files causing IE to run all the time

[vincent]

hello

right-i've recently got a nice replacement from Maxtor [RMA]....

i reinstalled Xp Home and etc.... and all my standard drivers via my mobo disc...
[Ethernet driver,IDE driver,IDE Raid,USB patch fix,nVidia chipset]

once that was installed did a reboot......
now while installing my Ati drivers i noticed that IE was running all the time.... i tried my best to close them down ,but each time i did... a file called "meethide.exe" would run up ,start IE and close within 1 second.... then i decided to boot up in safe mode..

i did a hidden file search and found this "meethide.exe" file and deleted it from
"[Directory= x:\Documents & Settings\All Users\Cake Funk Bend Show]"

Also ,there was also a folder named...
"[Directory= X:\Documents & Settings\Win UserName\SOFTWARE32]
this also caused IE to run all the time,inside of their was 3 files named....
"audio plan love.exe" "cumsamji.exe" & "manager rdr move.exe"

now.... i did a net search on them,but found nothing... i swept for viruses twice ,nothing......i swept with 2 Anti spyware [Spyware doctor and Pestpatrol] and got nothing.....

Is it possible that these are hacked files that got onto my pc through 2 routers and the hacker was watching me ? because i do recall after rebooting
after installing Zone Alarm that it had blocked someone...

[Norky]

Did you patch Windows as soon as you connected it to the net?

[vincent]

u mean Windows Update no.... cos i was still instaliing drivers

[Norky]

Start > Run > "msconfig"

See if the offending item is under the 'Startup' tab

[vincent]

wel lthere was a blank one..... so yes.....

i take it someone took advantage of me not updating windows then

[bobbyzero]

A great example of why you should always install from an XP CD with SP2 and patches slipstreamed (already integrated as you install)

Great guide to creating slipstreamed install CDs
http://unattended.msfn.org/

Program that will do it all for you
http://www.nliteos.com

[directhex]

viruses. reformat time again.

[vincent]

pff... i've just got this HDD back from the manu... oh btw.. i did delete them obviously ages ago

Direct. .whats the point of formatting if u only have 1 virus

just find the source files enter safe mode and delete

[arthurleung]

pff... i've just got this HDD back from the manu... oh btw.. i did delete them obviously ages ago

Direct. .whats the point of formatting if u only have 1 virus

just find the source files enter safe mode and delete

Rule1: Never run Windows in DMZ or Direct connection before installing Windows Update
Rule2: When it is time to format, you should do it asap, not until the computer is down.
Rule3: Many spyware and viruses can regenerate or infect system files, Delete does not work all the time

[bobbyzero]

pff... i've just got this HDD back from the manu... oh btw.. i did delete them obviously ages ago

Direct. .whats the point of formatting if u only have 1 virus

just find the source files enter safe mode and delete

Do you feel safe knowing that you've "probably" deleted all the viruses? What if it downloaded and installed a keylogger somewhere else?

You're trusting your passwords and cc number to a machine that's possibly jam-packed with fresh new viruses - what if you've got something that isn't on the AV detection lists yet?

[vincent]

already done all the above.. scanned for other viruses/scumware.... and checked Hijack this..... everythings a Ok.....

[scottyman]

you've really got to run the "big three"

spysoft s&d
adaware
ms anti-spyware

get them all updated (1.4 works best for s&d) to latest releases of scanners

get the vx2 addon foradaware

also check your services list, you'll need a good 3-4 scans and reboots to catch them all.
it will copy and rename the file after every reboot, so makes it a bit of a nightmare to remove.

[vincent]

ad aware pff please.... thats finds a few things.... everyone heard of Spyware Doctor

or how about spywareblaster.... im clean i now i am.. after all i do have 4 different A.S. scanners and 2 AV scanners