Spyware? Webpage to llehs.com and errorprotector.com appears

LazerLordz SG

I need some help here..

There have been instances of these two websites popping up by themselves, regardless of whether I'm using Firefox 2.0 or IE6.

Which is the file and where is it located, so I may delete them? Does anyone know the registry values of the offending files as well?

Thanks.

ndmmxiaomayi SG

What websites have you visited recently? Especially blogs.

Please download SmitFraudFix.exe by S!Ri and save it to the desktop.

Note: process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user. Read more here

LazerLordz SG

Hey, thanks a lot. Smile

I've been getting quarantine reports of vundo, nebuler and bundo on my Symantec too..

Hmm.

ndmmxiaomayi SG

Vundo! Although that one isn’t nasty, but it isn’t so easy to remove also, even with automated tools.