Jump to content


  • Content Count

  • Joined

  • Last visited

About MTT

  • Rank
  1. Thanks. I didn't know how to go about the sas people. Thanks for the time & effort that you spent with me.
  2. Thanks. I didn't know how to have them check it. I appreciate the link & the time you spent on this too. Thanks again
  3. Yes I updated and ran both sas and mbam. I did not do it in safemode though. Yea this one is really nasty. It's apparently new enough that sas & mbam haven't got it figured out yet. It's odd that the language files in the temp folder are .bin
  4. It also seems to have something to do with userinit.exe
  5. I added the entry in the host file but is still does not block it. I found that it keeps adding an entry to my temp folder every time that I delete this. I use mbam to stop the temp file and delete it. It then always on reboot adds new files to the temp folder. The temp files ALWAYS start with a ~ then random letters & numbers.tmp. It also loads these language files. turkish.bin polish.bin korean.bin japanese.bin and so on. 27 .bin files in all.
  6. My host file doesn't look right to me. Here's a copy of it. # Copyright © 1993-1999 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # rhino.acme.com # source server # x.acme.com # x client host localhost
  7. Still no luck. After I ran sas with the latest updates, it removed the alert from the taskbar but still popup with alert message & tried to connect to anykuy.com. I then ran malwarebytes with the latest updates. It found a rogue named cognac in the registry program files. removed it but still have the same problem. After reboot it came back with the alert in the taskbar. I suppose I will have to format to get rid of it. Hate to give in to these things by having to do that.
  8. It seems as though maybe I got it. I finally got my SAS to install the updates offline. I rebooted & do not see my alert. I am now in the process of updating & running malwarebytes. Thanks for the help.
  9. I have XP home. I installed superantispyware after I was infected. I have already tried things such as combofix & sdfix. It temporarily removed the alert from the taskbar but it would still try to connect to anykuy.com. It did restore my regedit though. I downloaded the superantispyware def files but it does not indicate that they were updated. Thanks
  10. I am new to forums so please bear with me. Am I in the right place? I have a problem that I can't fix. I have a red X in the system tray that says Alert! You have a security problem. do you want to scan your computer for virus's? It also tries constantly to connect to http://anykuy.com. I have disabled my internet connection so that it cannot connect to the internet. It also had disabled regedit & other things. I cannot even connect to the internet at all now even when I try. any help possible?
  • Create New...