Hi there! I think I have a bug I don't know how to get rid of. When I clicked on the Internet Explorer icon on my desktop, a popup window comes up, always porn of course! The same if I click on a link that opens a new window. It crashes my Explorer windows and even shuts down my internet connection! My Lavasoft shows always the same url blocked: http://540.filost.com/randomsites/banner.aspx What to do?! Please Help! Thanks in advance!

I forgot to add that I run the full scan from Lavasoft and deleted all the bugs found, but it keeps going on! Thanks in advance!

Try running your scans from safe mode and turn off system restore. Turn it on again when completed.

Hi Download Hijackthis Create a specific folder on your hard drive called HijackThis to keep its backups. You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HijackThis. Download and unzip HijackThis.exe into this folder. http://russelltexas.com/malware/createhjtfolder.htm http://tomcoyote.org/hjt/ Click "Do a systen scan only". Then "check" the box to the left of these item(s): O16 - DPF: {24311111-1111-1121-1111-111191113457} - file://c:\eied_s7.cab O16 - DPF: {33331111-1111-1111-1111-611111193457} - file://c:\ex.cab O16 - DPF: {33331111-1111-1111-1111-611111193458} - file://c:\ex.cab O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34545} - C:\WINDOWS\System32\vbsys2.dll Then click "Fix checked". Reboot to safe mode. Find and delete: c:\windows\system32\vbsys2.dll <--- file Good luck Found a name for your problem. http://www.sophos.com/virusinfo/analyses/trojadclickac.html http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453094051 Hijack prevention tips Getting Help w/ Spyware:

Try a free On-line Spyware Scan It may solve your problem Hopefully my advice will help you...Please post back with your results....thanks

If one of the answers helped you, we would all like to know which one it was, and what you did to finally solve your problem. This is what an online community is all about - sharing information . Sharing information is not just by taking information from us, but also by sharing your success and failure stories, and by helping others who might read your post in the future understand what was the outcome of the thread. Interaction is helpful to the people that answer questions for free.

I had a simlar problem with the same website popoing up: http://540.filost.com/randomsites/banner.aspx I found answer on Symantec website, which boiled down to booting in safe mode and deleting file vbsys2.dll. This appeared to work. Keep up the good work. I was looking to see if the vbsys2.dll was necessary for anything before I totally delete. Norton AV sees the virus but can not repair or Quarantine. I am using XP Media Center Edition.