• Announcements

    • Budfred

      IE 11 copy/paste problem

      It has come to our attention that people using Internet Explorer 11 (IE 11) are having trouble with copy/paste to the forum. If you encounter this problem, using a different browser like Firefox or Chrome seems to get around the problem. We do not know what the problem is, but it seems to be specific to IE 11 and we are hopeful that Microsoft will eventually fix it.
Sign in to follow this  
Followers 0
patsfan

virus ilxyk

4 posts in this topic

HI There,

 

 

I can't seem to get this virus out of 2 XP Pro machines, running AVG 7.0 Pro and used spybot, Network Associates Stinger and AVG's downloadable virus removal scanner. These are the latest updates, 6/28 for AVG and 6/15 for Stinger.

 

I disable system restore and do the scans in Safe mode, along with normal mode.

It cleans the viruses, but several hours later they come back. Most interesting is I can't seem to remove the Internet Explorer default page from going to a website called ilxyk,etc. I go into tools and set blank page as the home page and clean the virus,etc , it say's it is clean it is gone for several hours and comes back.

 

It say's the virus is being stored in the res (restore folder) but I can't get in there to delete it manually or rename it. Again, I've turned off restore before doing the virus scans and deleted the file via AVG. I've also turned restore on and off several times in an attempt to purge the previous restore files.

 

other viruses that seem to come up (after) I'm forced to this ilxyk website are,

 

sdkeo.exe

apict.exe

gemtl.exe

winou32.exe

winpv.32

ieir.exed

addmo32.exe

syskk32.exe

 

I've also tried making the ilxyk site restricted in IE tools, but it keeps coming back, after I turn java scripting back to enabled. If I keep java disabled it keeps trying to go to the site but doesn't bring the site web page up, it's blank.

 

I also have downloaded the latest Windows updates as of 6/28.

 

It doesn't seem destructive, just a big pain in the butt.

 

any ideas out there?

 

thanks,

Share this post


Link to post
Share on other sites

What's the virus name? If you can tel me the name, I can look on one of thw AV websites for technical info, and the manual removal instructions.

Share this post


Link to post
Share on other sites

HI,

 

the virus doesn't seem to be named, AVG just states it a dowloader.bf virus and such. I think it is the virus listed in the previous link, but it seems slightly different than what he has reported. I"m going to try that method and see what happens.

 

thanks

Share this post


Link to post
Share on other sites

This sounds like one of the latest CoolWebSearch variants. The reason AVG cannot remove it is because it is actually spyware that is doing trojan like activity.

 

Please download Ad-aware and SpyBot Search & Destroy and set them all up EXACTLY as I have written HERE. This will offer much deeper scanning than the default settings that will find more spyware/malware. You will also see instructions on setting up AVG 7.0 as well to maximize it's protection.

 

If after doing ALL of the above and you are still having problems please post a HijackThis log here in this forum for us to look at.

 

:D

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0