virus or twc bug

[Denny Crane!]

Pills11.com keeps appearing in my posts?

Any answers?

pills11.com )

[mrmouth]

You've been surfing German gay porn sites again, haven't you!

[Simetrical]

Run the standard anti-malware stuff, like AdAware and your local virus scanner. Also, if you're using Internet Explorer, try using a different browser like Firefox (if you click the link at the bottom of the page to switch over TWC even gets money out of it, although nobody try to manipulate that dishonestly, please).

[mrmouth]

Ive searched but cant find anything on it.

[Doono]

I know the sites in german and you have to register to get the links but it seems to have worked for a poster so this looks like your best shot

http://translate.google.com/translat...3Doff%26sa%3DG

[kshcshbash]

Consider using an alternate browser, or a clean install. If I understood correctly, something's got a hook on your browser's POST requests.

I'm not sure what Mozilla Firefox for Windows uses, though if it's tied directly into Win32, then you may be royally ****ed; Windows isn't particularly great like that.

With that said, I'm speculating almost entirely. More details?

[Denny Crane!]

I've sorted it by rigorous checks in safe mode, virus checks and scanning my hijackthis logs, deleted one or two things and voila.

Must cut back on the horse porn

I didn't realise malware could be so insidious.

[Aristocrat]

Just don't click any links provided by Evariste and you should be fine

As for insidious, spyware and malware are ever so much fun to remove via chasing around a system.

(One of the reasons I don't work in computer repair is solely so I don't have some seedy 42 year old wearing a bed sheet bring his computer in so he can get the net working properly again so he can download more porn).