Hi there! I think I have a bug I don't know how to get rid of. When I clicked on the Internet Explorer icon on my desktop, a popup window comes up, always porn of course! The same if I click on a link that opens a new window. It crashes my Explorer windows and even shuts down my internet connection! My Lavasoft shows always the same url blocked: http://540.filost.com/randomsites/banner.aspx
What to do?! Please Help!

Thanks in advance!

I forgot to add that I run the full scan from Lavasoft and deleted all the bugs found, but it keeps going on!

Thanks in advance!

Try running your scans from safe mode and turn off system restore. Turn it on again when completed.

Hi

Download Hijackthis

Create a specific folder on your hard drive called HijackThis to keep its backups.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HijackThis.
Download and unzip HijackThis.exe into this folder.

http://russelltexas.com/malware/createhjtfolder.htm

http://tomcoyote.org/hjt/

Click "Do a systen scan only".
Then "check" the box to the left of these item(s):

O16 - DPF: {24311111-1111-1121-1111-111191113457} - file://c:\eied_s7.cab

O16 - DPF: {33331111-1111-1111-1111-611111193457} - file://c:\ex.cab

O16 - DPF: {33331111-1111-1111-1111-611111193458} - file://c:\ex.cab

O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34545} - C:\WINDOWS\System32\vbsys2.dll

Then click "Fix checked".

Reboot to safe mode.

Find and delete:

c:\windows\system32\vbsys2.dll <--- file

Good luck

Found a name for your problem.

http://www.sophos.com/virusinfo/analyses/trojadclickac.html

http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453094051

Hijack prevention tips

Getting Help w/ Spyware:

Try a free
On-line Spyware Scan
It may solve your problem

Hopefully my advice will help you...Please post back with your results....thanks

If one of the answers helped you, we would all like to know which one it was, and what you did to finally solve your problem. This is what an online community is all about - sharing information . Sharing information is not just by taking information from us, but also by sharing your success and failure stories, and by helping others who might read your post in the future understand what was the outcome of the thread.

Interaction is helpful to the people that
answer questions for free.

I had a simlar problem with the same website popoing up:

http://540.filost.com/randomsites/banner.aspx

I found answer on Symantec website, which boiled down to booting in safe mode and deleting file vbsys2.dll.

This appeared to work.

Keep up the good work. I was looking to see if the vbsys2.dll was necessary for anything before I totally delete. Norton AV sees the virus but can not repair or Quarantine. I am using XP Media Center Edition.

alicia_mj, did you try response #4? It usually finds stuff that the other spyware programs miss and helps you remove the problems.

Hopefully my advice will help you...Please post back with your results....thanks

Thank you very much for all your prompt and useful responses and forgive my delay in replying, I was just very busy at work.
I chose response #4, mostly because I'm definitely not an expert with computers and booting on safe mode made me scared of messing something up.
I just run the online scan, deleted that file and a few suspicious others and now it seems to work!
Thank you so much!!

Thanks in advance!

I'm glad it worked for you. So many people on here bypass those kinds of suggestions and it always seems to work for me. Thanks for posting back.

Hopefully my advice will help you...Please post back with your results....thanks

Alicia, I sent you an e-mail on my basic maintence site...hope you enjoy it!

Hopefully my advice will help you...Please post back with your results....thanks

Fantastic...Had the same problem as the other guys and tried response 4.
At last I now have a clean PC.
Thanks for all of the advice listed above, ..pants on the outside eh!!

Makes you wonder how good these other spyware programs are though, have tried adware, spybot and a couple others I can't remember.
Cheers guys!
Mark

Hi Mark, glad it worked for you. I use that on-line cleaner after I've used all the others and it usually gets the culprits. Alot of times I let people know in their posts and they ignore it, then I have to ask if they tried it...LOL
I guess it just seems too logical at times...haha!

Hopefully my advice will help you...Please post back with your results....thanks

Sometimes the removal tools catch up
faster then one may think.

Always nice to know what works.

erm.. Hi
I have the same filost bug problem on my computer, but when I tried to go to the online scanner link given in Response No. 4, The page doesn't open. There is an error message saying "Connection Timed Out". It can't be my connection problem though, since the rest of the pages are opening fine.

Is there any other link to that tool or any other online scanner which will be effective for removing the spyware/bug?

Please Help! Thanks..

Oh, I tried again today and this time it worked. :D filost.com seems to have been removed. Thankyou.

But the toolbar it put up on my browser is still up there. How do I remove the spyware toolbar?