Shoutbox

F***ING PC (excuse the french) - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Tech Talk (/forumdisplay.php?fid=17)
+----- Thread: F***ING PC (excuse the french) (/showthread.php?tid=52825)
F***ING PC (excuse the french) by Pyro on 11-11-2005 at 12:12 AM

ok so for a while now my pc has been giving me LOTS of popups (approx 1  every minute)

the first are swf ads (they are opening WITHOUT a browser being opened)
the second are popups (opening WITH the browser open)

here are some of the links for the swf ads (they are safe to open <i think>)


and here are some of the popup links (safe to open <i think>)

and so on...

ANY help would be much appreciated!

ps: have a look at the source code of one of the swf ad pages; here's the code fom one of them

code:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv='Content-Type' content='text/html; charset=iso-8859-1'>
</head>
<body bgcolor='#245EDC' leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' scroll='no'>
<SCRIPT LANGUAGE="Javascript">
<!--

var flashinstalled = 0;
var flashversion = 0;
MSDetect = "false";
if (navigator.plugins && navigator.plugins.length) {
  x = navigator.plugins["Shockwave Flash"];
  if (x) {
    flashinstalled = 2;
    if (x.description) {
      y = x.description;
      flashversion = y.charAt(y.indexOf('.')-1);
    }
  }
  else flashinstalled = 1;
  if (navigator.plugins["Shockwave Flash 2.0"]) {
    flashinstalled = 2;
    flashversion = 2;
  }
}
else if (navigator.mimeTypes && navigator.mimeTypes.length) {
  x = navigator.mimeTypes['application/x-shockwave-flash'];
  if (x && x.enabledPlugin) flashinstalled = 2;
  else flashinstalled = 1;
}
else MSDetect = "true";

// -->
</SCRIPT>

<SCRIPT LANGUAGE="VBScript">

on error resume next

If MSDetect = "true" Then
For i = 1 to 10
If Not(IsObject(CreateObject("ShockwaveFlash.ShockwaveFlash." & i))) Then

Else
flashinstalled = 2
flashversion = i
End If
Next
End If

If flashinstalled = 0 Then
flashinstalled = 1
End If

</SCRIPT>

<script language="javascript" type="text/javascript">
<!--
  if (flashinstalled == 2 ) {
    document.write("<div style='position:absolute; left=-3; top=-3'>");
    document.write("<object classid='clsid:D27CDB6E-AE6D-11cf-96B8-444553540000' codebase='http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0' width='600' height='480'>");
    document.write("  <param name='movie' value='http://www.searc-h.com/masked/auto/auto02.swf?my_url=EVENT:IEBROWSERCLOSE:64.192.130.141/cgi-bin/KeywordV2#query=jeep+cars'>");
    document.write("  <param name='quality' value='high'>");
    document.write("  <embed src='http://www.searc-h.com/masked/auto/auto02.swf?my_url=EVENT:IEBROWSERCLOSE:64.192.130.141/cgi-bin/KeywordV2#query=jeep+cars' quality='high' pluginspage='http://www.macromedia.com/go/getflashplayer' type='application/x-shockwave-flash' width='600' height='480'></embed>");
    document.write("</object>");
    document.write("</div>");
    document.write('<div class="RGN" id="http://www.searc-h.com/masked/auto/auto02.rgn"\>');
  }
// -->
</script>
</body>
</html>
RE: F***ING PC (excuse the french) by [MR] on 11-11-2005 at 01:34 AM

obviously its adware.....


get ad-aware se personal

RE: F***ING PC (excuse the french) by n0n4m3 on 11-11-2005 at 01:41 AM

yup.. your computer is full of adware (maybe spyware too) and other kinds of these worm things that are all over the internet. Check this post for some tips: http://shoutbox.menthix.net/showthread.php?tid=52...d=561534#pid561534

Some other tips:
- always update your windows through windows update site or turn on automatic updates
- avoid using internet explorer, use firefox instead
- use an antivirus and an antispyware program (microsoft has one for free) and always keep these up to date

RE: F***ING PC (excuse the french) by [MR] on 11-11-2005 at 01:47 AM

go here to get Ad-aware SE personal for free!

RE: F***ING PC (excuse the french) by Pyro on 11-11-2005 at 05:14 AM

i have:

  • Ad-aware
  • Spybot S&D
  • Spyware Doctor
  • Norton Antivirus

and it's still there...

ps: is there any way i can redirect the page;
ok about a week ago i read about some virus that was sending msn contats and chat logs or somthing over the internet and it sayed that if you edit some system file you can set it up to redirect to 127.0.0.1 so it can't do anything.

so all day i have been thinking, what if i could do that to all the address of the popups or somthing?
RE: F***ING PC (excuse the french) by kittymew on 11-11-2005 at 05:34 AM

first of all do you have microsoft antispyware if not .get it?



download the trial version of Ewido Security Suite here:
http://www.ewido.net/en/download/

Please read Ewido Setup Instructions
Install it, and update the definitions to the newest files. Do NOT run a scan yet.

Download and Install
http://www.stevengould.org/software/cleanup/download.html
Dont use it yet~!


Please Check Microsoft AntiSpyware and make sure its fully updated!


Close any programs you have open since this step requires a reboot.
Once the System is Rebooted,Open and Run CleanUp!>> When you get prompted to Log Off,just restart the PC into Safe Mode



Reboot into SAFE MODE



Scan with Ewido


Then Scan with MicroSoft AntiSpyware and Remove everything it finds!

Run MSCONFIG and enable everything in the startup area. To get to MSCONFIG, click on Start -> Run -> type in MSCONFIG -> click OK!

Under the "General" Tab
Make Sure Normal Startup is Checked!!

Click Apply>>OK>>Follow the Prompts to Restart~!!

dont forget to turn system restore back on


and repeat all scans again..reboot

then hopefully you are clean..

RE: F***ING PC (excuse the french) by Pyro on 11-11-2005 at 06:40 AM

ok i'll try that now;

thanks

EDIT:nope. it didnt work :(. although i did find this: [Image: attachment.php?pid=563416]

RE: F***ING PC (excuse the french) by Chestah on 11-11-2005 at 10:27 AM

Press Ctrl + Alt + Del, click processes and see if any processes are there that are abnormal. If so close them down, if no more pop-ups etc open, then go

Start --> Run --> type "msconfig" no "", and click startup and remove the entries that refer to those process(s) being run. Be careful, and if you don't feel confident/ haven't done this before then don't do it.

Note that is, only a shortterm solution.. it should stop it happening but the files will still be on your computer.

Also, if you've installed anything lately i'd suggest uninstalling that, or even using system restore to restore your system to a date before this started happening.

RE: F***ING PC (excuse the french) by Pyro on 11-12-2005 at 10:16 AM

yeah thanks chestah;

but i've already tried that, i have killed all the process except for the system ones which i couldn't kill...
and i've tryed deleting everything in msnconfig (even the services).

oh well :(

ps: i have tryed system restore and it didn't work so i think i will  just have to reformat my computer.

thanks anyway!