| Author |
Message |
    
Anonymous
|
| Posted on Tuesday, August 20, 2002 - 03:51 pm: |
|
I have this Virus on my P.C. and have found the 'String of info in my Registry - but when i go and Modify it ( delete info ) when i then log back onto Internet Explorer it reappears and brings me to a horrible homepage. The same info in the same part of the reg.. Very annoying.
How do i delete? the virus
|
mike
|
| Posted on Wednesday, August 21, 2002 - 12:13 am: |
|
go to this link and search for the virus you have, download and run the removal tool and check the manual removal instructions.
http://securityresponse.symantec.com/
|
john
|
| Posted on Friday, August 23, 2002 - 12:37 pm: |
|
Has anybody got any ideas? - before i reformatt ( idont really want to do that )
Regards
John
|
mike
|
| Posted on Friday, August 23, 2002 - 01:24 pm: |
|
John
here are the links to the JS_exception and js_exceptionb manual removal pages
http://securityresponse.symantec.com/avcenter/venc/data/js.exception.exploit.html
http://securityresponse.symantec.com/avcenter/venc/data/js.exception.exploit.b.html
|
John
|
| Posted on Saturday, August 24, 2002 - 12:23 pm: |
|
Mike, thaks for the info ( links ) .I've already been to them and printed them off and followed them step by step but unfortunately when I delete or modify the 'String of info' in the Registry to my preferred Web Page the bogus String of info reapears. in other words it wont let me delete it..?? ( hope i explained it O.K. )
By the way My OS is XP.
Any other ideas? ( everyone's suggestion is greatly welcomed )
Thanks
John
|
mike
|
| Posted on Saturday, August 24, 2002 - 02:52 pm: |
|
Hi John
I wasn't sure which virus, there are different ones. Use Find and do a seach for the following
Delete all files that are detected as JS.Exception.Exploit or , also check out this response for the coolsite virus, it is also listed as a js exception.
http://securityresponse.symantec.com/avcenter/venc/data/js.coolsite@mm.html
All I can suggest is to update XP with all the updates to plug the security leaks and keep your virus defs updated. With JS you also need to open IE and reset your Homepage to the current page after the system is cleaned. Let me know if the coolsite link helped.
|
John
|
| Posted on Tuesday, August 27, 2002 - 02:09 pm: |
|
Mike - Good News . I had a friend look at the Virus and when I explained the behaviour of the Virus ( Kept reappearing in Registry )he thought it might have put itself into the Start Up. Sure enough when we went into Start Up Via 'MSCONFIG' there was an unusual looking EXE. file in Programme Files/Common files and we subsequently deleted it and changed the settings in the Registry and internet explorer ( to Favourite Webpage ) settings. Rebooted the P.C. and Hey Presto.
Many thanks for the advice and Great Site .
Regards
John
|
mike
|
| Posted on Wednesday, August 28, 2002 - 12:06 am: |
|
Thanks for posting the the happy ending, hopefully someone will benefit from your experience. Your Welcome and Thank You ( :
|
SudDen
|
| Posted on Tuesday, January 21, 2003 - 02:21 pm: |
|
hi guys! my pc is infected with the same virus! could you tell me whether the mentioned file is gstartup? it says it is gmt.exe which seems to be a windows file and the other one is the adobegammacorrection so i think it only could be the first?
|
Mike
|
| Posted on Tuesday, January 21, 2003 - 05:52 pm: |
|
gmt.exe is the application file for Gator, which is a well-known spyware. You don't want it on your computer. You want nothing to do with it.
Download Ad-Aware and it should remove Gator from your system
|
SudDen
|
| Posted on Thursday, January 23, 2003 - 09:17 am: |
|
yip removed it but i my iExplorer is still """""" with this virus and there is no other file in starup in the mentioned folder 
|
Mike
|
| Posted on Thursday, January 23, 2003 - 05:22 pm: |
|
Are these the steps you took to remove Gator and Gain
http://www.pchell.com/support/gator.shtml
|
SudDen
|
| Posted on Wednesday, January 29, 2003 - 10:42 am: |
|
its not gator! i talk about the virus that makes microsuxx in the top of my explorer and www.weesnich.de.vu as startpage everytime
|
Mike
|
| Posted on Wednesday, January 29, 2003 - 11:35 am: |
|
Microsuxx is a mail program, somehow you must have installed it. Go to the Add/Remove and see if there is a Uninstall link if there is Remove it, then do a search in Start - Find for microsuxx and delete the entries, if you have something like Clean Sweep try using that to remove the .exe file. That link whew !! popup He** If removing the program doesn't get rid of the link, you will have to Repaire IE in System Information-Tools-Repaire IE Tool, if that doesn't get rid of it, try Uninstalling IE in the Add/Remove and then reinstall it. Here is a link to the Microsuxx site http://www.microsuxx.com/
See if these solve the problems
|
COMPUTER DISCUSSIONS » JS_exception