I can't tell exactly which viruses are on my comp, but here are some names that keep popping up in the scans: -TIBS dialer, tibster -BackDoor -PurityScan -Web Site Viewer (I think this is responsible for the porn screen that pops up every time I start my comp) Also, these are the most common sites that come up automatically while I'm on the internet: -klickfeed.com (a search site) -horseserver.net (this downloads something to my comp every time it pops up) I have tried running my scan programs in safe mode (Ad Aware, Spybot, Spy Sweeper, McAfee Virus Scan, Norton Anti Virus, Microsoft Anti Virus, CWS Shredder, AND Spyware Doctor). They all found lots of problems and supposedly deleted them. But they keep coming back, so I don't think these programs are finding the root of the problems. I will try the Trojan Scan and post the results. Again, thanks for the help

0

http://www.webroot.com/spywareinformation/spywaretopthreats/ Name: TIBS Dialer Description: TIBS Dialer – TIBS Dialer is a dialer program that hijacks your modem and dials toll numbers, usually to access pornographic "pay" Web sites. You may find you have been dialing £1 ($2) per minute. http://sarc.com/avcenter/venc/data/adware.purityscan.html Adware.Purityscan is an adware program that downloads and displays advertisements on your computer. Back-Door is most probably the Trojan although there are many variations. You should get the firewall sorted first as this will help stop the bugs getting back onto your PC after you have cleaned them out.

0

Every time I try to check my firewall settings, I get this message: "Due to an unidentified problem, Windows can not display Windows Firewall settings" Whatever is on my comp is clearly trying to make sure it stays there Now Internet Explorer won't work, either - I have to use Firefox Should I just give up and pay someone to fix my comp?

0

You have tried so many things without success that it would appear time to get some hands-on help from someone, maybe a trusted and patient friend with some experience in finding and correcting problems such as you have. I'm sorry that nothing we've recommended has helped you.

0

Thanks anyway for the advice

0

I'm working on this problem right now. It's very nasty. With the right tools you can see it doing buffer overloads. Not sure yet but it may be due to an infected copy of "collapse" game. First of all block horseserver.net on your external firewall. That will keep the trojan from updating. It wont stop the progam from working since it survives a reboot and reinstalls webview entries in the registry. You will see the temp files it creates to do this. The worm destroys Zone Alarm and Windows Firewall and dumps its files into the temp directory. It also trashes or patches wininet.dll perhaps to proxy requests. It also spawns this porn dialer. You may want to invest in a hardware firewall and monitor your pc externally to see what ports it is opening up. I'm making some progress in getting rid of it. There's also notices showing up on virus sites regarding the porn dialer which have instructions on removing it, which I have not gotten to work yet.

0

im not a computer expert or anything, so please dont make me sound like a know-it-all fool if you reply to this, but iv had my share of experience with viruses and spyware stuff, and am happy to share if it helps. 1.if you think you're comp is infected, start by immediately running running a check with spybot S&D, adaware or anything you have. 2.ctrl alt delete, and click the 'processes'tab. 3.look for anything suss, but only run by you and not system or anything else. 4. google the name of the program to see if u get a bunch of virus forums (how i got here). 5.end the process. 6.once the check S&D or adaware is complete, take note of the directory of any registry keys (HKEY...). 7.track them down and delete them all manually (be sure you delete the right ones). 8.delete the other files with S&D or whatever you use, when a message appears saying some files could not be removed (these should be the registry keys that were removed mannually),select scan when restart. 9.run a check again after all this, there shouldnt be anymore infected files. 10.run a check with norton, avg, or whatever antivrus programme you use. 11.restart (without internet connected if possible) and S&D or whatever should run, once its finished run your antivurus programme again. this should hopefully solve your problems, its worked for me and iv had TIBS and websiteviewer, among others. hope i help someone, cheers, TyGuY -It is good for girl to meet boy in park, but better for boy to park meat in girl. -A ship in the harbour is safe, but thats not what ships were built for.

0