I Have A Virus

Night_EagleNight_Eagle Join Date: 2003-11-07 Member: 22373Members
in Off-Topic
<div class="IPBDescription">Help me</div> It deletes spyware killers whenever they are installed
It closes IEXPLORER tasks when they go to the official SPYBOT S&D website
It closes IEXPLORER tasks when search engines look for SPYBOT
I want to kill kazaa but my sister will kill me if I do.
Off Topic Disagree Agree Awesome

Comments

  • raz0rraz0r Join Date: 2003-07-24 Member: 18395Members
    Kill your sister for installing Kazaa
    Kill Kazaa
    Kazaa is evil
    If she absolutely totally and utterly needs kazaa, at least tell her to get kazaa lite.
    Get Ad-aware.
    It seems like it is only blocking Spybot.
    If this is not the case it won't block some of the lesser known ones, do a google search for em.
    Off Topic Disagree Agree Awesome
  • Night_EagleNight_Eagle Join Date: 2003-11-07 Member: 22373Members
    edited June 2004
    Whoever makes these viruses needs to get a life.
    I got an idea.
    Run the Spybot installed on my other computer through a network.
    Good ol' NETBEUI
    Off Topic Disagree Agree Awesome
  • Nil_IQNil_IQ Join Date: 2003-04-15 Member: 15520Members
    O.k, look for a file called HOSTS (or LMHOSTS), open it as a notpad file and have a look. There is probably a big long list of sites there. These are the sites being blocked. You need to delete this file.
    Off Topic Disagree Agree Awesome
  • Night_EagleNight_Eagle Join Date: 2003-11-07 Member: 22373Members
    edited June 2004
    Thanks....
    HOSTS file contents
    <!--QuoteBegin--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> </td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->
    127.0.0.1      localhost
    81.211.105.38 download.com
    81.211.105.38 www.download.com
    81.211.105.38 rds.yahoo.com
    81.211.105.38 av.rds.yahoo.com
    81.211.105.38 msxml.excite.com
    81.211.105.38 clickit.go2net.com
    81.211.105.38 click.hotbot.com
    81.211.105.38 search.looksmart.com
    81.211.105.38 www.safer-networking.org
    81.211.105.38 safer-networking.org
    81.211.105.38 suche.fireball.de
    81.211.105.38 search.abacho.com
    81.211.105.38 search.ebay.com
    81.211.105.38 www20.overture.com
    81.211.105.38 brisbane.t-online.de
    81.211.105.38 www.amazon.de
    81.211.105.38 amazon.de
    81.211.105.38 suche.web.de
    81.211.105.38 suche.freenet.de
    81.211.105.38 shopping.freenet.de
    81.211.105.38 shopping.lycos.de
    81.211.105.38 suche.lycos.de
    81.211.105.38 suche.aol.de
    81.211.105.38 www.search.ch
    81.211.105.38 search.ch
    81.211.105.38 www.webcasinoworld.com
    81.211.105.38 webcasinoworld.com
    81.211.105.38 www.casinopayoutsonline.com
    81.211.105.38 casinopayoutsonline.com
    81.211.105.38 www.casinoonnet.com
    81.211.105.38 casinoonnet.com
    81.211.105.38 www.swirve.com
    81.211.105.38 swirve.com
    81.211.105.38 www.winamilliondollars.com
    81.211.105.38 winamilliondollars.com
    81.211.105.38 www.pch.com
    81.211.105.38 cnn.com
    81.211.105.38 www.cnn.com
    81.211.105.38 pch.com
    81.211.105.38 www.partypoker.com
    81.211.105.38 partypoker.com
    81.211.105.38 www.pokerroom.com
    81.211.105.38 pokerroom.com
    81.211.105.38 www.ultimatebet.com
    81.211.105.38 ultimatebet.com
    81.211.105.38 www.thehendonmob.com
    81.211.105.38 thehendonmob.com
    81.211.105.38 www.pokerpages.com
    81.211.105.38 pokerpages.com
    81.211.105.38 www.pokerpartys.com
    81.211.105.38 pokerpartys.com
    81.211.105.38 www.intercasino.com
    81.211.105.38 intercasino.com
    81.211.105.38 www.worldwinner.com
    81.211.105.38 worldwinner.com
    81.211.105.38 goldenpalace.com
    81.211.105.38 www.goldenpalace.com
    81.211.105.38 www.grandonline.com
    81.211.105.38 grandonline.com
    81.211.105.38 www.blackjackinfo.com
    81.211.105.38 blackjackinfo.com
    81.211.105.38 www.advantageplayer.com
    81.211.105.38 advantageplayer.com
    81.211.105.38 www.bjrnet.com
    81.211.105.38 bjrnet.com
    81.211.105.38 www.21ace.com
    81.211.105.38 21ace.com
    81.211.105.38 www.blackjackcourse.com
    81.211.105.38 blackjackcourse.com
    81.211.105.38 www.casino.com
    81.211.105.38 casino.com
    81.211.105.38 amazon.com
    81.211.105.38 www.amazon.com
    81.211.105.38 groups.google.com
    81.211.105.38 www.worldsex.com
    81.211.105.38 worldsex.com
    81.211.105.38 89.com
    81.211.105.38 www
    # Start of entries inserted by Spybot - Search & Destroy
    # End of entries inserted by Spybot - Search & Destroy
    <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
    My solution: READ ONLY DUMMY FILE
    (I love that solution)
    Off Topic Disagree Agree Awesome
  • Nil_IQNil_IQ Join Date: 2003-04-15 Member: 15520Members
    edited June 2004
    <!--QuoteBegin-raz0r+Jun 26 2004, 01:24 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (raz0r @ Jun 26 2004, 01:24 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> Kill your sister for installing Kazaa
    Kill Kazaa
    Kazaa is evil
    If she absolutely totally and utterly needs kazaa, at least tell her to get kazaa lite.
    Get Ad-aware.
    It seems like it is only blocking Spybot.
    If this is not the case it won't block some of the lesser known ones, do a google search for em. <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
    I think i've had this before and it blocks ALL spyware removal sites, it's quite clever. You need to delete the hosts file as mentioned above. There might be 2 of them, check both and delete the one which doesn't look "normal", i.e, delete the one with a big long list of sites to block on it.

