Closed Thread Icon

Preserved Topic: Virus? Trojan? I don't know what the hell it is, but it's very annoying... Pages that link to <a href="https://ozoneasylum.com/backlink?for=6605" title="Pages that link to Preserved Topic: Virus?  Trojan?  I don&amp;#039;t know what the hell it is, but it&amp;#039;s very annoying..." rel="nofollow" >Preserved Topic: Virus?  Trojan?  I don&#039;t know what the hell it is, but it&#039;s very annoying...\

 
Author Thread
Skaarjj
Maniac (V) Mad Scientist

From: :morF
Insane since: May 2000

posted posted 07-23-2003 16:40

OK...I have just come across a...something...on a friend's system. I don't know if it's a trojan or a virus or whatever, and it only affects Internet Explorer. It doesn't allow you to change your home page to anything but http://home.whatzit.com and all DNS errors are routed through it too. I've come across many keys for it in regedit, deleted or altered them, and then they're all back again the next time you load IE. Very annoying, becuase this page loads a million and one pop ups when it loads, and if a DNS error comes up on any of them it loads the whatzit DNS error page, which brings up more pop ups. It doesn't allow you to run any kind of AMP package properly, which is the worst part.

Have you ever heard of anything like this, becuase I can't get rid of it for all of me.

axleclarkeuk
Paranoid (IV) Inmate

From: Swansea, Wales, UK
Insane since: Aug 2001

posted posted 07-23-2003 17:20

You will most likely find a folder or file in your windows folder that is powering this little blighter, i have foudn plenty inthe past, and danm they are annoying, just look for something that looks out of place and have a peek around.

bitdamaged
Maniac (V) Mad Scientist

From: 100101010011 <-- right about here
Insane since: Mar 2000

posted posted 07-23-2003 17:40

you've downloaded and run Ad-Aware on his machine right?



.:[ Never resist a perfect moment ]:.

Skaarjj
Maniac (V) Mad Scientist

From: :morF
Insane since: May 2000

posted posted 07-23-2003 18:03

yep...didn't find a thing

ozphactor
Maniac (V) Inmate

From: California
Insane since: Jul 2003

posted posted 07-23-2003 19:21

you've downloaded and run Spybot Search & Destroy on his machine right?

trib
Paranoid (IV) Inmate

From: Den Haag, Netherlands
Insane since: Sep 2002

posted posted 07-23-2003 21:31

Start Page Guard ( http://www.spywareinfo.com/downloads/spg/ ) will fix it too, but it's also good for preventing it from happening again ...


Bug-free software only exisits in two places
A programmer's mind and a salesman's lips

silence
Maniac (V) Inmate

From: soon to be "the land down under"
Insane since: Jan 2001

posted posted 07-24-2003 23:13

Try looking through their add/remove programs window. I've seen lots of this stuff. It's usually disguised as some program that "improves" their internet experience and all that crap and most users unwittingly install it and it can be a pain in the ass removing it.

I had one system where I had to reinstall the damn OS before I could get rid of the blasted thing. See, not only does it reset your home page, but it also makes itself your DNS server and redirects DNS errors to the site. In fact, it had even set itself up as the proxy server, which totally killed the customers internet service becuase our ISP doesn't allow any of that bullshit.

All I can say it good luck.

And if you find a good way to get rid of it, please let me know.

Luxo_Jr
Maniac (V) Inmate

From: Stuck inside a Pixar short film
Insane since: Apr 2001

posted posted 07-29-2003 12:30

I found something REALLY odd a couple of nights ago. It came up with one of those error boxes to end a program that is no longer responding to end it. It was for something called BigMac.exe. As soon as I ended it, the computer shut down. I got the worse feeling about it but on restart things were fine. I found the file under D:\WINDOWS\BigMac.exe The file description was "This stuff is pretty good" or something like that. Deleted the bugger.....but my modem does suspiciously try to connect to the internet when it is not told to, set to, or needs to.

"You don't know how paralysing that is, that stare of a blank canvas, which says to the painter: you can't do a thing." - Vincent Van Gogh

jdauie
Bipolar (III) Inmate

From: Missoula, MT
Insane since: Jan 2003

posted posted 07-29-2003 18:06

Get a virus scanner...

http://vil.mcafee.com/dispVirus.asp?virus_k=99595

Hugh
Paranoid (IV) Inmate

From: Dublin, Ireland
Insane since: Jul 2000

posted posted 07-30-2003 02:46

I'd bet money Spybot will fix your prob there(it also has immunize features), we couldnt do without it in the net Cafe where I work its great !
One thing in work we can't figure out is why some of the computers stop access to hotmail.com and stop msn msngr from running until the machine is wiped, some sort of anti-MS virus ? (I kinda like it) But when every customer uses Hotmail .......
(all pcs have spybot + norton av).

Whats an AMP package ?

« BackwardsOnwards »

Show Forum Drop Down Menu