rundll32.exe browser hijacker... impossible to remove? - GoFuckYourself.com

Huggles · 09-12-2004, 11:07 PM

I've tried everything, or so I think...

Ad-aware, safe mode, Spybot S&D, deleting the file... nothing works. The file just re-appears and I get pop ups on every fucking IE page I goto.

You know, I get Adult Friend Finder pop ups. Can I find out who this guy is from his AFF referral code? I will seriously fly out to his house, with camera, kick down his front door, and bend every one of his fucking fingers back until they touch his wrist.

Please, someone help! Either get this file off my computer, or help me get the cock sucker who's profiting off my fucking computer being fucked.

galleryseek · 09-12-2004, 11:09 PM

you need to either completely get rid of that annoying gif in your sig, or reduce it to a much smaller size.

Platinumpimp · 09-12-2004, 11:09 PM

http://www.techsupportforum.com/show...stpost&t=12185

And I agree with galleryseek

jollyperv · 09-12-2004, 11:10 PM

Download Hi-jack This.

rdv · 09-12-2004, 11:11 PM

please get rid of it !

now you cannot pretend you are cool , because you obviously are not , so put a nice sig there an you can pretend to be cool

pornguy · 09-12-2004, 11:14 PM

Go to this address.

housecall.trendmicro.com

run the online virus scan. It will get most of that out. It will also tell you the location of the files. Then go in and try to remove them. If you can not delete them, try to rename them. IF the system keeps saying that it can not change it because it is in use, ctrl alt del everything that you can and try again.

If not try doing a restore point about a week before that came up.

Also if you are running the newest version of spybot turn on the teatimer. It stops your registry from being changed without your approval.

Dagwolf · 09-12-2004, 11:15 PM

Have you run your antivirus software?

robfantasy · 09-12-2004, 11:17 PM

huggles how old are u playa

Huggles · 09-12-2004, 11:22 PM

Quote:

Originally posted by Dagwolf
Have you run your antivirus software?

Yeah, Norton 2004 can't find anything and it's fully updated. Spybot S&D doesn't find shit either. It's rundll32.exe for sure. I can delete it, but it just comes back right away.

I'll change the sig as fucking soon as I fix this problem.

AkiraSS · 09-13-2004, 12:45 AM

stop using IE, use opera or firefox, great combo of browsers

For GFY and other forums I use opera only!

DimeStoreNovel · 09-13-2004, 12:52 AM

Quote:

Originally posted by Huggles
Yeah, Norton 2004 can't find anything and it's fully updated. Spybot S&D doesn't find shit either. It's rundll32.exe for sure. I can delete it, but it just comes back right away.

I'll change the sig as fucking soon as I fix this problem.

its probably in the registry.
you will have to delete it manually.

start
run
regedit

then look for microsft or explorer files or "user" files,
it may be in their.

be careful what you delete.

DimeStoreNovel · 09-13-2004, 12:56 AM

hit google with the search term

rundll32.exe

bunch of info their about rundll32.exe

Lace · 09-13-2004, 01:16 AM

rundll32.exe is a windows program.

i had this trojan/spyware tonight, got it fucking twice.

had to do the system restore on my month old HP twice tonight...pain in the fucking ass...

another thing, it loads up 3-5 programs, if you look in your processes, and if you close them they keep reloading...and it takes all of your cpu..

got mine from a few tgp sites tonight.

Centurion · 09-13-2004, 01:40 AM

Quote:

Originally posted by Huggles
Yeah, Norton 2004 can't find anything and it's fully updated. Spybot S&D doesn't find shit either. It's rundll32.exe for sure. I can delete it, but it just comes back right away.

I'll change the sig as fucking soon as I fix this problem.

The reason you can't get rid of virii like this is that they "hide" even when you delete an infected file. They hide in .tmp files many times..MOST of the time in windows\temp..delete all the the crap in there as well as any other .tmp files you find in your root directory.

Taboo · 09-13-2004, 04:44 AM

I post my linklist whenever I see threads like this.

CLEAN:
? HijackThis (HJT) / Tutorial
? Ad Aware / Tutorial
? SpySweeper
? Spybot S&D / Tutorial
? CWShredder
? The Cleaner

PREVENT:
? SpywareBlaster
? SpywareGuard

ANTIVIRUS & FIREWALL:
? Kaspersky AV
? Sygate Firewall Pro
? Kerio Firewall
? Zone Alarm

ONLINE VIRUS SCANNERS:
? TrendMicro
? BitDefender
? Panda
? RAV

RECOMMEND:
? DoxDesk Quick Parasite Check
? Windows Update

Everyday and I mean "EVERYDAY", I run Adaware, HJT, SpySweeper, SpySweeper and
1 of the free online virus scanners. Good Luck!

Shoehorn! · 09-13-2004, 04:50 AM

Quote:

Originally posted by Taboo
I post my linklist whenever I see threads like this.

CLEAN:
? HijackThis (HJT) / Tutorial
? Ad Aware / Tutorial
? SpySweeper
? Spybot S&D / Tutorial
? CWShredder
? The Cleaner

PREVENT:
? SpywareBlaster
? SpywareGuard

ANTIVIRUS & FIREWALL:
? Kaspersky AV
? Sygate Firewall Pro
? Kerio Firewall
? Zone Alarm

ONLINE VIRUS SCANNERS:
? TrendMicro
? BitDefender
? Panda
? RAV

RECOMMEND:
? DoxDesk Quick Parasite Check
? Windows Update

Everyday and I mean "EVERYDAY", I run Adaware, HJT, SpySweeper, SpySweeper and
1 of the free online virus scanners. Good Luck!

