infected with a virus when i refresh CFC? twice now

[Nylan]

I got hit with the bloodhound (as shown in post 74), but there was no ad involved.

 

[gmaharriet]

Here we go again...just now. I got it on one page at the top, went to another page and found this same ad at the bottom. My Auto-Protect shows the virus attempted to load twice. Here's a screenie:

 

[Fifty]

I also got attacked again, same exact ad as gmaharriet posted in the screenie, and it even came through on firefox (but avast blocked it)

 

[Aramazd]

Fifty, the Adblock Plus add-on will block the banner ads on this site.

 

[ChrTh]

It happens pretty much every weekend. They know we can't register a complaint until Monday, so they stick them in over the weekend on purpose. And yes, it is obviously on purpose.

 

[Cheezy the Wiz]

Okay, I caught the bugger in the act this time, so can see the banner and everything.

 

[Lord_Zath]

I just got the virus on my laptop. Now, random windows keep popping up asking me to download regfixer or there's advertisements by "Internet Speed Monitor"

So far, attempts to clean the computer have failed. I'm using Ad-Aware, Avast Antivirus, and Spyware Doctor. I have disabled system restore, as I found the virus often hid in there.

Anyone had this problem and successfully cleaned it?

 

[Cheezy the Wiz]

I just got the virus on my laptop. Now, random windows keep popping up asking me to download regfixer or there's advertisements by "Internet SpeedBooster"

So far, attempts to clean the computer have failed. I'm using Ad-Aware, Avast Antivirus, and Spyware Doctor. I have disabled system restore, as I found the virus often hid in there.

Anyone had this problem and successfully cleaned it?

I just started having this problem today as well. Something called "By Internet Speed Monitor" keeps opening windows up on its own. It only started doing this AFTER I had the trojan I took a screenshot of above.

 

[Lord_Zath]

I think I figured out how to fix this.

1. Go to add/remove programs and remove "Internet Speed Monitor"

2. Go to c:\program files\ISM (or ISM2 or other variant) and delete all files and the folder.

3. If a file will not delete, ctrl+alt+delete, click on processes, and end process ISM.exe or other variant. Then delete the file and folder.

Restart.

So far no popups. Took me two days to figure this out. grr!

 

[Cheezy the Wiz]

I think I figured out how to fix this.

1. Go to add/remove programs and remove "Internet Speed Monitor"

2. Go to c:\program files\ISM (or ISM2 or other variant) and delete all files and the folder.

3. If a file will not delete, ctrl+alt+delete, click on processes, and end process ISM.exe or other variant. Then delete the file and folder.

Restart.

So far no popups. Took me two days to figure this out. grr!

That's some smart thinking! I ran a virus scan and Avast! picked it up and deleted it. What dissapoints me, though is that 1) neither Avast! nor Windows Defender was able to stop this from entering my computer, and 2) that the source of this problem was my beloved CFC. I've said it before, I really love coming here, but if this site is going to be installing malware on my computer, I will have to live without.

 

[Lord_Zath]

yeah same here.

And Avast, Windows Defender, Spyware Doctor, Ad-Aware, Fixwareout were unable to completely remove it. I'd suggest you check for the folder to see if it's completely gone. I had it to where it popped up once every hour or so until I found the actual directory.

 

[Cheezy the Wiz]

yeah same here.

And Avast, Windows Defender, Spyware Doctor, Ad-Aware, Fixwareout were unable to completely remove it. I'd suggest you check for the folder to see if it's completely gone. I had it to where it popped up once every hour or so until I found the actual directory.

I went back and checked using your method, found it, deleted it, and restarted. No problems yet!

 

[Lord_Zath]

Excellent.

Forgot to mention I also made sure it didn't start up with Windows, just in case.

Start -> run -> msconfig

Click "selective startup" and uncheck ISM, ISM2, or other variation.

 

[Paalikles]

But not everybody can use Firefox, some of us are at work

some of you should probably employ stricter settings for MSIE

 

[gmaharriet]

The Spring Wardrobe gift card is back.

 

[gmaharriet]

That's twice in the last 15 minutes and once yesterday...same gift card ad.

 

[Lord_Zath]

I got nailed with one earlier today. Malware was detected by Avast and deleted.

 

[Thunderfall]

gmaharriet, I have reported that one to Telefragged. Sorry about that.