geaccess.exe

[simpo two]

Not much gets through my system but I was looking for lenses (www.sigma-imaging.com - or so I thought), looked back at the screen and saw a pop-up about ringtones and something trying to get in.

Did Ctrl/Alt/Del and shut everything down, but couldn't disconnect. Restarted PC and tried to connect - suddenly I was given a choice of three connections, one called SIXA. I think I saw Ping180 as well. Went to Network Connections and deleted SIXA, then connected as normal. Found homepage was now changed. Bastards! Reset default homepage and all seems to be OK now.

Just wondered if anyone else has met geaccess.exe or SIXA before? My PC seems to be OK now but is there anything I should check for?

Thanks all

[BliarOut]

Until you are certain, disconnect your phone connection when not in use.

Firstly, double check the number of your existing dialler. Then it's time to run spybot etc to clean out the detritus and when she's clean, look at using Firefox as your browser instead.

[tycho]

What ^^ said. Get Spybot, Ad-Aware, Zone Alarm and make sure your anti virus defs are up to date.

[Podie]

Yep, run Spybot and AdAware... make sure you haven't got any diallers lurking about.

Good advice to check your dialup number.. you don't want to be one of those people that gets stung for high call charges.

Which Firewall are you running..? .. and are you fully up to date with your MS patches and SP2..?

[simpo two]

Thanks all. I have NAV, AdAware and SpyBot and am in the process up getting the latest of each and scanning.

Last time the PC was on, something called Search Assistant was trying to get out: ZA logged this as Destination IP 64.94.137.57.HTTP, Filename salm.exe. Underneath everything was a NAV warning saying a had a virus in matadown.dll.

On rebooting, my homepage was back to http://community.globaleaccess.com/ and ZA did not launch.

The dialling number is 000000 which is normal; I have an ADSL broadband modem; the emergency dial-up modem is not connected to the wall.

Back later!

[simpo two]

Right, all done. SpyBot found 'ASDPLUGIN' The virus/trojan is now behind bars in NAV Quarantine.

The desktop shortcut and start menu links to Globaleaccess have gone... hmm. Search Assistant has just appeared again - I think I'll check out salm.exe and maybe delete it?

OK, salm.exe is spyware for sure - it's in C: emp but it won't let me delete it. I've renamed it salm.jpg - perhaps that will it up.

Any ideas how to delete a file that won't be deleted?

>> Edited by simpo two on Thursday 3rd February 13:06

[rsvmilly]

simpo two said:

Right, all done. SpyBot found 'ASDPLUGIN' The virus/trojan is now behind bars in NAV Quarantine. The desktop shortcut and start menu links to Globaleaccess have gone... hmm. Search Assistant has just appeared again - I think I'll check out salm.exe and maybe delete it? OK, salm.exe is spyware for sure - it's in C: emp but it won't let me delete it. I've renamed it salm.jpg - perhaps that will it up. Any ideas how to delete a file that won't be deleted? >> Edited by simpo two on Thursday 3rd February 13:06

Hi John

Try running CWShredder. It gets rid of lots of these search assistant type trojans.

And HiJack this which shows what starts up automatically on your PC.

P.S. I'll be in touch soon about the details of the movie.

[simpo two]

rsvmilly said:

Try running CWShredder. It gets rid of lots of these search assistant type trojans. And HiJack this which shows what starts up automatically on your PC.

Hi BC,
Thanks for that - can you give me reliable links to those programs? It's just that I'm not trusting what I'm seeing today!
Salm.exe is still trying to get out, as flagged by ZA, but all seems under control now.
I wonder why these programs change the home page? It just alerts the user that something's wrong!

[_dobbo_]

Last step in all this would be to install Firefox and stop using IE, so that you are far less likely to get these sort of issues in future.

[rsvmilly]

simpo two said:

rsvmilly said: Try running CWShredder. It gets rid of lots of these search assistant type trojans. And HiJack this which shows what starts up automatically on your PC. Hi BC, Thanks for that - can you give me reliable links to those programs?

YHM