Support Our Troops!
Support Our Troops!
  
Support Club3G!
 

Go Back   Club3G Forums > General Chat Forums > Gaming and IT Discussion
Reload this Page What to do when you have Spyware
One of the largest message boards on the web !     Club3G Decals
Register FAQ Members List Calendar Arcade Search Today's Posts Mark Forums Read

   
Reply
Page 2 of 5 < 1 2 34 > Last »
 
Thread Tools
Old 03/25/2005, 11:25 PM   #61 (permalink)
My luvly manly lump!
 
Slippercream's Avatar
 

Join Date: Sep 2001
Location: e-Manbitch in Sheep Clothing
Vehicle: 06GTPP/6MT + 01GTPP-T/5MT
Posts: 2,433
Slippercream : who are you?Slippercream : who are you?Slippercream : who are you?Slippercream : who are you?Slippercream : who are you?
Send a message via Yahoo to Slippercream
Sorry, Bitter. Apparently you have nothing better to throughout the course of your day than to stack up useless registry entries through installs you prolly don't need.

I'd hate to say this, but get a life. If you can't live without your software... MIND YOU... you're talking about CLIENT programs, not data...



Geez... I just can't relate anymore.
Slippercream is offline   Reply With Quote
Old 03/25/2005, 11:31 PM   #62 (permalink)
Zoom FTW
 
Bitter's Avatar
 

Join Date: May 2004
Location: Homewood, Il
Vehicle: 2007 Camaro
Posts: 29,049
Bitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club exists
Send a message via AIM to Bitter Send a message via Yahoo to Bitter
im talking about my aunts computer who had a legit install of nero, but lost the CD. i formatted then had to dl and install and crack nero so she could burn CD's. she wasnt exactly thrilled about that.
Bitter is offline   Reply With Quote
Old 03/26/2005, 12:43 AM   #63 (permalink)
My luvly manly lump!
 
Slippercream's Avatar
 

Join Date: Sep 2001
Location: e-Manbitch in Sheep Clothing
Vehicle: 06GTPP/6MT + 01GTPP-T/5MT
Posts: 2,433
Slippercream : who are you?Slippercream : who are you?Slippercream : who are you?Slippercream : who are you?Slippercream : who are you?
Send a message via Yahoo to Slippercream
It's a little futile, but hey.

Now that you can burn CD's, you know that you can burn and archive those programs on CD so you can keep extra copies, right? I understand how you can feel irritated at losing "precious" installs... but that's just the gist of this whole conversation. BACKUP. From files to install CDs to miscellaneous digital trinkets (music, vids, etc)... burn em, ghost em, RAID em I don't care... there are so many options available to you... and you can even buy off-the-shelf solutions at Walmart!

If you're conscientious enough about your electronic property, you'd take extra precautions to safeguard them. Much like you'd purchase full-coverage insurance for a paid-off car because it's your baby, you'll probably want to go install "insurance" for your machine/system. Virus/adware/blah protection and immunization software can even be downloaded for free, or as shareware! You get the idea.

But like I said, old-schoolers like me don't really care for storing things we don't need. That was back in college, I guess. I used to own towers and CRTs, and now I'm on laptops. The dynamic has changed, and portability is better than power dragged down by baggage. Same applies to data and software. Then again, I'm just me, right?
Slippercream is offline   Reply With Quote
Old 03/26/2005, 01:13 AM   #64 (permalink)
Zoom FTW
 
Bitter's Avatar
 

Join Date: May 2004
Location: Homewood, Il
Vehicle: 2007 Camaro
Posts: 29,049
Bitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club exists
Send a message via AIM to Bitter Send a message via Yahoo to Bitter
i do back up. its 95% of everyone else who doesnt back up that formatting isnt a viable option for. my aunt hadnt backed up anything. the problem with her computer (virus/trojan/worm) kept it from booting to windows. i was 4 hours from home and any other computers i could use and she wanted it fixed that day since i had told her i could and would when i saw her at the family lunch. she didnt really have any files she wanted on it, but she had alot of software installed (im pretty sure her solitare buddy poker online crap was the root of problems) that she did not want to have to dl and install again. dialup on aol an hour south of lansing michigan fucking sucks. 33.6 was a good speed for her.
Bitter is offline   Reply With Quote
Old 03/26/2005, 02:20 AM   #65 (permalink)
My luvly manly lump!
 
