I agree 110% Steve..the paid anti-virus are the only way to go.. and 
even then unfortunately it is no guarantee.. I did get one of those 
"anti-virus" Trojans not too long ago and reformat is not always the 
only way to go.. My guru did manage to find and get rid of it for 
me.. luckily I send him enough business that it cost me lunch..
Debbie

At 04:36 PM 9/26/2008, you wrote:

>The behavior you described in your initial report sounds similar to
>that caused by an infection by one of the rogue (fake) antivirus
>programs such as "Antivirus XP 2008" or 2009. See this page
>http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FFAKEALER%2EHO&VSect=P
>and see if what's there looks familiar.
>
>This article might also be interesting 
>http://blog.trendmicro.com/rogue-av-theatrics-on-extended-run/
>.
>
>It's unlikely you got this from any Google site, maps or otherwise.
>The infection would most likely have occurred at some point shortly
>before you did that search, unless you got it by clicking on a search
>result link going to an infected site that Google hadn't yet
>discovered was infected, so it didn't have the "This site may harm
>your computer" warning.
>
>If all you have been using is AVG free, I would recommend switching to
>a paid antivirus program. By the time you've cleaned this up, $50/year
>is going to seem like cheap insurance against the problems it has
>caused you.
>
>If this does turn out to be an "Antivirus XP" infection, in a brief
>search, I saw one forum post that said a reformat is the only sure
>solution, but there was some disagreement, so I'd try other solutions
>first. But I'd give up on AVG free. It didn't prevent the infection,
>and it hasn't been able to clean it. Go with Norton or Trend or one of
>the other "internet security suites" that bundles antivirus and
>antispyware, and preferably a firewall, too.
>
>
>On Sep 26, 6:40 am, chesar <[EMAIL PROTECTED]> wrote:
> > Thanks both to Anirban & Steve for your quick responses.  I hope to
> > pursue your suggestions in the weekend. Meanwhile I have couple of
> > questions? Why bookmarked sites, though gets redirected, returns
> > finally to the bookmarked site and displays the corresponding site.
> > It does take longertimethough to download, probaly beacuse it goes
> > throgh other sites.
> >
> > I am also listing below the history whch firefox captured while
> > getting directed.  Starts from the bottom - Google serach
> >
> > Save on Cheapest Tickets All Airlines - Compare Prices, Find Discounts
> > & Buy Online - Smarter.com ---se--qq-Cheapest+Tickets+All+Airlines--
> > pt-0--tt-.html ---se--qq-Cheapest+Tickets+All+Airlines--pt-0--
> > tt-.html /d/sr/?xargs=15KPjg1%2DBSmpamwr
> > %2DocrjISeSAx1Yaxca58M5rDpR9HtVf8WQ8De15aqHImcF%2DReVu%2DF%2DNwPOQ
> > %2DaIWK%5FL5nf%2DKEQqMQ1uBEOL3yt2awIo5MqakUNRAgvMa
