Whenever I first log in onto my Windows 2000 Pro PC, I get asked if I would like to connect to the Internet to allow access to mederkuran.mine.au
I’ve know idea why and I cancel. However I’m worried that when I connect to the Internet, something on my computer is trying this site.
I have installed avast home and Lavasoft adware 6.
ANy ideas why I get this message?
Hi,
are you sure you spelled this right ? ('cause: “mine.au is an unknown host…”)
where are you located ?
how do you connect to the inet ?
→ modem/cable/DSL, router/proxy, provider, firewall …?
Please read the link “VirusRemoval” below and post a hijackthis-Log…
you could also try Spybot & Cwshredder 
There is a application loading at boottime that wants to connect. Use StartUp.cpl to see what is loading and disable it. After that click on the link in my signature and remove all harmfull things from the system.
The correct url is mederkuran.mine.nu
Sorry the eyesight is beginning to fail me.
However I will check the startup file.
Thanks,
Ian
no Problem, hope it’ll be better soon 
Adress/IP:
Somewhat confusing →
Hostname: mederkuran.mine.nu
IP Address: 10.0.1.128
Symantec says the mederkuran-part doesn’t exist, but
mine.nu is located in BOSTON and belongs to :
Dynamic Network Services, Inc.
City: Manchester
StateProv: NH
Country: US
There’s also DNS.mine.nu in Amsterdam, NL
Can this have something to do with your provider ?
The startup utility was very useful.
I found a file ns.exe was being loaded. I have switched this off and the problem has stopped.
Interestingly enough there isn’t a ns.exe file on my PC ???
I did a text search for mederkuran on the C drive and the file windev.com appears to contain the string.
Should I be worried about this file ?
It virus checks ok.
Thanks,
Ian
ns.exe can be a legitimate file or virus/spy-/adware. Depends on what folder it is in. Since disabling it solved the problem you have that file somewhere on your system. Did you enable “show hidden files” while searching for it?
windev.com is unknown to me. Even google has nothing on it. That always makes me suspicious. Scan it with a online scanner and see if that reports it as infected/virus. Just to make sure this isn’t one Avast is not recognizing. Links to online scanners can be found on the page you see if you click on the link in my signature.
There is also something else I want to check, just to make sure. Please post a HijackThis log file here or send it to the email address mentioned in the read.me if you have my HijackThis log file analyzer. (Can be downloaded from the same site in my signature)
As it looks now, you have nothing to worry about anymore. But let’s make sure