    *edit* And yes, Kazza is evil *edit*
    Off Topic Disagree Agree Awesome
  • jumpingjodajumpingjoda Join Date: 2003-12-14 Member: 24367Members, Constellation, Reinforced - Shadow
    <!--QuoteBegin-Night-Eagle+Jun 26 2004, 07:26 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Night-Eagle @ Jun 26 2004, 07:26 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> Whoever makes these viruses needs to get a life.
    I got an idea.
    Run the Spybot installed on my other computer through a network.
    Good ol' NETBEUI <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    Whoever gets them should get some antivirus and firewall software, and should be more carefull opening "This-is-a-virus.zip" files <!--emo&:p--><img src='http://www.unknownworlds.com/forums/html//emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' /><!--endemo-->
    Off Topic Disagree Agree Awesome
  • Night_EagleNight_Eagle Join Date: 2003-11-07 Member: 22373Members
    edited June 2004
    Probably *censored* software incorpor-i mean kazaa software incorporated that did this.

    Edit: Censoring
    I don't know how that word got around the filter either...
    Off Topic Disagree Agree Awesome
  • Nil_IQNil_IQ Join Date: 2003-04-15 Member: 15520Members
    edited June 2004
    <!--QuoteBegin-Night-Eagle+Jun 26 2004, 01:28 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Night-Eagle @ Jun 26 2004, 01:28 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> Thanks....
    HOSTS file contents
    <!--QuoteBegin--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> </td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->
    127.0.0.1       localhost
    81.211.105.38 download.com
    81.211.105.38 www.download.com
    81.211.105.38 rds.yahoo.com
    81.211.105.38 av.rds.yahoo.com
    81.211.105.38 msxml.excite.com
    81.211.105.38 clickit.go2net.com
    81.211.105.38 click.hotbot.com
    81.211.105.38 search.looksmart.com
    81.211.105.38 www.safer-networking.org
    81.211.105.38 safer-networking.org
    81.211.105.38 suche.fireball.de
    81.211.105.38 search.abacho.com
    81.211.105.38 search.ebay.com
    81.211.105.38 www20.overture.com
    81.211.105.38 brisbane.t-online.de
    81.211.105.38 www.amazon.de
    81.211.105.38 amazon.de
    81.211.105.38 suche.web.de
    81.211.105.38 suche.freenet.de
    81.211.105.38 shopping.freenet.de
    81.211.105.38 shopping.lycos.de
    81.211.105.38 suche.lycos.de
    81.211.105.38 suche.aol.de
    81.211.105.38 www.search.ch
    81.211.105.38 search.ch
    81.211.105.38 www.webcasinoworld.com
    81.211.105.38 webcasinoworld.com
    81.211.105.38 www.casinopayoutsonline.com
    81.211.105.38 casinopayoutsonline.com
    81.211.105.38 www.casinoonnet.com
    81.211.105.38 casinoonnet.com
    81.211.105.38 www.swirve.com
    81.211.105.38 swirve.com
    81.211.105.38 www.winamilliondollars.com
    81.211.105.38 winamilliondollars.com
    81.211.105.38 www.pch.com
    81.211.105.38 cnn.com
    81.211.105.38 www.cnn.com
    81.211.105.38 pch.com
    81.211.105.38 www.partypoker.com
    81.211.105.38 partypoker.com
    81.211.105.38 www.pokerroom.com
    81.211.105.38 pokerroom.com
    81.211.105.38 www.ultimatebet.com
    81.211.105.38 ultimatebet.com
    81.211.105.38 www.thehendonmob.com
    81.211.105.38 thehendonmob.com
    81.211.105.38 www.pokerpages.com
    81.211.105.38 pokerpages.com
    81.211.105.38 www.pokerpartys.com
    81.211.105.38 pokerpartys.com
    81.211.105.38 www.intercasino.com
    81.211.105.38 intercasino.com
    81.211.105.38 www.worldwinner.com
    81.211.105.38 worldwinner.com
    81.211.105.38 goldenpalace.com
