login | register | shoutbox

 What happened to the Messenger Plus! forums on msghelp.net?
Shoutbox » MsgHelp Archive » Skype & Technology » Tech Talk » F***ING PC (excuse the french)

F***ING PC (excuse the french)
Author: Message:
Pyro
Full Member
***

Avatar
The Frog Is Back!

Posts: 152
Reputation: -6
32 / Male / –
Joined: Jun 2005
O.P. Dodgy  F***ING PC (excuse the french)
ok so for a while now my pc has been giving me LOTS of popups (approx 1  every minute)

the first are swf ads (they are opening WITHOUT a browser being opened)
the second are popups (opening WITH the browser open)

here are some of the links for the swf ads (they are safe to open <i think>)


and here are some of the popup links (safe to open <i think>)

and so on...

ANY help would be much appreciated!

ps: have a look at the source code of one of the swf ad pages; here's the code fom one of them

code:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv='Content-Type' content='text/html; charset=iso-8859-1'>
</head>
<body bgcolor='#245EDC' leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' scroll='no'>
<SCRIPT LANGUAGE="Javascript">
<!--

var flashinstalled = 0;
var flashversion = 0;
MSDetect = "false";
if (navigator.plugins && navigator.plugins.length) {
  x = navigator.plugins["Shockwave Flash"];
  if (x) {
    flashinstalled = 2;
    if (x.description) {
      y = x.description;
      flashversion = y.charAt(y.indexOf('.')-1);
    }
  }
  else flashinstalled = 1;
  if (navigator.plugins["Shockwave Flash 2.0"]) {
    flashinstalled = 2;
    flashversion = 2;
  }
}
else if (navigator.mimeTypes && navigator.mimeTypes.length) {
  x = navigator.mimeTypes['application/x-shockwave-flash'];
  if (x && x.enabledPlugin) flashinstalled = 2;
  else flashinstalled = 1;
}
else MSDetect = "true";

// -->
</SCRIPT>

<SCRIPT LANGUAGE="VBScript">

on error resume next

If MSDetect = "true" Then
For i = 1 to 10
If Not(IsObject(CreateObject("ShockwaveFlash.ShockwaveFlash." & i))) Then

Else
flashinstalled = 2
flashversion = i
End If
Next
End If

If flashinstalled = 0 Then
flashinstalled = 1
End If

</SCRIPT>

<script language="javascript" type="text/javascript">
<!--
  if (flashinstalled == 2 ) {
    document.write("<div style='position:absolute; left=-3; top=-3'>");
    document.write("<object classid='clsid:D27CDB6E-AE6D-11cf-96B8-444553540000' codebase='http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0' width='600' height='480'>");
    document.write("  <param name='movie' value='http://www.searc-h.com/masked/auto/auto02.swf?my_url=EVENT:IEBROWSERCLOSE:64.192.130.141/cgi-bin/KeywordV2#query=jeep+cars'>");
    document.write("  <param name='quality' value='high'>");
    document.write("  <embed src='http://www.searc-h.com/masked/auto/auto02.swf?my_url=EVENT:IEBROWSERCLOSE:64.192.130.141/cgi-bin/KeywordV2#query=jeep+cars' quality='high' pluginspage='http://www.macromedia.com/go/getflashplayer' type='application/x-shockwave-flash' width='600' height='480'></embed>");
    document.write("</object>");
    document.write("</div>");
    document.write('<div class="RGN" id="http://www.searc-h.com/masked/auto/auto02.rgn"\>');
  }
// -->
</script>
</body>
</html>

This post was edited on 11-11-2005 at 12:21 AM by Pyro.
[Image: angusl.png]
/!\5789 days, 18 hours, 38 seconds ago Until Xmas!!/!\
11-11-2005 12:12 AM
Profile PM Web Find Quote Report
[MR]
Veteran Member
*****

Avatar
Scruffy Ruffy

Posts: 1060
Reputation: 25
34 / Male / Flag
Joined: Jun 2005
RE: F***ING PC (excuse the french)
obviously its adware.....


get ad-aware se personal
[Image: siggy20ss.jpg]
11-11-2005 01:34 AM
Profile E-Mail PM Web Find Quote Report
n0n4m3
Junior Member
**

Avatar

Posts: 82
44 / Male / Flag
Joined: Nov 2005
RE: F***ING PC (excuse the french)
yup.. your computer is full of adware (maybe spyware too) and other kinds of these worm things that are all over the internet. Check this post for some tips: http://shoutbox.menthix.net/showthread.php?tid=52...d=561534#pid561534

Some other tips:
- always update your windows through windows update site or turn on automatic updates
- avoid using internet explorer, use firefox instead
- use an antivirus and an antispyware program (microsoft has one for free) and always keep these up to date
11-11-2005 01:41 AM
Profile E-Mail PM Web Find Quote Report
[MR]
Veteran Member
*****

Avatar
Scruffy Ruffy

Posts: 1060
Reputation: 25
34 / Male / Flag
Joined: Jun 2005
RE: F***ING PC (excuse the french)
go here to get Ad-aware SE personal for free!
[Image: siggy20ss.jpg]
11-11-2005 01:47 AM
Profile E-Mail PM Web Find Quote Report
Pyro
Full Member
***

Avatar
The Frog Is Back!

