2000 AD Online Forum

General Chat => Help! => Topic started by: Buddy on 10 August, 2008, 08:01:40 PM

Title: Crappy virus thingy...
Post by: Buddy on 10 August, 2008, 08:01:40 PM
...redirects my google searches to other sites trying to sell me stuff...

Any computer types know how to stop this?

I ran spybot search & destroy but problem still persists.

Thanks in advance.

J.
Title: Re: Crappy virus thingy...
Post by: deus x machina on 10 August, 2008, 08:14:43 PM
http://www.free-av.com/ (http://www.free-av.com/)   try this
Title: Re: Crappy virus thingy...
Post by: Wils on 10 August, 2008, 08:44:15 PM
Sounds like you've got a browser hijack, Ump.

Some info that may help you here: //http://www.spywareinfo.com/articles/hijacked/
Title: Re: Crappy virus thingy...
Post by: the shutdown man on 10 August, 2008, 10:44:10 PM
I had something similar a while back, it's a bollocks of a thing that keeps re-appearing after you seemingly get rid of it with anti-virus/spyware scans. I think the site Wils posted was the same one I used to get rid of it, they'll look at the log file you post from HiJack and more or less talk you through exactly what you need to do to get rid of it. Tailor-made techsupport really, and it works.
Title: Re: Crappy virus thingy...
Post by: Buddy on 10 August, 2008, 11:06:46 PM
Cheers... gettin a 'page cannot be displayed' error on those links, but i think thats part of the spyware preventing me from going to these sites to fix the problem... I'll have to look on another computer to find out what i need to do then transfer whatever software i need to my home computer to get it sorted....

Pain in the arse more than anything else...
Title: Re: Crappy virus thingy...
Post by: Matt Timson on 11 August, 2008, 11:03:29 AM
What cracks me up is this: who in their right mind is going to buy stuff from a site they've been forced to visit?!?

"I'm annoyed as hell at what you've done to my machine- but, golly, now that I'm here, those sure do look like reasonable bargains.  Allow me to give you my credit card details immediately..."
 
:roll:
Title: Re: Crappy virus thingy...
Post by: The Legendary Shark on 11 August, 2008, 11:26:14 AM
Try looking here:  http://www.spywareinfo.com/articles/vmware/baintro.php (http://www.spywareinfo.com/articles/vmware/baintro.php)
or here:   http://www.spywareinfo.com/articles/hijacked/ (http://www.spywareinfo.com/articles/hijacked/)   for useful info.

Try using Firefox instead of Microsoft's Internet Explorer. (No, really, Firefox is far superior and harder to hack, imho.)

I also find it useful to install a secondary, clean browser (such as Opera, Avant or Safari) to be used only when the main browser isn't working properly. Doing this allows you to visit sites and download anti-bollixware blocked by your infected browser.
Title: Re: Crappy virus thingy...
Post by: Wils on 11 August, 2008, 11:33:08 AM
Quote from: "Matt Timson""I'm annoyed as hell at what you've done to my machine- but, golly, now that I'm here, those sure do look like reasonable bargains.  Allow me to give you my credit card details immediately..."


It's always for dodgy things that you only ever see in places like that and spam emails, as well:

5000 TABLETS OF COMPLETELY UNTESTED ERECTILE DISFUNCTION TREATMENT... ONLY $29.99!

BUDGET LABIA ENHANCEMENT SURGERY!
Title: Re: Crappy virus thingy...
Post by: Buddy on 11 August, 2008, 11:44:51 AM
QuoteTry using Firefox instead of Microsoft's Internet Explorer

Ah yes!! I have Firefox on the machine... don't know why I didn't think of using that!!!

Cheers for all the help.

J.
Title: Re: Crappy virus thingy...
Post by: Peter Wolf on 11 August, 2008, 04:15:41 PM
Microsoft Internet Explorer is third rate as is their MSN email or whatever its called.

 Microsoft Crap. The only thing they are good at is gaming consoles and games.
Title: Re: Crappy virus thingy...
Post by: Wils on 11 August, 2008, 04:33:03 PM
Didn't have you down as a Linux user, Peter. ;)
Title: Re: Crappy virus thingy...
Post by: Buddy on 18 August, 2008, 11:12:02 AM
OK... just about got it sorted except for the fact the my C & D drive icons have vanished from my 'my computer' window.

I can survive at the moment but a clean install might be on the cards to sort it out totally, and god knows when I'll get the time to do that!
Title: Re: Crappy virus thingy...
Post by: The Legendary Shark on 18 August, 2008, 11:33:49 AM
Quote from: "Uncle Umpty"OK... just about got it sorted except for the fact the my C & D drive icons have vanished from my 'my computer' window.


Get TweakUI free from the MS Powertoys.
In there you can tick/untick to show which drives you want to see. This might work and save you from the hassle of a full re-install.
Title: Re: Crappy virus thingy...
Post by: Buddy on 18 August, 2008, 02:56:19 PM
Cheers Shark.... will give that ago later this evening.
Title: Re: Crappy virus thingy...
Post by: Slippery PD on 18 August, 2008, 03:23:28 PM
If it does it in Firefox to, they may have hacked your hosts file.
c:\windows\system32\drivers\etc\hosts

Open with Notepad.  
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

127.0.0.1       localhost
is all that should be in it (unless youve added something yourself).  Of course even ridding it of the pointers may still leave you with the nasty program running in the background.  

Yer "Not so helpful" slips
Title: Re: Crappy virus thingy...
Post by: ukdane on 18 August, 2008, 04:38:52 PM
Actually Slips,
That's handy to know.
I just opened the file, and found:
127.0.0.1 localhost

and the IP for our wireless connection to the printer.

As the member of the family/street/workplace etc etc that people always come to when they have a problem, it's always handy to have a little more ammunition in thy backpocket.
Title: Re: Crappy virus thingy...
Post by: Buddy on 18 August, 2008, 05:08:45 PM
So if there is anything else there apart from localhost that I didn't put there do I just delete it and save the file??
Title: Re: Crappy virus thingy...
Post by: Slippery PD on 18 August, 2008, 06:38:54 PM
If you want to be really careful do a save as of the original and call it oldhosts.  Then make the changes and save as hosts, so you have a copy of the file should it all go wrong.  

Dane effectively the Hosts file acts like your local DNS server, so if you wanted to call your wireless router a name.  You can add it in here, with its IP address and hey presto you can ping it.  
(You have to do a reboot or you can be really clever and do a nbtstat -R from the command prompt)

Please be aware that this is for competent users and dont change the hosts willy nilly... and always keep a back up as above :ugeek: