Author Topic: Rictor vs Spyware: Round 1 - FIGHT  (Read 972 times)

0 Members and 1 Guest are viewing this topic.

Offline Rictor

  • Murdered by Brazilian Psychopath
  • 29
Rictor vs Spyware: Round 1 - FIGHT
right oh.
here's the deal.

I got bitten by something, which replaces my Internet Explorer start page everytime I close the browser. It also pops up a pop-up. The start page goes to some crap search page, with about:blank appearing as the page title in the IE bar. I ran Spybot twice, it got everything the first time around, and then once more to make sure my system is clean. But as you might guess, this didn't help.

The only way I can identify the spyware is by the URL it takes me to, which is a sub page of "4bf65.ilxt.info".

Strangely, Google turns up nothing, but Yahoo does: a few forums with people with the same problems. I checked them out, and they all involve long, drawn out procedures using HijackThis, posting log files for personal inspection and the newest version of AdAware.

I am keen to find a simpler solution. One of the search results pointed me to a small file (hosted on Major Geeks which leads me to believe its legit), which is supposed to, as far as I can tell, fix this problem. Downloaded, ran it a few times as per instruction...still there.

I'll do the HijackThis/AdAware thing if nothing else helps, but there ought to be something easier (note, easier to me is hunting the thing down in the registry and deleting the files/entries.).

So....any ideas?

 
Rictor vs Spyware: Round 1 - FIGHT
Well, whenever I get something seemingly hopeless to kill I just reinstall XP. You could also just switch browsers. Mozilla firefox is good.

 

Offline Thorn

  • Drunk on the east coast.
  • 210
  • What is this? I don't even...
Rictor vs Spyware: Round 1 - FIGHT
Use Firefox :p

 

Offline Rictor

  • Murdered by Brazilian Psychopath
  • 29
Rictor vs Spyware: Round 1 - FIGHT
I already use Mozilla, but I also need IE for...other things.

 

Offline Hippo

  • Darth water-horse
  • 211
  • Grazing.
    • All Hands to War
Rictor vs Spyware: Round 1 - FIGHT
use Windows Explorer... just type the url in the folder path bar... suprisingly, it works, and is overly similar to IE...
VBB Survivor -- 387 Posts -- July 3 2001 - April 12 2002
VWBB Survivor -- 100 Posts -- July 10 2002 - July 10 2004

AHTW

 

Offline Bobboau

  • Just a MODern kinda guy
    Just MODerately cool
    And MODest too
  • 213
Rictor vs Spyware: Round 1 - FIGHT
search your contents of all files for the URL, also search your registry, I've had stuff like this beofre, and if you can remove it you can render it inert
Bobboau, bringing you products that work... in theory
learn to use PCS
creator of the ProXimus Procedural Texture and Effect Generator
My latest build of PCS2, get it while it's hot!
PCS 2.0.3


DEUTERONOMY 22:11
Thou shalt not wear a garment of diverse sorts, [as] of woollen and linen together

 

Offline Thorn

  • Drunk on the east coast.
  • 210
  • What is this? I don't even...
Rictor vs Spyware: Round 1 - FIGHT
Quote
Originally posted by Hippo
and is overly similar to IE...


Thats because it is IE.

  

Offline Drew

  • 29
    • http://www.galactic-quest.com
Rictor vs Spyware: Round 1 - FIGHT
Hippo, IE is just an WinExplorer shell.  Alot of spywere is built on this little fact.
[(WWF - steroids + ties - spandex) / Atomic Piledrivers] - viewing audience = C-SPAN

My god.. He emptied the gasoline tank from the van onto your cat, lit him on fire, threw him in the house and dove for cover.  :wtf: Family indeed.  ~ KT

Happiness is belt fed.

 

Offline Anaz

  • 210
Rictor vs Spyware: Round 1 - FIGHT
hijackthis will solve all your problems. It's fairly easy. IIRC it has a 'fix common problems' button built right in. I had to use it when c2.lop bit me way back when.
Arrr. I'm a pirate.

AotD, DatDB, TVWP, LM. Ph34r.

You WILL go to warpstorm...

 

Offline ionia23

  • 26
  • "YES, I did finally see 'The Matrix' 12 years late
Rictor vs Spyware: Round 1 - FIGHT
Gotta hop on this too:

Ric, HijackThis, if you haven't played with it yet, can be very helpful in getting rid of those "hard to get rid of" spy applications by showing you everything currently running on your system and the paths thereto.  Plan on doing some serious digging the in the registry, annihilatiing DLL's, etc.  You can also instruct HiJackThis to ignore files that you know what are.  It won't really 'clean' anything, but it makes investigating a little easier.

Btw, make sure you're offline when you work on this.  One of the spywares I went to war with would connect to the internet every time I deleted certain files and blast down new copies to my machine.
"Why does it want me to say my name?"

 

Offline Ghostavo

  • 210
  • Let it be glue!
    • Skype
    • Steam
    • Twitter
Rictor vs Spyware: Round 1 - FIGHT
Get the most annoying, irritating firewall you can get. I've said this once and I'll say it again... and again... and again... :nervous:

You will never have to worry about spyware ever again.
"Closing the Box" - a campaign in the making :nervous:

Shrike is a dirty dirty admin, he's the destroyer of souls... oh god, let it be glue...

 

Offline Martinus

  • Aka Maeglamor
  • 210
    • Hard Light Productions
Rictor vs Spyware: Round 1 - FIGHT
[color=66ff00]Maeglamor vs. spyware:

Day 1: Installed Linux
[/color]