03-18-2004, 05:54 PM
Most viruses out now will disable your anti-virus program. G-boy...if I was in your shoes....total format and clean install.
As to the www in front of URL's....that is determined by the host of the website. When you set up a website on a server...you have to add host-header names to identify the folder that the site request is trying to go into on the server. Hence...you can have hundreds of websites from one server at one IP address. The thing that determines WHICH site (which folder to go into for the website files) is the name assigned to that site. If the administrator ONLY puts www.sitename.com in the hostheader settings for a website, you HAVE to type in www.sitename.com. If he adds a second header entry for just sitename.com in addition to the original with the www. then the person trying to find the site will hit it with both entries. If this setting is not set... sitename.com will not resolve to a site...only www.sitename.com. I know this doesn't help your virus problem, but it educates you in how webservers do the URL thingy.
If you think you are infected...search your registry for wierd entries.
Goto START/RUN
Type in REGEDIT in the box and hit OK.
Expand the HIVE KEY HKEY_LOCAL_MACHINE
Expand SOFTWARE under this.
Expand Microsoft under this.
Expand Windows under this.
Expand CurrentVersion under this.
Then click once on the RUN folder under this. (Dont expand...click once.)
Look on the right frame now. These alr ALL the programs that start everytime you login. Most are ok and are needed. You can see the name of the program on the left under the Name column. To the right under the Data column you see the actual path to find that program. Look for a random letter Name in the Name column that looks out of place. If the path is to something you don't recognize, do a google search for the Name you see and see if anything comes up malicious. If you want to remove it, right click the Name and select delete. This is where the majority of viruses and spyware crap gets installed so that they start up when you boot. If you can kill it here, you can get your norton up to find it.
Go to the symantec.com site and look up the removal processes for viruses listed...they will usually tell you this exact process. You might want to look under the dozen NetSky viruses that are killing us and see what the registry entries look like and compare them to yours. Note: if you start in safe mode...you can keep alot of these from running so you can remove them.
Lemme know if you need any help. You can even call me if you want. Post in the cDh forums if you want this and I'll give you my cell number.
As to the www in front of URL's....that is determined by the host of the website. When you set up a website on a server...you have to add host-header names to identify the folder that the site request is trying to go into on the server. Hence...you can have hundreds of websites from one server at one IP address. The thing that determines WHICH site (which folder to go into for the website files) is the name assigned to that site. If the administrator ONLY puts www.sitename.com in the hostheader settings for a website, you HAVE to type in www.sitename.com. If he adds a second header entry for just sitename.com in addition to the original with the www. then the person trying to find the site will hit it with both entries. If this setting is not set... sitename.com will not resolve to a site...only www.sitename.com. I know this doesn't help your virus problem, but it educates you in how webservers do the URL thingy.
If you think you are infected...search your registry for wierd entries.
Goto START/RUN
Type in REGEDIT in the box and hit OK.
Expand the HIVE KEY HKEY_LOCAL_MACHINE
Expand SOFTWARE under this.
Expand Microsoft under this.
Expand Windows under this.
Expand CurrentVersion under this.
Then click once on the RUN folder under this. (Dont expand...click once.)
Look on the right frame now. These alr ALL the programs that start everytime you login. Most are ok and are needed. You can see the name of the program on the left under the Name column. To the right under the Data column you see the actual path to find that program. Look for a random letter Name in the Name column that looks out of place. If the path is to something you don't recognize, do a google search for the Name you see and see if anything comes up malicious. If you want to remove it, right click the Name and select delete. This is where the majority of viruses and spyware crap gets installed so that they start up when you boot. If you can kill it here, you can get your norton up to find it.
Go to the symantec.com site and look up the removal processes for viruses listed...they will usually tell you this exact process. You might want to look under the dozen NetSky viruses that are killing us and see what the registry entries look like and compare them to yours. Note: if you start in safe mode...you can keep alot of these from running so you can remove them.
Lemme know if you need any help. You can even call me if you want. Post in the cDh forums if you want this and I'll give you my cell number.