Yet more IE problems.

[impulce]

Yet again, my browser is resetting my homepage to "pornmonkey.com", and my virus scan (trend pc-cilin) also seems to be blocked. The icon is white, and the "currently scanned file" is constantly the same file PCC2KNT.INI. When i view the quarantined files, there is a file called 2b.tmp that has infected the pc-cilin file, which im assuming is whats causing the problem. I dont think i can get rid of it without deleting the whole file it has infected, which is the virus-scan itself.

Ive got ad-aware, spybot and cwshredder and ran them all, and everythings still the same.
I also get a trojan on EVERY SINGLE system restore file my PC creates, so it also wont allow me to use that to go back.

Im getting sick to death of these things - the internet is a wonderful tool, and i wish people would leave it be and stop trying to ruin it for everybody else.

Any help would be appreciated.

run this


and this

run these two programs to get rid of the spyware

[impulce]

^ I already have...i said "I have adaware and spyboy" which is both of those programmes.


Also, i realised the problem with my virus scan was the fact that for some reason "real-time scan" was unchecked, when i checked the box its running as normal. Must have been a silly mistake on my part.

[John Prophet]

So is it ok now?

Somethimes you just have to go to www.symantec.com and other websites and look up the name of the hijacker or virus and see what they say about it....(they r the experts, let them do the worrying, you just do what they say do etc)

Also you could run the online virus scan from symantec....I usually suggest www.antivirus.com but that would just be the same virus scan you have....and when you already have a virus scanner having issues, its best to get a second opinion from a different brand of av scanner.

JP

[impulce]

The virus scan was a completely different problem..dont know what stopped it, but ive started it up again now and its fine.. it isnt however finding the problem with my IE.

Ive ran various spyware/hijack programmes and they havent shifted it...have also looked in the registry for IE and changed the relevant registrys from www.viewpornkey.com to google.com, but as soon as i restart theyve been changed back again.

[jmichna]

Have you kept both your AV and your anti-spyware definitions up-to-date for both Ad-Aware and Spy-Bot? Ad-aware is at "01.01.2004" and Spy-Bot is at date "2003-12-31."

[troddy]

try this

[Starfury_2260]

i would say to check the programs that are running yourself.

[impulce]

Ive sorted the browser hijack by running hijack this and getting rid of the revelant registry edits etc, and also removing a file called "winlogon" VBE code..anybody with the same problem be careful - there are two winlogon files that will be in use, one is important and used by XP - the other is a rogue file that just has the same name to disguise it. If you need to delete the file, its in the system32 folder but be careful which one you delete it. You need to end the process first, and you also need to end the process BEFORE you run any internet applications - as these trigger it and wont allow you to end it because it classes it as critical.

[crystaldragon]

You might also want to consider this
It definitely keeps it from hapenning again.