Link to home
Start Free TrialLog in
Avatar of JFAZ
JFAZ

asked on

Spyware or virus problems?

Hi, I'am running WinXP Pro and I'am having some issues with my computer. I believe I have some kind of Spyware or virus on my computer because when I access web sites or just about anything on my computer and there is anything with sexual slangs in words (i.e.- assets, updating, etc.) Parts of the words are underlined and have links attatched to them like "ass" in assests and "dating" in updating. You can click on the link and it will just go to a dirty site. I've run adaware and deleted all the bad stuff there and I've ran Nortons in safe and regular mode but I'am not getting any viruses found. I'm not sure what else I can do at this point. I cant even get the WinXp SP2 downloaded because it just keeps looking and looking for updates. If anyone can help me out here that would be great. It's really frustrating when you cant even get on the internet at safe sites and everything is pointing to sex stuff.

TIA,

JFAZ
Avatar of Ke11ie
Ke11ie
Flag of Australia image

Hi JFAZ

It does sound like Spyware or a virus. Have you tried only one spyware program? It is good to try at least 2 as different spyware software programs pick up different things. The ones I usually use are: Adaware, Spysweeper, and Spybot search & Destroy. Also, make sure that your virus program and the spyware programs have the latest updates installed on them. And try not to have anything else running while you do this...
Avatar of JFAZ
JFAZ

ASKER

I downloaded those programs that you suggested and tried them out and although it did find numerous things on my computer the problem still exists with the undelining of certain words and parts of words that are links. Any other suggestions I could try besides a reformat?

JFAZ
I'm sorry but I've never actually come across any information relating to your exact problem - the sexual web links (virus?) - and I do deal a bit in fixing viruses, and general computer problems. It sounds like you've already tried everything I can think of doing apart from the... 'reformat'.

The web sites that the links go to... Is is always the same web site? Are they always different? Is it like 'hotbar' where it links to anything that a search finds relating to the selected words...?

And you've definitely tried running the spyware programs in safe mode?
Made sure no applications are running while scanning?
Closed other little programs that run in the background - e.g. anything in the Notification area (i.e. where the clock is in Windows)?
Go to regedit, under My Computer, HKEY_LOCAL_MACHINE, Software, Microsoft, Windows, CurrentVersion, Run: See if there is anything suspicious looking that looks like spyware? (By the way they are the instructions for WIN. XP Pro.)
Have you restarted the computer since running the spy removal programs?
ASKER CERTIFIED SOLUTION
Avatar of SheharyaarSaahil
SheharyaarSaahil
Flag of United Arab Emirates image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of JFAZ

ASKER

Ok I tried everything that I you all had put up here for me to try. I fixed everything with Hijack This, that I felt comfortable fixing. Here is my saved log file and some of these questionable ones I know what they are like Incredimail and others I dont. Any help would be greatly appreciated. The web links that are are refereing to sexual slangs are all pointing to http://searchmiracle.com/ and I had deleted all of those type of "NASTY" entries that it found already. Please help if you can!

JFAZ
Hi JFAZ

So after you ran HijackThis, does your computer work normal now?

If it doesn't I would suggest fixing the last four 'possibly nasties' on your list.
Have you tried Hijack this?

It seems to pick up extra things. You can download it at:

http://tools.radiosplace.com/HijackThis.exe

Save the LOG file then copy and paste it into the box at:

http://www.hijackthis.de/index.php?langselect=english

This site automatically analyses it for you. Fix everything which it labels as Nasty!

To fix, check the lines and click on Fix Checked!

If it still doesn't work, can you save the site after it analyses it and give us a look at it so we can see if it has missed something.
Sorry!
Trying to fix another problem - and the HijackThis thing really worked!
Actually, I've just fixed a couple of my own problems and then I took another look at your log - and I would definitely get rid of your 'O2's and 'O3's and hopefully that should work! (And if you haven't already done what I said to try above - I would ignore those!)

They seemed to solve my stupid spyware problems!
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of JFAZ

ASKER

Hi, Ok it now seems as if I'm all fixed over here I'm not seeing anymore sexual links and I'm finally able to get the WinXP SP2 on this computer. The only other question that I have for anyone is, should I always be running my virus scans and spyware scans in safemode? Also, does clearing out all of the temp stuff have to be done at the same time as well when I'm having problems?

Thank you all for your in depth help. I always know that I can get on here and you guys always seem to help me out a lot and above all else. I'm learning! I'll award the points here shortly.

Thanks,

JFAZ
gooooood news JFAZ :)

and Yes u shud always run ur spwyare removal tools and av scan in safemode, coz in safemode there are no background running proceses that can interrupt with them,,,,, and clearing out temp internet files and local settings\temp files is also recommneded in once a week :)

anything else =)
Avatar of JFAZ

ASKER

One more qeustion that I had forgot to previously answer. From looking at my logs,etc. Do you have any idea what might have infected my computer with that searchmiracle link problem?

JFAZ
i saw some junk files running from ur Local Settings\TEMP folder !!
those were totally unknown files,,,,, u know random nasty files...... and i think those were resposible for that problem :)
and that was the reason i asked to delete all ur Temp internet files alongwith the Temp folder files !!  =)