|
|
| Author |
Message |
atarom
Guest
|
 Posted: 05/27/04 - 14:48 Post subject: f*****g spyware
|
|
|
ok. so wtf.
my friend got on my computer and got all sorts of shit on it.
i ran ad-aware, but it still f***s up. and any time i try to type in a URL, it connects me to some weird page
so when i type www.realpoor.com, i go to "file:///C:/searchpage.html?page=www.realpoor.com"
but if i type http://www.realpoor.com, it works fine.
but i also still get pop ups, even though i ran ad-aware, and rebooted and ran it again at startup.
wtf save me, i dont wanna format
|
|
|
Back to top
|
|
|
|
 |
Ikkan
RealPoor Guru
Joined: 06 Sep 2003
Posts: 3086
|
|
Posted: 05/27/04 - 14:49 Post subject:
|
|
|
It's because you didn't let me come swimming 
|
|
|
Back to top
|
|
|
|
|
atarom
Guest
|
|
Posted: 05/27/04 - 14:52 Post subject:
|
|
|
|
f**k you, go swim in your bathtub
|
|
|
Back to top
|
|
|
|
|
Ikkan
RealPoor Guru
Joined: 06 Sep 2003
Posts: 3086
|
|
Posted: 05/27/04 - 14:53 Post subject:
|
|
|
|
Will you come to my bathtub pool party?
|
|
|
Back to top
|
|
|
|
|
atarom
Guest
|
|
Posted: 05/27/04 - 14:54 Post subject:
|
|
|
|
no. answer my question damnit.
|
|
|
Back to top
|
|
|
|
|
compusmack
RealPoor Master of Posts
Joined: 15 Oct 2002
Posts: 6354
|
|
Posted: 05/27/04 - 14:54 Post subject:
|
|
|
|
Check your registry settings for internet explorer.
|
|
|
Back to top
|
|
|
|
|
Ikkan
RealPoor Guru
Joined: 06 Sep 2003
Posts: 3086
|
|
Posted: 05/27/04 - 14:56 Post subject:
|
|
|
| compusmack wrote: | | Check your registry settings for internet explorer. |
Will you come to my bathtub pool party? 
|
|
|
Back to top
|
|
|
|
|
atarom
Guest
|
|
Posted: 05/27/04 - 14:56 Post subject:
|
|
|
ad-aware deleted a million regkeys..
what do i look for?
|
|
|
Back to top
|
|
|
|
|
merdocc
RealPoor Guru
Joined: 11 Oct 2002
Posts: 2038
Location: Pasadena Ca
|
|
|
Back to top
|
|
|
|
|
atarom
Guest
|
|
Posted: 05/27/04 - 15:00 Post subject:
|
|
|
|
cgi limits reached, please try again later
|
|
|
Back to top
|
|
|
|
|
merdocc
RealPoor Guru
Joined: 11 Oct 2002
Posts: 2038
Location: Pasadena Ca
|
|
Posted: 05/27/04 - 15:08 Post subject:
|
|
|
|
That's weird it just loaded 5 mins ago.. you must have infected their system!
|
|
|
Back to top
|
|
|
|
|
atarom
Guest
|
|
Posted: 05/27/04 - 15:37 Post subject:
|
|
|
ok so now it doesnt link me to that crappy site, but it tells me
"cannot find the address www.realpoor.com, make sure the address is correct"
|
|
|
Back to top
|
|
|
|
|
Clevinger
Guest
|
|
Posted: 05/27/04 - 16:00 Post subject:
|
|
|
i have the same crap going on with my comp too. not exactly the same problem as you but for some reason i simply cant get rid of whatever is bombarding me with pop ups even after spybot, seek and destroy, and adaware.
ive yet to find a solution
|
|
|
Back to top
|
|
|
|
|
Manuva
Banned
Joined: 12 Oct 2002
Posts: 2536
|
|
Posted: 05/27/04 - 16:15 Post subject:
|
|
|
go to windows/system32/ and rename mshelper.dll to mshelper.bogus or somethign like that
rename mtwirl.dll to mtwirl.bogus
reboot
delete both the .bogus (or whatever you named em) files.
go to regedit and do a search for c:\searchpage.html and clear those keys out.
you need to get mtwirl.dll because what that does is, if you change your IE settings or delete any keys, it automatically re-writes them every 15 seconds so you're fuuucked.
|
|
|
Back to top
|
|
|
|
|
atarom
Guest
|
|
Posted: 05/27/04 - 16:44 Post subject:
|
|
|
|
leet. rebooting.
|
|
|
Back to top
|
|
|
|
|
atarom
Guest
|
|
Posted: 05/27/04 - 16:52 Post subject:
|
|
|
|
still getting shit.
|
|
|
Back to top
|
|
|
|
|
gotissues68
RealPoor Sensei
Joined: 21 Aug 2003
Posts: 1866
|
|
Posted: 05/27/04 - 16:55 Post subject:
|
|
|
|
go do a search for hijack this! its a tool that'll tell you everything thats wrong and fix what it can.
