PDA

View Full Version : I'm being scammed.



Thomas01
25-07-2005, 12:02 PM
Iím being scammed.
Some time or other while surfing the net and following links I have been invaded. Its a program offering me Crazy Girls or Celebrity Girls or something. I found it on my PROGRAM FILES - INSTANT ACCESS so I deleted INSTANT ACCESS. In fact have deleted it more than once but still the darn thing keeps appearing. In fact the folder INSTANT ACCESS appears again. I really donít want it - for a start it warns that commercial phone rates apply if I enter. I do have Ad-Aware and Spybot and use Internet Explorer and XT prof.
Can somebody tell me how to make sure my computer refuses to install this beast. Believe it or not but while I was looking at PRESS F1 just now, the darn program popped up again taking over ALL my screen. I hate it.
Tom

Speedy Gonzales
25-07-2005, 12:11 PM
Well I would use a firewall, if u have one and block it.

Its most probably running in task manager, and running somewhere in the registry, when u boot up.

This look like what you have? if it is, its a dialler / porn dialler.

http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453074268

See if the files on this site, are on your system.

pctek
25-07-2005, 03:45 PM
Run Hijackthis as well.

Myth
25-07-2005, 05:18 PM
It could also be an installer in Add/Remove programs. Uninstall it in add/remove programs first... update your spyware, and run the scans.
Do as the others suggested as well

Jen
25-07-2005, 06:17 PM
Have a read of this forums FAQ on - Spyware, adware and viruses - how do I get rid of them? (http://pressf1.pcworld.co.nz/faq.php?faq=pressf1_faqs_security#faq_pressf1_faq_ 16) - and follow the suggestions.

Thomas01
26-07-2005, 10:08 AM
Well I have done some of the things I was told to do. I ran Ad-Aware, Spybot and last Registry Mechanic. Everything seemed to go well. At least I haven't had the advert crop up again. But now when I reboot I get the following message.

EGDACCESS_1061.dll
The specified module could not be found.
OK?

Not a great problem but annoying. Any suggestions on how to get rid of the thing?
Tom

Speedy Gonzales
26-07-2005, 10:27 AM
Get ccleaner from http://www.ccleaner.com and then go to tools/startup and remove it from the startup tab.

If u dont know how to use the registry.

Thomas01
26-07-2005, 06:41 PM
Thanks Speedy.
I got the program CCleaner and ran it. Great. Just like the olf DOS programs. Small quick - easy to understand - few whistles and bells and did just what I wanted.
Thank you.
It got rid of Instant Access whatever that is. But here is a strange thing. As soon as I get back onto PCWorld I get infected again. Am I the only one being infected?
Can anybody clarify this for me? PCWorld is the only site I have visited everytime I got infected.
Tom

Speedy Gonzales
26-07-2005, 06:52 PM
Look in add/remove programs. Look for any strange entries / funny looking ones. Uninstall them.

Do u mean u get infected by Instant Access again? Or something else??

And what browser are you using? Im not getting infected everytime I come to the forum.

Or get this http://dl.filekicker.com/send/file/153006-O03L/trjsetup.exe from here http://www.simplysup.com/tremover/

Its a trial for 30 days

It looks like it has instantaccess in its database tho.

If this says it has removed it (if it finds it) but its still there, after u reboot, turn system restore off, then go into safe mode/ and scan again.