Slippercream's Avatar
 

Join Date: Sep 2001
Location: e-Manbitch in Sheep Clothing
Vehicle: 06GTPP/6MT + 01GTPP-T/5MT
Posts: 2,433
Slippercream : who are you?Slippercream : who are you?Slippercream : who are you?Slippercream : who are you?Slippercream : who are you?
Send a message via Yahoo to Slippercream
I think actually getting 33.6 on Fuckin-A-OL is actually pretty damn good! That considering AOL

Well... I'm still stuck here trying to figure out what your beef is with "[re]formatting"! Ask any support guy... especially helpdesk guys: the most irritating people they ever encounter in a day are those who "need to get their proble fixed immediately," and those who "don't have the luxury of time" to have someone help fix their problem properly! Want another really apt example? Take a guy who wants to turbocharge his car in a day! After 6 months, see where he is, still waiting on the same shop to either finish the work/mess he got them started at... or maybe fixing the engine that he blew up. PC-down problems have NO immediate solution. Lost installations will occur, and what can I say? TOUGH LUCK! You can't go retrograde on a problem without having a proxy or test system present. That's just how it is. That unless you and the F8 button have a secret affair going on and you can get the computer to give in to you.

Quit shooting the messenger, Bitter. Unless you're one of those types I described above... accept the facts. You got a problem... take a number. Or take it slow and do it right... and brush it off and learn. That's the best (and last) thing I'm gonna say about this. And same goes for all "my komputer broke" noobs out there.

And dude... please... don't ever tell me, EVAR again, that you're "backing it up"
Slippercream is offline   Reply With Quote
Old 03/26/2005, 01:19 PM   #66 (permalink)
TE
Bday threads=GHEY
 
TE's Avatar
 

Join Date: Sep 2000
Location: Long Nosland, NY
Vehicle: 00 PPR GT sporty
Posts: 32,118
TE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regular
Send a message via AIM to TE
Quote:
Originally Posted by Bitter
what about installed software? i cant backup the fucked up registry too can i? lets say they have this and that installed, but dont have the disks for them? what now brown cow?

Make a ghost image with a base install including all important apps
Any problems just reimage
TE is offline   Reply With Quote
Old 03/26/2005, 01:21 PM   #67 (permalink)
Zoom FTW
 
Bitter's Avatar
 

Join Date: May 2004
Location: Homewood, Il
Vehicle: 2007 Camaro
Posts: 29,049
Bitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club exists
Send a message via AIM to Bitter Send a message via Yahoo to Bitter
ya that works if you carry norton ghost everywhere you go

i dont care about my installed shit that much as to ghost it, data backup is fine for me.
Bitter is offline   Reply With Quote
Old 03/26/2005, 05:02 PM   #68 (permalink)
TE
Bday threads=GHEY
 
TE's Avatar
 

Join Date: Sep 2000
Location: Long Nosland, NY
Vehicle: 00 PPR GT sporty
Posts: 32,118
TE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regularTE should be considered a regular
Send a message via AIM to TE
Quote:
Originally Posted by Bitter
ya that works if you carry norton ghost everywhere you go

.
It fits on a floppy
TE is offline   Reply With Quote
Old 03/26/2005, 10:59 PM   #69 (permalink)
Zoom FTW
 
Bitter's Avatar
 

Join Date: May 2004
Location: Homewood, Il
Vehicle: 2007 Camaro
Posts: 29,049
Bitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club exists
Send a message via AIM to Bitter Send a message via Yahoo to Bitter
Quote:
Originally Posted by TE
It fits on a floppy
sniffle my floppy drive is teh broke. i need go pony out some money to get like 4 of them. i have 3 computers that need them. its such a necessity now.
Bitter is offline   Reply With Quote
Old 03/27/2005, 04:08 PM   #70 (permalink)
I'm gonna go eat now
 