    81.211.105.38 www.goldenpalace.com
    81.211.105.38 www.grandonline.com
    81.211.105.38 grandonline.com
    81.211.105.38 www.blackjackinfo.com
    81.211.105.38 blackjackinfo.com
    81.211.105.38 www.advantageplayer.com
    81.211.105.38 advantageplayer.com
    81.211.105.38 www.bjrnet.com
    81.211.105.38 bjrnet.com
    81.211.105.38 www.21ace.com
    81.211.105.38 21ace.com
    81.211.105.38 www.blackjackcourse.com
    81.211.105.38 blackjackcourse.com
    81.211.105.38 www.casino.com
    81.211.105.38 casino.com
    81.211.105.38 amazon.com
    81.211.105.38 www.amazon.com
    81.211.105.38 groups.google.com
    81.211.105.38 www.worldsex.com
    81.211.105.38 worldsex.com
    81.211.105.38 89.com
    81.211.105.38 www
    # Start of entries inserted by Spybot - Search & Destroy
    # End of entries inserted by Spybot - Search & Destroy
    <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
    My solution: READ ONLY DUMMY FILE
    (I love that solution) <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
    Hmm, that doesn't look too bad actually, they look like mostly ad sites, which suggests that some program you installed blocks popups from those sites, probably spyware S&D. Check BOTH hosts files and look at which sites are being blocked; just having sites in there isn't always a bad thing (but usually is).

    *edit* Nighteagle, I don't know how you got round the swear filter, but I'd suggest you remove the offending article before the admins notice <!--emo&:)--><img src='http://www.natural-selection.org/forums/html//emoticons/smile.gif' border='0' style='vertical-align:middle' alt='smile.gif' /><!--endemo--> *edit*
    Off Topic Disagree Agree Awesome
  • jumpingjodajumpingjoda Join Date: 2003-12-14 Member: 24367Members, Constellation, Reinforced - Shadow
    <!--QuoteBegin-Night-Eagle+Jun 26 2004, 07:31 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Night-Eagle @ Jun 26 2004, 07:31 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> Probably bastard software incorpor-i mean kazaa software incorporated that did this. <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    Yeah of course they installed all that on your pc
    /sarcasm
    Off Topic Disagree Agree Awesome
  • CForresterCForrester P0rk(h0p Join Date: 2002-10-05 Member: 1439Members, Constellation
    It's not blocking anything. It's rerouting it. Remove everything but the top line (127.0.0.1 localhost) and set it to read-only.
    Off Topic Disagree Agree Awesome
  • Nil_IQNil_IQ Join Date: 2003-04-15 Member: 15520Members
    edited June 2004
    <!--QuoteBegin-CForrester+Jun 26 2004, 01:38 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (CForrester @ Jun 26 2004, 01:38 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> It's not blocking anything. It's rerouting it. Remove everything but the top line (127.0.0.1  localhost) and set it to read-only. <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
    Well, for all intents and purposes it IS blocking it since you can't get to what you want to get to... but yeah, it's not really "blocked" as such.

    You had to come in here and act all smart on me just when I was getting my nerd thing on <!--emo&:)--><img src='http://www.unknownworlds.com/forums/html//emoticons/smile.gif' border='0' style='vertical-align:middle' alt='smile.gif' /><!--endemo-->
    Off Topic Disagree Agree Awesome
  • Night_EagleNight_Eagle Join Date: 2003-11-07 Member: 22373Members
    *Solution found, not an actual virus, topic closed*
    *Close the topic deemmmeeeeet*
    Off Topic Disagree Agree Awesome
Sign In or Register to comment.