Nice list. I got some of this shit autoinstalled last night from a MGP, it's been nothing but fucking problems since. I would love to torture these spyware fuckers with a razorblade, salt, lemon juice, and a cheese grater. Fucking bastards.

09-12-2004, 11:07 PM	#1
Huggles GFY'S #1 retard Industry Role: Join Date: Feb 2003 Location: Kelowna Posts: 11,122	rundll32.exe browser hijacker... impossible to remove? I've tried everything, or so I think... Ad-aware, safe mode, Spybot S&D, deleting the file... nothing works. The file just re-appears and I get pop ups on every fucking IE page I goto. You know, I get Adult Friend Finder pop ups. Can I find out who this guy is from his AFF referral code? I will seriously fly out to his house, with camera, kick down his front door, and bend every one of his fucking fingers back until they touch his wrist. Please, someone help! Either get this file off my computer, or help me get the cock sucker who's profiting off my fucking computer being fucked. __________________ https://3-veo.com/ The best AI video maker portal.

09-12-2004, 11:09 PM	#3
Platinumpimp Logos and such. Industry Role: Join Date: Jan 2004 Location: Kingdom of the Netherlands Posts: 10,214	http://www.techsupportforum.com/show...stpost&t=12185 And I agree with galleryseek __________________ I design logo's.

09-12-2004, 11:11 PM	#5
rdv Confirmed User Join Date: Nov 2001 Location: xxxnetwerk.com Posts: 137	please get rid of it ! now you cannot pretend you are cool , because you obviously are not , so put a nice sig there an you can pretend to be cool __________________

09-12-2004, 11:14 PM	#6
pornguy Too lazy to set a custom title Industry Role: Join Date: Mar 2003 Location: Homeless Posts: 62,911	Go to this address. housecall.trendmicro.com run the online virus scan. It will get most of that out. It will also tell you the location of the files. Then go in and try to remove them. If you can not delete them, try to rename them. IF the system keeps saying that it can not change it because it is in use, ctrl alt del everything that you can and try again. If not try doing a restore point about a week before that came up. Also if you are running the newest version of spybot turn on the teatimer. It stops your registry from being changed without your approval. __________________ PornGuy skype me pornguy_epic AmateurDough The Hottes Shemales online! TChicks.com \| Angeles Cid \| Mariana Cordoba \| MAILERS WELCOME!

09-12-2004, 11:15 PM	#7
Dagwolf President of Canada Join Date: Sep 2003 Location: Leaving Hell, Entering Limbo Posts: 23,141	Have you run your antivirus software? __________________ Sleep well, and dream of large women.

09-12-2004, 11:09 PM	#2
galleryseek Confirmed User Industry Role: Join Date: Mar 2002 Posts: 8,234	you need to either completely get rid of that annoying gif in your sig, or reduce it to a much smaller size.

09-12-2004, 11:10 PM	#4
jollyperv Confirmed User Industry Role: Join Date: Nov 2001 Location: NYC Posts: 3,927	Download Hi-jack This.

09-12-2004, 11:17 PM	#8
robfantasy Confirmed User Industry Role: Join Date: Jun 2002 Location: Medellin, Colombia Posts: 6,445	huggles how old are u playa __________________ Looking to speak w/ high volume nutra CPA affiliates or networks... msg me

09-13-2004, 12:45 AM	#10
AkiraSS Confirmed User Join Date: Jan 2003 Location: ICQ: 17630227 Posts: 2,988	stop using IE, use opera or firefox, great combo of browsers For GFY and other forums I use opera only!

09-13-2004, 12:56 AM	#12
DimeStoreNovel Registered User Join Date: Sep 2004 Posts: 151	hit google with the search term rundll32.exe bunch of info their about rundll32.exe

09-13-2004, 01:16 AM	#13
Lace Too lazy to set a custom title Industry Role: Join Date: Mar 2004 Posts: 16,116	rundll32.exe is a windows program. i had this trojan/spyware tonight, got it fucking twice. had to do the system restore on my month old HP twice tonight...pain in the fucking ass... another thing, it loads up 3-5 programs, if you look in your processes, and if you close them they keep reloading...and it takes all of your cpu.. got mine from a few tgp sites tonight. __________________ Your Paysite Partner Strength In Numbers! StickyDollars \| RadicalCash \| KennysPennies \| HomegrownCash

09-13-2004, 04:44 AM	#15
Taboo Confirmed User Join Date: Jul 2004 Location: I'd rather be networking than not working. Posts: 3,700	I post my linklist whenever I see threads like this. CLEAN: ? HijackThis (HJT) / Tutorial ? Ad Aware / Tutorial ? SpySweeper ? Spybot S&D / Tutorial ? CWShredder ? The Cleaner PREVENT: ? SpywareBlaster ? SpywareGuard ANTIVIRUS & FIREWALL: ? Kaspersky AV ? Sygate Firewall Pro ? Kerio Firewall ? Zone Alarm ONLINE VIRUS SCANNERS: ? TrendMicro ? BitDefender ? Panda ? RAV RECOMMEND: ? DoxDesk Quick Parasite Check ? Windows Update Everyday and I mean "EVERYDAY", I run Adaware, HJT, SpySweeper, SpySweeper and 1 of the free online virus scanners. Good Luck!