What happened to the Messenger Plus! forums on msghelp.net?
Shoutbox » MsgHelp Archive » Skype & Technology » Tech Talk » Urgent help!![solved... for now]

Pages: (2): « First [ 1 ] 2 » Last »
Urgent help!![solved... for now]
Author: Message:
qgroessl
Veteran Member
*****


Posts: 1615
Reputation: 22
33 / – / Flag
Joined: Jul 2005
Status: Away
O.P. Dodgy  Urgent help!![solved... for now]
A few dodgy programs have appeared on my computer lately... and I have no clue what they are or how they've got there... I have to post screen shots so don't bother me about double posting...

.gif File Attachment: fuckedup1.GIF (22.99 KB)
This file has been downloaded 140 time(s).

This post was edited on 03-09-2006 at 10:44 PM by qgroessl.
03-09-2006 01:09 PM
Profile PM Find Quote Report
qgroessl
Veteran Member
*****


Posts: 1615
Reputation: 22
33 / – / Flag
Joined: Jul 2005
Status: Away
O.P. RE: Urgent help!!
Sorry about this.... but that first one the filesize was too big so I had to cut out like, everything that wasn't too important...

There was one more dodgy program, the icon looked like something from Java Runtime... but I got rid of that one by pushing a random button in the uninstaller...



Yeah.. I did a virus scan last night... only caught one thing... So I'm gonna do one again when I leave for school... see if that gets anything...

.jpg File Attachment: fuckedup2.JPG (31.56 KB)
This file has been downloaded 123 time(s).

This post was edited on 03-09-2006 at 01:15 PM by qgroessl.
03-09-2006 01:10 PM
Profile PM Find Quote Report
RaceProUK
Elite Member
*****

Avatar

Posts: 6073
Reputation: 57
39 / Male / Flag
Joined: Oct 2003
RE: Urgent help!!
It could have been some sort of spyware. Do a spyware scan too.

This post was edited on 03-09-2006 at 02:12 PM by RaceProUK.
[Image: spartaafk.png]
03-09-2006 02:12 PM
Profile PM Web Find Quote Report
qgroessl
Veteran Member
*****


Posts: 1615
Reputation: 22
33 / – / Flag
Joined: Jul 2005
Status: Away
O.P. RE: Urgent help!!
quote:
Originally posted by raceprouk
It could have been some sort of spyware. Do a spyware scan too.

When I try and get rid of it through program files... one of them... I think it's Hauli or something like that (i'm at school so I'll be able to check again later...) it says that it's in use so I can't delete it... but I can't find a process taht looks outta place ora nything...
03-09-2006 04:14 PM
Profile PM Find Quote Report
Reaper
Veteran Member
*****

Avatar

Posts: 1393
Reputation: 23
36 / Male / Flag
Joined: Jun 2004
RE: Urgent help!!
post a screenshot of your current processes.
03-09-2006 05:17 PM
Profile E-Mail PM Find Quote Report
CookieRevised
Elite Member
*****

Avatar

Posts: 15517
Reputation: 173
– / Male / Flag
Joined: Jul 2003
Status: Away
RE: Urgent help!!
tbh that doesn't look as spyware or any type of malware (though looks can be deseaved, but in fact, it is very rare. If spyware is installed on your PC it most likely is not a program you can actually use but something which tries to be as invisible as possible).

It more looks like a (crappy) program to keep track of something (eg: how many times you've done something, eg: rebooting or whatever). Hence why it also would be "in use".

The program is also written with Unicode in mind, but seeing the output of it (all the question marks and some ascii characters) it has not been well written. (and I wouldn't be surprised if it was written in VB btw, seeing as those question marks is a typical look of how a bad programmed (incompatible) unicode code program in VB will look like)...

------------

The above is assuming the screenshot of the program screen is a screenshot from when you run the program...

On the other hand, if it is a screenshot from when you clicked on "change/remove" in your add remove programs control panel, then it looks like a validation screen of some sort (eg: like the Plus! sponsor validation screen when uninstalling). But again, for the unicode part, that would be the same explanation as above...

This post was edited on 03-09-2006 at 05:55 PM by CookieRevised.
.-= A 'frrrrrrrituurrr' for Wacky =-.
03-09-2006 05:41 PM
Profile PM Find Quote Report
Voldemort
Veteran Member
*****

Avatar

Posts: 3504
Reputation: 49
– / – / Flag
Joined: Jul 2005
Status: Away
RE: Urgent help!!
have you tried writing the number that appears in the white box and clicking ok?
*All posts are a purely speculative hypothesis based on abstract reasoning.
Not my daughter, you bitch!
[Image: ico-mollytrix16.gif]
03-09-2006 09:19 PM
Profile E-Mail PM Find Quote Report
prashker
Veteran Member
*****


Posts: 5109
Reputation: 104
– / Male / –
Joined: Mar 2005
Status: Away
RE: RE: Urgent help!!
quote:
Originally posted by bto
have you tried writing the number that appears in the white box and clicking ok?


I was going to say I made a pic saying what I think the buttions are[Image: attachment.php?pid=615736]

.jpg File Attachment: fuckedup2.JPG (47.57 KB)
This file has been downloaded 183 time(s).
03-09-2006 09:39 PM
Profile PM Find Quote Report
Stigmata
Veteran Member
*****



Posts: 3520
Reputation: 45
21 / Other / Flag
Joined: Jul 2003
RE: Urgent help!!
logical order puts ok before cancel....

03-09-2006 10:06 PM
Profile PM Web Find Quote Report
qgroessl
Veteran Member
*****


Posts: 1615
Reputation: 22
33 / – / Flag
Joined: Jul 2005
Status: Away
O.P. RE: Urgent help!!
What SonicSam told me did help in the add-remove programs list... got rid of everything in there now... but in C:\program files\ there's still a program called huaci.... I have no clue what it is... but the same kinda box comes up like in sonicsams post... except now when I put the numbers in the text box and hit the bottom left option (okay option I'm assuming) this screen pops up...


That's when I click on the uninstaller in that folder.... the other file is "Mouse1.dll
     1.0.0.1
     (4 squares)"

Then the other folder in the main folder is called update.... Inside of it is a configuration settings file called sysadInfo.


The reason I think this is a virus is because when I restarted my computer last night it said I had a trojan... so I did a virus scan and got rid of it... But yeah...

.bmp File Attachment: fedupmessage.bmp (71.17 KB)
This file has been downloaded 123 time(s).

This post was edited on 03-09-2006 at 10:15 PM by qgroessl.
03-09-2006 10:13 PM
Profile PM Find Quote Report
Pages: (2): « First [ 1 ] 2 » Last »
« Next Oldest Return to Top Next Newest »


Threaded Mode | Linear Mode
View a Printable Version
Send this Thread to a Friend
Subscribe | Add to Favorites
Rate This Thread:

Forum Jump:

Forum Rules:
You cannot post new threads
You cannot post replies
You cannot post attachments
You can edit your posts
HTML is Off
myCode is On
Smilies are On
[img] Code is On