|
|
|
Back to top
|
|
|
|
|
atarom
Guest
|
|
Posted: 05/27/04 - 18:04 Post subject:
|
|
|
god my f*****g comp feels so choppy now.
goddamnianinti
omg i hate this shit. i want to format right now.
f*****g hell.
|
|
|
Back to top
|
|
|
|
|
Kin
Luke Warm
Joined: 11 Oct 2002
Posts: 388
|
|
Posted: 05/27/04 - 19:20 Post subject:
|
|
|
|
that's what you get for letting a retard on your CPU
|
|
|
Back to top
|
|
|
|
|
atarom
Guest
|
|
Posted: 05/27/04 - 23:36 Post subject:
|
|
|
|
god i'm so p****d. i'm gonna f*****g format.
|
|
|
Back to top
|
|
|
|
|
Xion
RealPoor Guru
Joined: 11 Oct 2002
Posts: 2117
Location: Los Angeles, CA
|
|
Posted: 05/27/04 - 23:38 Post subject:
|
|
|
| atarom wrote: | | god i'm so p****d. i'm gonna f*****g format. |
honestly, that's probably your best beet.
kick your friends idiot ass.
|
|
|
Back to top
|
|
|
|
|
Ikkan
RealPoor Guru
Joined: 06 Sep 2003
Posts: 3086
|
|
Posted: 05/27/04 - 23:48 Post subject:
|
|
|
|
Poor Atarom
|
|
|
Back to top
|
|
|
|
|
Aatommy
Rookie
Joined: 12 Oct 2002
Posts: 61
|
|
Posted: 05/28/04 - 15:44 Post subject:
|
|
|
http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13
thats to download HijackThis.
Download it, tell it to scan, and copy/paste it here. Do not tell it to fix anything unless you are sure of what it is. (you can fuxor your computer)
Specificaly for your problem, look for a line like:
If they say anything other than this for those lines, check the box to the left of them, then hit the "fix checked" button.
If theres others, feel free to post the whole log, or pm me, and i'll give ya my email addy 
|
|
|
Back to top
|
|
|
|
|
atarom
Guest
|
|
Posted: 05/28/04 - 18:44 Post subject:
|
|
|
i'm still getting pop ups too. i deleted twirl and mshelper.
and IE is all choppy as f**k.
|
|
|
Back to top
|
|
|
|
|
Aatommy
Rookie
Joined: 12 Oct 2002
Posts: 61
|
|
Posted: 05/29/04 - 21:26 Post subject:
|
|
|
check the boxes next to:
| Quote: | O4 - HKLM\..\Run: [win32.exe] C:\WINDOWS\win32.exe
info here
O9 - Extra button: PartyPoker.com (HKLM)
O9 - Extra 'Tool' menuitem: PartyPoker.com (HKLM)
O16 - DPF: {10003000-1000-0000-1000-000000000000} - ms-its:mhtml:file:blah blah
O16 - DPF: {56336bcb-3d8a-11d6-a00b-0050da18de71} - http : //207,188,7,150 blah blah |
there is more in your list tho below the screen isnt there?
if you hit the log button lower left corner of the main window, it'll make a text file for ya.
|
|
|
Back to top
|
|
|
|
|
WhiteWidow
Toomuchtimeonhands
Joined: 11 Oct 2002
Posts: 975
|
|
Posted: 05/29/04 - 22:22 Post subject:
|
|
|
I don't let friends on my computer unsupervized. I think it's funny how their computers last three months max before they have 500 errors on bootup, and popups when they aren't even online.
hahrharhar
|
|
|
Back to top
|
|
|
|
|
atarom
Guest
|
|
Posted: 05/29/04 - 23:07 Post subject:
|
|
|
|
no, that was the whole list, and i actually run partypoker... are you sure i want to delete that?
|
|
|
Back to top
|
|
|
|
|
TRUbuyer
Luke Warm
Joined: 14 Sep 2003
Posts: 195
|
|
Posted: 05/29/04 - 23:10 Post subject:
|
|
|
|
Had same prob, I formatted and added googlebar and adware first minute I got it back up.
|
|
|
Back to top
|
|
|
|
|
Aatommy
Rookie
Joined: 12 Oct 2002
Posts: 61
|
|
Posted: 05/31/04 - 12:18 Post subject:
|
|
|
|
if you actualy run party poker then leave it hehe, it just looked suspicious to me.
|
|
|
Back to top
|
|
|
|
|
principessa
RealPoor Guru
Joined: 11 Oct 2002
Posts: 3149
|
|
Posted: 05/31/04 - 12:26 Post subject:
|
|
|
I may not know wth I am talking about but I did find on a computer at work that there was a search bar that I could not remove with spybot, add/remove programs (even tho it was listed there!!) etc.
I had to remove the ActiveX control in order to remove it. I found the ActiveX control via spybot though and not on the S&D execution. I found it in another function the program has--can't think of it off the top of my head, though.
|
|
|
Back to top
|
|
|
|
|
|
|
