Virus Information

[muchavo]

my computer was recently overrun with porno ads which were pretty hard to get out ... about a month before that 2 of the users screens on my system homeplages were changed to Skeech.com. also when ever the home page would skeech.com would start up an up cleanable virus would message would apear from mccafee vscan. i had to remove the virus manually.

does any one know what the virus was. (site[1].htm was the name) or what it did and what is the story with skeech.com

 

[DavidDCSA]

According to a search of Google (using the string "skeech&quot skeech.com is a gaming site. There is (apparently) an "option" on that site to set your home page to skeech.com. Perhaps (some) user has done this on the affected PC?

 

[TechnicMechEngineer]

Just recently I have had this problem too, and I have never accessed skeech.com before this, neither has any other user on my computer. MSN's browser is automatically redirecting me to this website whenever I try to use the MSN search (google and go search engines work fine). Research says that I'm not the only one with this problem. I checked my reg for anything unusual, perhapse it is a symbiotic virus (infecting internet explorer or some common dll for it.) I have also tried accessing MSN.com through IE, it automatically redirects me to skeech.com and sets my the site as my home page without any form of notification or confirmation. After checking the link that should do this, it is a redirector to "

http://www.msn.com/#"

thus it's obvious that they've done something to my computer. I'm not finding the site[1].htm virus with my mcaffe (fully upgraded) and I'm currently upgrading my MSN so if this doesn't work, I've lost all options. Usually I can fix stuff like this in a snap, but I'm not familiar with IE's file systems. Have you found a fix yet muchavo? How? Also, I explored the site, it isn't a gaming site, it's a regular search engine, as it looks, but any search for skeech refers you to

http://www.skeech.com/games/

which I suppose is the most viewed page by those who actually use skeech, if any exist. I think that I do have some insight into how it got on your computer, a product called savenow that is automatically installed with almost everything (audiosatelite, Kazaa, Gozilla, ect.) What I think this is is someone bought an add in savenow, redirected to a page that downloaded a small virus that attacks IE/MSN for auto redirecting to their site, then from there they redirect you to 7search.com so that they can make money for bringing traffic to that site. Pitiful that someone's banking in on this...

 

[everette]

Download Adaware from

http://www.adaware.com

- it will fix the problem.

 

[TrillGates]

I have found a CURE to the INFAMOUS "SKEECH" problem. All you have to do is go into your SEARCH on your computer. type in the word "hosts". Open it as a TXT file. it will probably show all different types of search engines, and it will start off with some type of IP address starting with a "6" and it will be the same IP address most of the way down the page, it does change once i think. All you have to do is delete this file, and the problem is solved. I am a Computer Science major, it took some doing, but I have solved the problem.

 

[sanhar123]

every time i try msn.com, i am being redirected to skeech.com. i have tried options of editing the registry, also updating hosts file. nothing seems to work so far. any suggestions?

 

[novlsqa]

Trillgates is correct about the hosts file. There is no need to delete the file though, just cut an remove all the host entries below the entry:

127.0.0.1 localhost

If you are running a virus protector like Norton, this should not happen, because it will block any changes to this file. Apparently this skeech website has code to change your etc/hosts file as soon as you access it.

 

[ronaldo141]

I also have been affected by the skeech bug. I searched for hosts and it came up with a file named "hosts", which I opened with notepad. It was a list of IP addresses, mostly pertaining to msn, that began with "6". All of them were the same, except for three at the top of the list which were related to "Aimster", a file downloading program. They also began with "6", but had a different set of numbers after that. I deleted the three files, but skeech was still there. I took another step and removed aimster, but again it was still there. Then i noticed a file named HOSTS.SAM. When i opened it, it was titled "This is a sample HOSTS file used by Microsoft TCP/IP stack for Windows98". At the bottom of the lists was the 127.0.0.1 IP address with nothing after it. I have run Ad-aware 6 and Swat It. Both detected bugs and trojans, respectively, which i deleted, but skeech was still there. Please tell me what else i can do to remove skeech.

 

[ronaldo141]

now when I type in

http://www.msn.com

it just loads a blank page. No more skeech, but no more msn either. Any ideas?

 

[sanhar123]

after 2 months of unsuccesful attempts trying to get rid of the "skeech.com" problem, i downloaded this free spyware rated the best in most of the PC magazines. i gave it a try and within a minute, i was able to log on to msn.com!! the spyware is called spybot. hope it helps all of you.

this is the link:

http://download.com.com/3000-2144-10194058.html?tag=lst-0-1