Anyone knows where?!

  • Thread starter Thread starter Bassam
  • Start date Start date
B

Bassam

Hello

after opening the browser with variant time (1-30 minutes) another windows
appears automatically, some of them are minimized and i can not browse
unless press F11 to maximize, then i can see:

http://nitrous.exitfuel.com and
http://adserv.internetfuel.com and
http://nitrous.internetfuel.com

then after a short time many other windows appears automatically with sex
and other subjects, i downloaded many shareware spareware programs like
spyBot , ad-aware 6 , spyware-blaster , spyware-guard to clean and remove my
system.

BUT

i still have them back, i checked my RUN registry key under:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

and found a strange filename.exe /install and DLLRun32.exe pointing to a DLL
in my c:\windows called : BSX5.DLL , i found also a BSX32.ini , i renamed
those and removed this autorun exe from the registry, it seems ads are gone
for now!

i just need to know where in the registry there would be a key for a program
to autorun after the browser is open ? just for my knowledge, would you pls
help

Thank you
Bassam
 
Sounds to me like your computer is infected with at least
one virus, possibly the trojan called JS/NoClose.
 
Bassam said:
Hello

after opening the browser with variant time (1-30 minutes) another
windows appears automatically, some of them are minimized and i can
not browse unless press F11 to maximize, then i can see:

http://nitrous.exitfuel.com and
http://adserv.internetfuel.com and
http://nitrous.internetfuel.com

then after a short time many other windows appears automatically with
sex and other subjects, i downloaded many shareware spareware
programs like spyBot , ad-aware 6 , spyware-blaster , spyware-guard
to clean and remove my system.

BUT

i still have them back, i checked my RUN registry key under:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

and found a strange filename.exe /install and DLLRun32.exe pointing
to a DLL in my c:\windows called : BSX5.DLL , i found also a
BSX32.ini , i renamed those and removed this autorun exe from the
registry, it seems ads are gone for now!

i just need to know where in the registry there would be a key for a
program to autorun after the browser is open ? just for my knowledge,
would you pls help

Thank you
Bassam
Click to expand...

You downloaded some spyware or other scumware. If you had one, you probably
have more.
First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm
 
Well, I have WinXP Pro, SP1 , fully patch updated from windows update,
MCAFEE AntiVirus installed with last DAT file installed dated Nov,14 , i
scanned my PC and its clear, no mention of this JS/NoClose or anything else.

Thanks
Bassam
 
Back
Top