sysnet.exe / tooncomics

  • Thread starter Thread starter Dan Cannon
  • Start date Start date
D

Dan Cannon

Just recently on my laptop (which is running XP and has a linksys
wireless-g) I began having some difficulties with my web browser.
Occasionally when I click on a link, my browser will not go to the target
site of the link, but rather to a porn site (tooncomics.com). I soon
discovered that the problem was not on the websites where the faulty links
were but on my computer. I ran a virus scan and discovered two files that
had been infected with a backdoor trojan. The files were deleted with no
harm done to my system, yet the problem persists.

Then today, when I turned on my computer, an ms-dos dialog opened with the
caption "c:\windows\system\sysnet.exe." When I closed the window, windows
prompted me that the program could not be terminated due to an operation it
was in the middle of performing. I haven't deleted the application yet,
though I believe it is most likely another virus. I scanned it and found
nothing, and then I searched google and found a message relating to the
Nimda.E virus that mentioned sysnet.exe.

"They claimed to be Russian coders who have been working on a program they
called "sysnet.exe" for 1.5 to 2 years. According to them, the program is
a swiss army knife of backdoors and expoits, all automatically installed
through IIS vulnerabilities."

Because the tooncomics.com problem began before I discovered sysnet.exe I am
lead to believe that two are unrelated, yet I need help resolving both.
Hopefully someone has had similar problems before and has perhaps found a
solution. Any help will be appreciated. Thanks.
 
Dan Cannon said:
Just recently on my laptop (which is running XP and has a linksys
wireless-g) I began having some difficulties with my web browser.
Occasionally when I click on a link, my browser will not go to the
target site of the link, but rather to a porn site (tooncomics.com).
I soon discovered that the problem was not on the websites where the
faulty links were but on my computer. I ran a virus scan and
discovered two files that had been infected with a backdoor trojan.
The files were deleted with no harm done to my system, yet the
problem persists.

Then today, when I turned on my computer, an ms-dos dialog opened
with the caption "c:\windows\system\sysnet.exe." When I closed the
window, windows prompted me that the program could not be terminated
due to an operation it was in the middle of performing. I haven't
deleted the application yet, though I believe it is most likely
another virus. I scanned it and found nothing, and then I searched
google and found a message relating to the Nimda.E virus that
mentioned sysnet.exe.

"They claimed to be Russian coders who have been working on a program
they called "sysnet.exe" for 1.5 to 2 years. According to them, the
program is
a swiss army knife of backdoors and expoits, all automatically
installed through IIS vulnerabilities."

Because the tooncomics.com problem began before I discovered
sysnet.exe I am lead to believe that two are unrelated, yet I need
help resolving both. Hopefully someone has had similar problems
before and has perhaps found a solution. Any help will be
appreciated. Thanks.
Click to expand...

First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each need to be updated before every use, even when just
downloaded.

If trying everything at that site does not fix the problem please post back
in the same thread.

--
Frank Saunders, MS-MVP IE/OE
http://www.fjsmjs.com
Reply to Newsgroup. I won't answer email
Protect Your PC
http://www.microsoft.com/security/protect/
 
Dan Cannon said:
Just recently on my laptop (which is running XP and has a linksys
wireless-g) I began having some difficulties with my web browser.
Occasionally when I click on a link, my browser will not go to the target
site of the link, but rather to a porn site (tooncomics.com). I soon
discovered that the problem was not on the websites where the faulty links
were but on my computer. I ran a virus scan and discovered two files that
had been infected with a backdoor trojan. The files were deleted with no
harm done to my system, yet the problem persists.

Then today, when I turned on my computer, an ms-dos dialog opened with the
caption "c:\windows\system\sysnet.exe." When I closed the window, windows
prompted me that the program could not be terminated due to an operation it
was in the middle of performing. I haven't deleted the application yet,
though I believe it is most likely another virus. I scanned it and found
nothing, and then I searched google and found a message relating to the
Nimda.E virus that mentioned sysnet.exe.

"They claimed to be Russian coders who have been working on a program they
called "sysnet.exe" for 1.5 to 2 years. According to them, the program is
a swiss army knife of backdoors and expoits, all automatically installed
through IIS vulnerabilities."

Because the tooncomics.com problem began before I discovered sysnet.exe I am
lead to believe that two are unrelated, yet I need help resolving both.
Hopefully someone has had similar problems before and has perhaps found a
solution. Any help will be appreciated. Thanks.
Click to expand...


http://www.merijn.org/cwschronicles.html#tooncomics
Run the Cool Web Shredder to finally rid your machine of this Spyware
pest: http://www.merijn.org/files/CWShredder.exe
Close all instances of IE, hit the executable and follow the prompts.


HTH


--
siljaline

MS - MVP Windows IE/OE
______________________

(Reply to group, as return address
is invalid - that we may all benefit)
 
Back
Top