> > %5FrXkn4dPOHcOZWa01eOL3uPLIdbvbj%5Fjzr8tvkXa8PBqwc
> > %2DyxOAcGL7bzgMp9g6LddISvPIkgLnCKJ56S8Ageq
> > %2Dd4C6RdooRmNF1wN2UECETWyKk42192C6DMm9ypqrTepELvb3vm4abf7KpkYoGPhXTobcn
> > %2DFrPmiXIjZwyY237uajBom9HXfq5d0btvRt
> > %2D8eyD1ayOPlRTjiT5RMzPRib6NAooJQEkCvy1ZQGPbCJTsU
> > %2DaJsspOZTylWDrUfPVVXJ4KkVQq968Lpde7gzen2AuPVjbS5fTvShPJLMt3BvmtTCL
> > %2DmxJvg%2E%2E search.php klik.php click_my.php /?
> > u=AKmm5AC8vg4J8PQLODnSQ-
> > 
> P7H5FToMitDkEmr3GH__IxDOTm9fr5Ejj7iMb3ImrQfU4DA3iIIL8PLLn8lDGZD4j7LWx5mxb30­ng6AwuvSHAby2G2RgL3h4nAXszuf1LJFS7PNFGeB5qP6PDSdpndg3rG8ekF0pGS-
> > jv8Me3T3gQZuh1YzpA3oJ-y5oG2lm6Ld3GXuXuGHaULtuzyZ1Q5VXkRyYs3tMPb-Fyl-
> > 
> kxk34w14zSyxGF4iWEBd30xU6tJzXU5iu4dVXce89b1QDLPWtNuaxrmj8I4vifqYOIWHyOgeaDl­hJhM170cQljeI00Wbbuog-
> > Zn-
> > 
> qzchXDl9pMQsNOZ81elLqR8efpYUZGx7TNcn5aU5eu0cta60S3HjyKxFtpY2Z1P9ShuqvXtyboh­YlgLqDRTbj1PfBltXLcgygQ_boT7h8mnJQoEW6MtLdWj9uUqbxLUcd6Bvya8Cge61m0fBzUIThM­KALKmKz1eEjcyFXrru_Vh9q2rTmaCV_tyCogQpwiqIkHuCX1QHSgV9of8n7CTDSrta5odOf6JcW­8iXuakPOj07zyD78ZH0FngQluE0xa2t0Sm6x5KNMD-
> > CFQTX17TqaMfweJHv7Y4NqeQOe-lPsUgZhOyRG77SX0zgEituFgxd2_X1sQ1aWS-
> > KDlO7nZSyJozXozjaLdIK2zfdvG-2aXgsrSs48BwotTg9X3db--
> > d5psHtPUEyL6pg5u62WNqcet_GqTa0Jxuw6E588cm8Usi0azbYf-
> > 
> WssrxEmzszHftSv2CV5wLBx6H_odLneWXzLwjZ5WkKJnLWxN_Q18P5j2mgFSHUfvPxoTuhjqghi­bWsrHXt7FpP139GVZbJXYlD9JO7fXZjYdVBloQFEQUCVmFvqj9SMmSCj0dl7BxLexVo9TYvei60­3oyiCwaDpc3DlW1vbGb-
> > Ef6G-VrNut7NPQ-
> > 
> ejcUXS1KAc59pBQNlypP0Ttg-5wajgNuyqBrK6vWvpyW0sKHNMpclU3_ovex_13OJz2jcqlgIfI­QZIOd6ugkDH5dy1Oem6h0LzCmv4TKwOvVyenyQK4UDWRIixJOPwDl-
> > uWr_6aLEz4GpoAkEk0E-
> > X2A2XdxDtmkWxcmkkJD3QqHC9mgxc4zthrHW4q3iu7eyLMoP7Nui_wihgPbpck3aSqn-
> > t9OUuQ3D9zFBs2MRjj-
> > 
> cAJLiZGvXocKlTABORzw5UIw5ZME8_moScmFiDwfQkSsEECGEEDSi4Inq8Ir1_k1UySXGmsef7F­Yh4zAAQhYGDBZYW_9PGxkdjf-8-
> > mLDaxFTrZ51nZtZiGHPC8Oga-
> > qYw_TG7TqKn-5RKQF1NujmEcOZuEAEQUBEm7AKaopkoHEehUokoSsL1toNe%3Ds%3Fphp.c
> > %2F711.691.111.46&bid=0.084150&aid=61&said=v2test7&ppc=peak
> > Redirecting... I36o2Y5CDkQUGM98.php out.php clickn.php c.php c.php air
> > canada - Google Search
> >
> > Does these redirections make any sense?
>
Regards,
Debbie  ^v^  ^o^  //\o/\\ ^o^  ^v^  Webmaster - System Admin - IDSR
Bookmark our new Blog/Journal featuring News, New Arrivals and special deals.
http://journals.aol.com/nailgdsss

[EMAIL PROTECTED]
(AOL or AIM - NailGdsss, GTalk - wkdwich, MSN - [EMAIL PROTECTED])
WWWeb Services, Ronkonkoma, NY & Rocky Mount, VA
631-981-1273  fax 631-981-7557
ONLINE STORE http://www.beautytech.com/shoppe
http://www.beautytech.com & http://www.beautytech.INFO
     for Professionals             for Consumers

--~--~---------~--~----~------------~-------~--~----~
You received this message through the Google Groups "stopbadware" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/stopbadware?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to