Mare's Avatar
 

Join Date: Jul 2002
Location: Tallahassee, Florida
Vehicle: 2006 Toyota Corolla CE
Posts: 8,590
Mare seems to be well-liked by allMare seems to be well-liked by allMare seems to be well-liked by allMare seems to be well-liked by allMare seems to be well-liked by allMare seems to be well-liked by allMare seems to be well-liked by allMare seems to be well-liked by allMare seems to be well-liked by allMare seems to be well-liked by allMare seems to be well-liked by all
Send a message via AIM to Mare
I downloaded Spybot & CWShredder (already had adware)

I was able to run Adaware and Spybot fine... This is the message I got when I tried running CWShredder:

The application failed to initialize properly. (0xc00000fd).

And now my computer is running really slow and freezing other programs out. Any suggestions? Uninstall CWShredder?
Mare is offline   Reply With Quote
Old 03/27/2005, 07:52 PM   #71 (permalink)
Zoom FTW
 
Bitter's Avatar
 

Join Date: May 2004
Location: Homewood, Il
Vehicle: 2007 Camaro
Posts: 29,049
Bitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club exists
Send a message via AIM to Bitter Send a message via Yahoo to Bitter
Quote:
Originally Posted by CheZ
I downloaded Spybot & CWShredder (already had adware)

I was able to run Adaware and Spybot fine... This is the message I got when I tried running CWShredder:

The application failed to initialize properly. (0xc00000fd).

And now my computer is running really slow and freezing other programs out. Any suggestions? Uninstall CWShredder?
http://www.spywareinfo.com/~merijn/downloads.html
Bitter is offline   Reply With Quote
Old 04/10/2005, 11:18 PM   #72 (permalink)
Ty
Senior Member
 
Ty's Avatar
 

Join Date: May 2002
Location: SoCal
Vehicle: '03 DB 350Z Track
Posts: 1,293
Ty : who are you?Ty : who are you?Ty : who are you?Ty : who are you?
Send a message via AIM to Ty
Diff. pc:

