Registry Possible Virus ??

[triplej]

My daughter has a problem with her computer. She uses Hotmail and other MSN stuff. Anyway the other day her home page had changed to w.hackersclub.up.to. I changed the (up.to) to net and got the hacker site. Also missing from the systray was her norton AV icon. I am unable to run AV from the desktop icon. Unable to uninstall or install newer version of norton at present using 2002 tried to install 2003.
Whenever I try to enter the register to delete entrys of norton the registry edit program appears then disappears.

[YODA74]

Go here and get Highjack this and run it

http://www.spywareinfo.com/~merijn/

Also go here there are a few more programs such as on line AV to run a scan for free for viruses

http://www.pcguide.com/vb/showthread.php?s=&threadid=15179

and pls. don't post any questionable links to sites like this you know how people are they will click on anything (curiosity)

[mjc]

Actually that place doesn't look like a place a hacker would have anything to do with, other than try to damage it. It looks to be a "free" email service, and the restting of the homepage may be part of their TOS.

[Paul Komski]

If your AV has been tampered with it sounds very like Klez virus or something of that ilk. http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.h@mm.html

As mentioned before it would be a good idea to do an online scan. It's just possible you may be able to run NAV from Start<>Run by entering NAVW32.EXE /L /VISIBLE (with a space before each slash).