View Single Post
Old 21-06-2008, 23:25   #9809
Paul Delaney
Guest
 
Posts: n/a
Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]

Quote:
Originally Posted by davethejag View Post
Thanks Paul, done that but those 3 tabs are still not working. The only thing that has really happened to this computer before was when a while back I clicked on the link to view the video of the Phorm public meeting, the site that was hacked by the Russians and my AVG stopped a threat and I got rid of it. I googled "parasite" and followed advice to check programs in "add and remove Programs" and look for anything that I did not recognise. I found a program called "Sibelius Scorch (Activex Only)" lord knows where that came from but I removed it although it looked legitimate when going to their website. Is this the sort of thing we can expect if Phorm get a foothold? Thanks for your help Paul.

Dave.
Ok go here and download ComboFix.exe to your desktop

physically disconnect the modem cable

shut down avg (right click icon and select exit)

Double-click ComboFix.exe and follow the instructions

Avoid clicking the mouse inside the combofix blue command window

Combofix may reboot windows for you

The program has finished running when the Notepad page appears showing you the log.



---------- Post added at 23:25 ---------- Previous post was at 23:23 ----------

Quote:
Originally Posted by JackSon View Post
Sadly I have received no registration e-mail either (from nodpi.org). I used my throwaway hotmail address in case it is of any significance, is plausible hotmail isn't letting it through - it's filtering can be indiscriminate.
Mine ended up in the bulk email folder

EDIT: The redirector probably triggers a spam filter - check spam folders too:

[No Deep Packet Inspection] Your username and password
Friday, 20 June, 2008 2:47 AM
From No DPI Fri Jun 20 01:47:06 2008
Return-Path: <nobody@tarka.cheapukwebhosting.com>
Authentication-Results: mta139.mail.ukl.yahoo.com from=nodpi.org; domainkeys=neutral (no sig)
Received: from 78.129.175.68 (EHLO tarka.cheapukwebhosting.com) (78.129.175.68) by mta139.mail.ukl.yahoo.com with SMTP; Fri, 20 Jun 2008 03:54:54 +0000
Received: by tarka.cheapukwebhosting.com (Postfix, from userid 99) id E1F56270A6; Fri, 20 Jun 2008 02:47:06 +0100 (BST)