New Virus kakill?

Avast Free Antivirus / Premium Security
1

Hello,

i´m having a big problem that i can´t solve so far.

Since yesterday everytime i start Windows, the IE6 pop´s up with the following url: http://www.kaspersky.com/find?words=kakill&search=1

But i don´t use Kaspersky.

Newest avast has found nothing.Tried also other scanner´s which don´t find something too.

Spybot and MS Anti Spyware also have found nothing.

Searching the registry for the string “kaspersky” was also without success.

In the registry in the run & runonce folder was nothing and also taking a look into the msconfig didn´t show something new.

Default page for IE6 is still google.Autostart folder in windows is also empty.

The Host file of Windows is also still the standard file and Hijackthis also didn´t show up anything unknown.

Now i´m at the point where i don´t now further.

Is there any idea about this?

So for my bad english, i´m german.

Thank you,

Neflite

2

hi and welcome netflite,
are you saying that this url is popping up, or your browser (IE) is sending / redirecting you there?

3

Windows is starting up, and then immediately opens the IE6, (although Firefox is the default browser) and then goes directly to this site.I can´t recognise any redirection.

4

would you be prepared to share your view of HJT scan?

5

I will post that tonight, because at the moment i´m at work.

6

Hi neflite,

This has nothing to do with Kaspersky, it is a redirect because of spyware action, read this:
http://forum.kaspersky.com/index.php?s=ad817a21580c90d4f2c197b412ee1c41&showtopic=4916&pid=27411&st=0&#entry27411
Also read the postings in general on the use of hostfiles in WinXP, and why this is obsolete protection, because of malware redirection. With a program like hostess, you can take out the redirect. See the link. People that use a host file still in another OS always check it with Spybot S&D and note the checksum of the non-compromised hosts file for verification.

polonus

7

I´ve already read the Thread before i have startet this Thread.The Host File is not modified and i´ve already replaced it by the original via the button in the HOSTER Software, but it didn´t work and so i decided to post here… :cry:

8

Have you tried searching your registry for the word kakill
;D

9

I know it’s a generic answer but, can’t you scan your system with antispywares and antitrojans applications?
Ad-Aware, Spybot Search and Destroy, A-squared, Ewido or Microsoft AntiSpyware