com/search?hl=en&q=adult%20sex
http://www.google.com/search?hl=en&q=sexy20granny
http://www.google.com/search?hl=en&q=sex%20toy
http://www.google.com/search?hl=en&q...acial%20dating

sound like cool web search to me.. who got that cool swiss army knife a few weeks ago for sending them installs?

This is a new trojan and is now in the wild. If you find a fix, please post it here. Thanks.

you can try McAfee virus scan online
hit this link McAfee scan online

got any of these

atl_helper.exe
uio.exe
Netsurf.exe
new32.exe
dePloy.exe
Brong32.exe

go to c:\windows and right click and sort by "last modified" look for new files .. also look in c:\ and c:\windowsroot\system32 searching the same way

still there.... :(

looks like format c:\ is badly needed dude. :(

I'm getting the same thing now. It seems to be popping into where ever php is used or sponsor hosted galleries.

I'm getting this domain lodaing up:
www.handfind.net which loads http://www.yourlust.com (tgp)
http://www.google.com/search?hl=en&q=sexy%20mature
http://www.searchthissite.net/ which is loading up some Asian Mysteries TGP but all links go to bank foreclosures shit such as:
http://search.lycos.com/?src=kn&loc=...sures&nlubid=1
http://www.monstermarketplace.com/go...k+foreclosures
http://www.uploading.com/
http://search.ebay.com/bank-foreclos...QQfkrZ1QQfnuZ1
http://www.upspiral.com/index.php?tp...2bforeclosures

Also another tgp labeled http://www.dreamQueens.com

yep, sounds like the same shit. i've been trying for like 3 days to get rid of it... :Oh crap

lol i wonder what this is all about.. it look slike all those links run to paid sponsor ads on those sites ( the bak foreclosure ) so im thinking the "hacker" must be trying to run clicks thru competition ad links ( or he paid for those links , but sounds more like click fraud :) )

did you try what i said

if your on the net while your trying to clean the comp you may have some problems :) ( especially if you have fast connection ) best to shutdown and do the steps above. http://com.webspacemania.com/smiley/

Try going to live.com and downloading the beta of Windows OneCare - it has the new virus scanner from microsoft and it seems to a good job.

I was running Nortons - I ran this and it picked up an extra 5 problems.

the only suspicious file was a file named WPA.DBL, which was the only file modified today in the system32 folder.

Thats something to do with MS activation I think..........

Spyware Search & Destroy is my favourite, it will remove that spyware.

that is the windows activation program its not harmfull.. did you also check c:\ and c:\windows ?

i think your nameservers have been messed with possibly..

check in your registry in local machine\system\currentcontrolset\services\tcpip\

also when your looking for files make sure you viewing ALL files ( like hidden and system files )

Spybot
 

Sounds like some form of Spyware etc.
Try Spybot.
http://www.download.com/Spybot-Searc...-10122137.html

That gets stacks of stuff, and fixes up all sorts of crap on your machine. An amazing tool!
Normal virus progs are aiming at virus stuff, and take Trojans etc secondary it seems.
I had Panda too... hehe, until a virus fucked it!
The same happened to my Norton. Now I've been using AVG and haven't had a problem since on the virus side.
Of course with Spybot running secondary, and Ad-Aware at startup.

that is funny

Viruses are clever now-a-days, if you can't clean out your registry and track recently modifies files in your windows config folders then you may need to format. :Oh crap

Good luck,

what's funny is your gay ass nick. is it your pussy or your mom's pussy that's free you fag...

Yepp, activation code for MS
 

Check this out:
http://netsecurity.about.com/od/wind...twinxp0829.htm

That guides you through the process.

have you tried the Microsoft Anti-Spyware beta?

Yes... whatever this is, NOTHING is picking up. In fact, MS Spyware beta is running as I type this. :2 cents:

It's not a spy
 

It's not a spy, it's the activation code in Microsoft.
Just follow the previous instrctions.

wtf are you talking about? This has nothing to do with the activation code dude. You're on crack. This IS some sort of spyware/malware. Don't rip on people trying to help like you know it all... you apparently know jack shit :2 cents:

lol...i'm still having no luck. i downloaded the windows onecare beta and all it did was slow my system down dramatically and freeze every time it scanned for viruses... :Oh crap

I had some NASTY viruses and trojans hit my comp about a week back or so - Downloaded a program called Spyware doctor - It did a tremendous job... You should check it out, I believe the first removal and scan are free .. I went ahead and paid the $30 for it

i tried that one too, didn't find it either. i think i've tried almost every program out there by now lol...