Logfile of HijackThis v1.99.1
Scan saved at 8:17:52 PM, on 4/10/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Jasc Software Inc\Paint Shop Pro 8\Paint Shop Pro.exe
C:\Program Files\Jasc Software Inc\Paint Shop Pro 8\Paint Shop Pro.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Jasc Software Inc\Paint Shop Pro 8\Paint Shop Pro.exe
C:\WINDOWS\System32\dosxpd.exe
C:\WINDOWS\System32\fixmapirs.exe
C:\Program Files\Jasc Software Inc\Paint Shop Pro 8\Paint Shop Pro.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Owner\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = http://targetclicks.net/srch.php?qq=%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\dskrfuoui.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\dskrfuoui.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\dskrfuoui.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\dskrfuoui.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\dskrfuoui.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\dskrfuoui.dll/sp.html (obfuscated)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R3 - URLSearchHook: (no name) - {78131A12-7027-8397-76C4-0709C80903C3} - bnui.dll (file missing)
R3 - URLSearchHook: Search - {554DF20C-7AA5-44FA-B7B0-16872BA6FE37} - C:\WINDOWS\System32\Q35503765.dll
R3 - URLSearchHook: Search - {8160CAAE-8BAF-400C-A85C-15B7DC7ABB01} - C:\WINDOWS\System32\Q137197234.dll
R3 - URLSearchHook: Search - {E29A8104-CC0F-48BB-9590-606D12715124} - C:\WINDOWS\System32\Q137197234.dll
R3 - URLSearchHook: Search - {AC6AAA6A-001E-458D-B159-5DF4E4D809D1} - C:\WINDOWS\System32\Q180406609.dll
R3 - URLSearchHook: Search - {53B88E88-19B6-4B89-92B6-0D792E146CEF} - C:\WINDOWS\System32\Q158797859.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {92788612-11C8-4A21-92D2-1FDC0AEAA405} - C:\WINDOWS\System32\dskrfuoui.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: FreshBar - {06ABAA2D-34AB-4902-A326-409BD9B9A7A5} - C:\WINDOWS\System32\docntrop.dll
O3 - Toolbar: Search - {532D9AEC-8B54-431C-BB23-D1CFE6CCF115} - C:\WINDOWS\System32\Q35503765.dll
O3 - Toolbar: Search - {AC45DBB7-D521-4287-8856-0483F58A4EC9} - C:\WINDOWS\System32\Q137197234.dll
O3 - Toolbar: Search - {A1001CCF-BA20-4A0E-B839-FD9F911312CC} - C:\WINDOWS\System32\Q137197234.dll
O3 - Toolbar: Search - {37230076-3268-4446-A3D9-ECA77DB484E9} - C:\WINDOWS\System32\Q180406609.dll
O3 - Toolbar: Search - {8077E80D-C038-4654-8949-936809D97826} - C:\WINDOWS\System32\Q158797859.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [borlandg] 10010.exe
O4 - HKLM\..\Run: [ms-its] ftbar.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [WareOut] "C:\Program Files\WareOut\WareOut.exe"
O4 - HKCU\..\Run: [avpmondll] nmdllw.exe
O4 - HKCU\..\Run: [iesetupdll] systemdll.exe
O4 - HKCU\..\Run: [gabber] NSYSCPLSTR.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Search - {37230076-3268-4446-A3D9-ECA77DB484E9} - C:\WINDOWS\System32\Q180406609.dll
O9 - Extra button: Search - {532D9AEC-8B54-431C-BB23-D1CFE6CCF115} - C:\WINDOWS\System32\Q35503765.dll
O9 - Extra button: Search - {8077E80D-C038-4654-8949-936809D97826} - C:\WINDOWS\System32\Q158797859.dll
O9 - Extra button: Search - {A1001CCF-BA20-4A0E-B839-FD9F911312CC} - C:\WINDOWS\System32\Q137197234.dll
O9 - Extra button: Search - {AC45DBB7-D521-4287-8856-0483F58A4EC9} - C:\WINDOWS\System32\Q137197234.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O15 - Trusted Zone: http://*.63.219.181.7
O16 - DPF: {02C20140-76F8-4763-83D5-B660107B7A90} (Moniker32 Class) - http://63.219.181.7/cax.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{671C9F53-58F3-4286-8362-DB7D76D602DE}: NameServer = 69.50.184.85,195.225.176.37
O17 - HKLM\System\CS1\Services\Tcpip\..\{671C9F53-58F3-4286-8362-DB7D76D602DE}: NameServer = 69.50.184.85,195.225.176.37
O17 - HKLM\System\CS2\Services\Tcpip\..\{671C9F53-58F3-4286-8362-DB7D76D602DE}: NameServer = 69.50.184.85,195.225.176.37
O18 - Filter: text/html - {32D9B619-2270-4070-9BDE-D82FF403853B} - C:\WINDOWS\System32\dskrfuoui.dll
O18 - Filter: text/plain - {32D9B619-2270-4070-9BDE-D82FF403853B} - C:\WINDOWS\System32\dskrfuoui.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
Ty is offline   Reply With Quote
Old 04/10/2005, 11:40 PM   #73 (permalink)
Zoom FTW
 