Posts: 152
Reputation: -6
32 / Male / –
Joined: Jun 2005
O.P. RE: F***ING PC (excuse the french)
i have:
  • Ad-aware
  • Spybot S&D
  • Spyware Doctor
  • Norton Antivirus

and it's still there...

ps: is there any way i can redirect the page;
ok about a week ago i read about some virus that was sending msn contats and chat logs or somthing over the internet and it sayed that if you edit some system file you can set it up to redirect to 127.0.0.1 so it can't do anything.

so all day i have been thinking, what if i could do that to all the address of the popups or somthing?
[Image: angusl.png]
/!\5789 days, 18 hours, 38 seconds ago Until Xmas!!/!\
11-11-2005 05:14 AM
Profile PM Web Find Quote Report
kittymew
Full Member
***

Avatar
Bitten By A snowball in hell!

Posts: 189
Reputation: 38
– / Female / –
Joined: Sep 2005
RE: F***ING PC (excuse the french)
first of all do you have microsoft antispyware if not .get it?



download the trial version of Ewido Security Suite here:
http://www.ewido.net/en/download/

Please read Ewido Setup Instructions
Install it, and update the definitions to the newest files. Do NOT run a scan yet.

Download and Install
http://www.stevengould.org/software/cleanup/download.html
Dont use it yet~!


Please Check Microsoft AntiSpyware and make sure its fully updated!


Close any programs you have open since this step requires a reboot.
Once the System is Rebooted,Open and Run CleanUp!>> When you get prompted to Log Off,just restart the PC into Safe Mode



Reboot into SAFE MODE



Scan with Ewido


Then Scan with MicroSoft AntiSpyware and Remove everything it finds!

Run MSCONFIG and enable everything in the startup area. To get to MSCONFIG, click on Start -> Run -> type in MSCONFIG -> click OK!

Under the "General" Tab
Make Sure Normal Startup is Checked!!

Click Apply>>OK>>Follow the Prompts to Restart~!!

dont forget to turn system restore back on


and repeat all scans again..reboot

then hopefully you are clean..


This post was edited on 11-11-2005 at 05:39 AM by kittymew.
11-11-2005 05:34 AM
Profile PM Find Quote Report
Pyro
Full Member
***

Avatar
The Frog Is Back!

Posts: 152
Reputation: -6
32 / Male / –
Joined: Jun 2005
O.P. RE: F***ING PC (excuse the french)
ok i'll try that now;

thanks

EDIT:nope. it didnt work :(. although i did find this: [Image: attachment.php?pid=563416]

.png File Attachment: msgplus....PNG (100.42 KB)
This file has been downloaded 276 time(s).

This post was edited on 11-11-2005 at 09:46 AM by Pyro.
[Image: angusl.png]
/!\5789 days, 18 hours, 38 seconds ago Until Xmas!!/!\
11-11-2005 06:40 AM
Profile PM Web Find Quote Report
Chestah
Veteran Member
*****

Avatar

Posts: 1658
Reputation: 34
36 / Male / –
Joined: Jun 2004
RE: F***ING PC (excuse the french)
Press Ctrl + Alt + Del, click processes and see if any processes are there that are abnormal. If so close them down, if no more pop-ups etc open, then go

Start --> Run --> type "msconfig" no "", and click startup and remove the entries that refer to those process(s) being run. Be careful, and if you don't feel confident/ haven't done this before then don't do it.

Note that is, only a shortterm solution.. it should stop it happening but the files will still be on your computer.

Also, if you've installed anything lately i'd suggest uninstalling that, or even using system restore to restore your system to a date before this started happening.

This post was edited on 11-11-2005 at 10:28 AM by Chestah.
Segosa is newb.
11-11-2005 10:27 AM
Profile E-Mail PM Web Find Quote Report
Pyro
Full Member
***

Avatar
The Frog Is Back!

Posts: 152
Reputation: -6
32 / Male / –
Joined: Jun 2005
O.P. RE: F***ING PC (excuse the french)
yeah thanks chestah;

but i've already tried that, i have killed all the process except for the system ones which i couldn't kill...
and i've tryed deleting everything in msnconfig (even the services).

oh well :(

ps: i have tryed system restore and it didn't work so i think i will  just have to reformat my computer.

thanks anyway!
[Image: angusl.png]
/!\5789 days, 18 hours, 38 seconds ago Until Xmas!!/!\
11-12-2005 10:16 AM
Profile PM Web Find Quote Report
« Next Oldest Return to Top Next Newest »


Threaded Mode | Linear Mode
View a Printable Version
Send this Thread to a Friend
Subscribe | Add to Favorites
Rate This Thread:

Forum Jump:

Forum Rules:
You cannot post new threads
You cannot post replies
You cannot post attachments
You can edit your posts 		HTML is Off
myCode is On
Smilies are On
[img] Code is On