-
May 18th, 2005, 08:58 AM
#1
Special.goods
Has anyone run into this?
Got a buddy who has been bitten. Ran Adaware. SpyBot AVG, Ran a hijackthis scan and cleaned up any suspicious stuff, checked startup.
Looks liek he's hijacked, Jenna Jameson comes up as his "Home Page".
Personally, I told him not to bother fixing, but for some reason, (think it's wifw) he wants it fixed. Also put a lot of desktop icons out there all with ....special.goods... in target.
Appreciate any help you can offer.
(SIC) "Courage is not the abscence of fear....it is the mastery of fear."
Samuel Clemmons/Mark Twain.
"It's just a short ride"...(Dad-rip) Life/Death.
"This too will pass away" ....(Dad) When things s***
-
May 18th, 2005, 09:25 AM
#2
Registered User
Have you run the apps (AVG, AdAware and Spybot) in safe mode?
-
May 18th, 2005, 09:38 AM
#3
Think so....I'll retry though!
(SIC) "Courage is not the abscence of fear....it is the mastery of fear."
Samuel Clemmons/Mark Twain.
"It's just a short ride"...(Dad-rip) Life/Death.
"This too will pass away" ....(Dad) When things s***
-
May 19th, 2005, 04:49 PM
#4
reran in safe mode. SpyBot S&D picked up Alexa, and DSO EXPLOIT.
Wouldn't remove!
(SIC) "Courage is not the abscence of fear....it is the mastery of fear."
Samuel Clemmons/Mark Twain.
"It's just a short ride"...(Dad-rip) Life/Death.
"This too will pass away" ....(Dad) When things s***
-
May 19th, 2005, 05:44 PM
#5
Got the DSO exploit.....still can't kill specialgoods.
Got a small x in load, but can't find source.
(SIC) "Courage is not the abscence of fear....it is the mastery of fear."
Samuel Clemmons/Mark Twain.
"It's just a short ride"...(Dad-rip) Life/Death.
"This too will pass away" ....(Dad) When things s***
-
May 19th, 2005, 06:17 PM
#6
I am deleting through hijackthis, but the next scan brings back ...specialgoods... as home page. Where do I kill this thing?
(SIC) "Courage is not the abscence of fear....it is the mastery of fear."
Samuel Clemmons/Mark Twain.
"It's just a short ride"...(Dad-rip) Life/Death.
"This too will pass away" ....(Dad) When things s***
-
May 19th, 2005, 07:02 PM
#7
Registered User
If this is an XP machine make sure you've turned of System Restore. If it's on it will replace everything you get rid of...
-
May 22nd, 2005, 08:22 AM
#8
I'll give that a shot .......Thanks.
(SIC) "Courage is not the abscence of fear....it is the mastery of fear."
Samuel Clemmons/Mark Twain.
"It's just a short ride"...(Dad-rip) Life/Death.
"This too will pass away" ....(Dad) When things s***
-
May 22nd, 2005, 10:22 AM
#9
Registered User
Get Counterspy and install and run it
-
May 23rd, 2005, 02:09 PM
#10
Registered User
Whether a virus or spyware, I think McAfee will remove it, but you may have to boot off a CD to clean it.
If McAfee can't remove it, it should at least name names. Once you get a name, you can Google it and get manual-removal instructions.
You might also try Norton, but keep in mind that different antivirus companies may have differing names for the same virus, so you'd have to search the translated names.
http://www.trendmicro.com/en/home/us/enterprise.htm
http://www.mcafee.com/us/default.asp
http://www.symantec.com/index.htm
http://www.pestpatrol.com/pestinfo/hijacker.asp
If you buy a new antivirus CD to get the latest definitions, unfortunately the producers don't keep the CD's on store racks up-to-date when manufactured. The CD's are never continuously updated.
Some people know how to download the latest definitions and burn a new CD so that they can boot off the McAfee, Norton, or other CD and do a scan with the latest def's.
Also, I think everyone should own a bootable multi-purpose CD for these situations (and learn how to use it). 700MB CD image download:
http://www.knopper.net/knoppix/index-en.html
-
May 23rd, 2005, 02:21 PM
#11
Registered User
Or just download the Nyquil Kids compilation Antivirus/antispyware bootable cd with all the fix tools and spyware tools you need in one place..updated frequently
-
May 23rd, 2005, 05:29 PM
#12
Ran in safe mode....appears to be a dialer, or spyware. Loading an Icon in the start tray I can't kill.....Restore off, MULTIPLE pop-ups and crap. Multiple Icons on Desk top.
(SIC) "Courage is not the abscence of fear....it is the mastery of fear."
Samuel Clemmons/Mark Twain.
"It's just a short ride"...(Dad-rip) Life/Death.
"This too will pass away" ....(Dad) When things s***
-
May 24th, 2005, 08:00 AM
#13
Also found 2 entries in registry. When I delete...ekeps coming back.
(SIC) "Courage is not the abscence of fear....it is the mastery of fear."
Samuel Clemmons/Mark Twain.
"It's just a short ride"...(Dad-rip) Life/Death.
"This too will pass away" ....(Dad) When things s***
-
May 24th, 2005, 08:23 AM
#14
Registered User
What's it finding? If you can give us the name of the dialer or what spyware it is it would be easier to help you find a fix.
-
May 24th, 2005, 09:01 AM
#15
Registered User
Try downloading this 14 day free trial and see if this takes care of the problem. I have seen a problem with a nail.exe in systems and this is the only program that gets rid of it. http://downloads-zdnet.com.com/Ewido...-10326287.html
It's not the computers that keep having problems, it's the users!!
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|
Bookmarks