Bitter's Avatar
 

Join Date: May 2004
Location: Homewood, Il
Vehicle: 2007 Camaro
Posts: 29,049
Bitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club exists
Send a message via AIM to Bitter Send a message via Yahoo to Bitter
O15 - Trusted Zone: http://*.63.219.181.7
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = http://targetclicks.net/srch.php?qq=%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\dskrfuoui.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\dskrfuoui.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\dskrfuoui.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\dskrfuoui.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\dskrfuoui.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\dskrfuoui.dll/sp.html (obfuscated)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R3 - URLSearchHook: (no name) - {78131A12-7027-8397-76C4-0709C80903C3} - bnui.dll (file missing)
R3 - URLSearchHook: Search - {554DF20C-7AA5-44FA-B7B0-16872BA6FE37} - C:\WINDOWS\System32\Q35503765.dll
R3 - URLSearchHook: Search - {8160CAAE-8BAF-400C-A85C-15B7DC7ABB01} - C:\WINDOWS\System32\Q137197234.dll
R3 - URLSearchHook: Search - {E29A8104-CC0F-48BB-9590-606D12715124} - C:\WINDOWS\System32\Q137197234.dll
R3 - URLSearchHook: Search - {AC6AAA6A-001E-458D-B159-5DF4E4D809D1} - C:\WINDOWS\System32\Q180406609.dll
R3 - URLSearchHook: Search - {53B88E88-19B6-4B89-92B6-0D792E146CEF} - C:\WINDOWS\System32\Q158797859.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {92788612-11C8-4A21-92D2-1FDC0AEAA405} - C:\WINDOWS\System32\dskrfuoui.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: FreshBar - {06ABAA2D-34AB-4902-A326-409BD9B9A7A5} - C:\WINDOWS\System32\docntrop.dll
O3 - Toolbar: Search - {532D9AEC-8B54-431C-BB23-D1CFE6CCF115} - C:\WINDOWS\System32\Q35503765.dll
O3 - Toolbar: Search - {AC45DBB7-D521-4287-8856-0483F58A4EC9} - C:\WINDOWS\System32\Q137197234.dll
O3 - Toolbar: Search - {A1001CCF-BA20-4A0E-B839-FD9F911312CC} - C:\WINDOWS\System32\Q137197234.dll
O3 - Toolbar: Search - {37230076-3268-4446-A3D9-ECA77DB484E9} - C:\WINDOWS\System32\Q180406609.dll
O3 - Toolbar: Search - {8077E80D-C038-4654-8949-936809D97826} - C:\WINDOWS\System32\Q158797859.dll


remove those please. kthnxbye.
Bitter is offline   Reply With Quote
Old 04/10/2005, 11:41 PM   #74 (permalink)
Zoom FTW
 
Bitter's Avatar
 

Join Date: May 2004
Location: Homewood, Il
Vehicle: 2007 Camaro
Posts: 29,049
Bitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club existsBitter is one of the reasons this club exists
Send a message via AIM to Bitter Send a message via Yahoo to Bitter
C:\WINDOWS\System32\dosxpd.exe
C:\WINDOWS\System32\fixmapirs.exe
C:\Program Files\Ares\Ares.exe
i dont know what these are.

but google does, those are adware (1st and 2nd) and a worm or something related

ares.exe is part of a p2p know to infect users with the worm gabot.ee

http://securityresponse.symantec.com...gaobot.ee.html
Last edited by Bitter; 04/10/2005 at 11:47 PM.
Bitter is offline   Reply With Quote
Old 04/10/2005, 11:42 PM   #75 (permalink)
WINGS WEST ON DA WAY
 
SAWhiteKnight_04RS's Avatar
 

Join Date: May 2004
Location: San Antonio, Tx
Vehicle: 2004 Dover White RS
Posts: 4,016
SAWhiteKnight_04RS has a few friends hereSAWhiteKnight_04RS has a few friends hereSAWhiteKnight_04RS has a few friends hereSAWhiteKnight_04RS has a few friends hereSAWhiteKnight_04RS has a few friends hereSAWhiteKnight_04RS has a few friends hereSAWhiteKnight_04RS has a few friends hereSAWhiteKnight_04RS has a few friends hereSAWhiteKnight_04RS has a few friends hereSAWhiteKnight_04RS has a few friends here
Send a message via AIM to SAWhiteKnight_04RS Send a message via Yahoo to SAWhiteKnight_04RS
quit going to bangbus bro.. and hornygranny sites..
__________________

*****Proud member of BOOSTED Car Club*****
Subaru WRX Fund = $3000(sold my kidney)
Quote:
Originally Posted by Wally View Post
Please tell me you don't really thing the Cowboys are going to beat the Colts...
SAWhiteKnight_04RS is offline   Reply With Quote
Old 04/10/2005, 11:48 PM   #76 (permalink)
Zoom FTW
 
Bitter's Avatar
 

Join Date: May 2004
Location: Homewood, Il
Vehicle: 2007 Camaro
Posts: 29,049
Bitter is one of the reasons this club exists