This shit is fucked up. Everytime I click one of my thumbnails on my sites, or any other TGP out there for that matter, the links go to the virus' tgps and random search querys to google. like it will open a google window with the term "rabbit vibrator" and other random ass sex shit. none of my spyware or virus programs can get rid of this shit! anyone got rid of this before?
-
Just run adware/spyware remover tool, it's a trojan running on your system so the anti spyware tool should detect it. Perhaps it's CWS related, those are the hardest to get rid of.
Good luck with it, I hate that crap, takes hours and hours to get it from your pc.
-
StickyGreen, I never heard of that one but had a really nasty trojan a few weeks ago that nothing would remove.
I downloaded Panda Antivirus and it completely got rid of it, and I tried about half a dozen different programs. http://www.pandasoftware.com/
The free demo works great, I used Panda Platinum 2006 Internet Security.Comment
-
thanx man! i'm gonna give it a try right now...Originally posted by nudecanadaComment
-
I still can't get rid of this shit, anyone know how?Comment
-
post the tgp names it goes toThis dog, is dog, a dog, good dog, way dog, to dog, keep dog, an dog, idiot dog, busy dog, for dog, 20 dog, seconds dog!
Now read without the word dog.Comment
-
for some reason the tgps aren't coming up anymore...but all these are...Originally posted by SleazyDream
random sites:
http://slyfind.net/search.php?q=notebook
http://anewsearchengine.net/in.php
http://executivejobsearch.biz/go.php
http://casino-trix.com/search.php?qq=poker
and it also opens up random google links like these...
http://www.google.com/search?hl=en&q=adult%20sex
http://www.google.com/search?hl=en&q=sexy20granny
http://www.google.com/search?hl=en&q=sex%20toy
http://www.google.com/search?hl=en&q...acial%20datingComment
-
sound like cool web search to me.. who got that cool swiss army knife a few weeks ago for sending them installs?Comment
-
This is a new trojan and is now in the wild. If you find a fix, please post it here. Thanks.Comment
-
-
got any of these
atl_helper.exe
uio.exe
Netsurf.exe
new32.exe
dePloy.exe
Brong32.exehatisblack at yahoo.comComment
-
go to c:\windows and right click and sort by "last modified" look for new files .. also look in c:\ and c:\windowsroot\system32 searching the same wayhatisblack at yahoo.comComment
-
-
looks like format c:\ is badly needed dude.
Comment
-
I'm getting the same thing now. It seems to be popping into where ever php is used or sponsor hosted galleries.
I'm getting this domain lodaing up:
www.handfind.net which loads http://www.yourlust.com (tgp)
http://www.google.com/search?hl=en&q=sexy%20mature
http://www.searchthissite.net/ which is loading up some Asian Mysteries TGP but all links go to bank foreclosures shit such as:
http://search.lycos.com/?src=kn&loc=...sures&nlubid=1
http://www.monstermarketplace.com/go...k+foreclosures
http://www.uploading.com/
http://search.ebay.com/bank-foreclos...QQfkrZ1QQfnuZ1
http://www.upspiral.com/index.php?tp...2bforeclosures
Also another tgp labeled http://www.dreamQueens.comComment
-
yep, sounds like the same shit. i've been trying for like 3 days to get rid of it...Originally posted by Harmon
Comment
-
lol i wonder what this is all about.. it look slike all those links run to paid sponsor ads on those sites ( the bak foreclosure ) so im thinking the "hacker" must be trying to run clicks thru competition ad links ( or he paid for those links , but sounds more like click fraudOriginally posted by Harmon
)
hatisblack at yahoo.comComment
-
did you try what i saidOriginally posted by StickyGreenyep, sounds like the same shit. i've been trying for like 3 days to get rid of it...hatisblack at yahoo.comComment
-
if your on the net while your trying to clean the comp you may have some problems ( especially if you have fast connection ) best to shutdown and do the steps above. hatisblack at yahoo.comComment
-
Try going to live.com and downloading the beta of Windows OneCare - it has the new virus scanner from microsoft and it seems to a good job.
I was running Nortons - I ran this and it picked up an extra 5 problems.Comment
-
the only suspicious file was a file named WPA.DBL, which was the only file modified today in the system32 folder.Originally posted by SmokeyTheBearComment
-
Thats something to do with MS activation I think..........Originally posted by StickyGreenComment
-
Spyware Search & Destroy is my favourite, it will remove that spyware.Comment
-
that is the windows activation program its not harmfull.. did you also check c:\ and c:\windows ?Originally posted by StickyGreen
i think your nameservers have been messed with possibly..hatisblack at yahoo.comComment
-
check in your registry in local machine\system\currentcontrolset\services\tcpip\
also when your looking for files make sure you viewing ALL files ( like hidden and system files )hatisblack at yahoo.comComment
-
Spybot
Sounds like some form of Spyware etc.Originally posted by StickyGreen
Try Spybot.
http://www.download.com/Spybot-Searc...-10122137.html
That gets stacks of stuff, and fixes up all sorts of crap on your machine. An amazing tool!
Normal virus progs are aiming at virus stuff, and take Trojans etc secondary it seems.
I had Panda too... hehe, until a virus fucked it!
The same happened to my Norton. Now I've been using AVG and haven't had a problem since on the virus side.
Of course with Spybot running secondary, and Ad-Aware at startup.ICQ: 208-565-227Comment
-
-
Viruses are clever now-a-days, if you can't clean out your registry and track recently modifies files in your windows config folders then you may need to format.
Good luck,Like the desert needs the rain
We do fully manged WordPress, VPS, and Servers. Adult Host Pro https://adulthostpro.com/ Since 2001Comment
-
what's funny is your gay ass nick. is it your pussy or your mom's pussy that's free you fag...Originally posted by freepussyComment
-
Yepp, activation code for MS
Check this out:Originally posted by StickyGreen
http://netsecurity.about.com/od/wind...twinxp0829.htm
That guides you through the process.ICQ: 208-565-227Comment
-
have you tried the Microsoft Anti-Spyware beta?Comment
-
Yes... whatever this is, NOTHING is picking up. In fact, MS Spyware beta is running as I type this.Originally posted by reynold
Comment
-
It's not a spy
It's not a spy, it's the activation code in Microsoft.Originally posted by reynold
Just follow the previous instrctions.ICQ: 208-565-227Comment
-
wtf are you talking about? This has nothing to do with the activation code dude. You're on crack. This IS some sort of spyware/malware. Don't rip on people trying to help like you know it all... you apparently know jack shitOriginally posted by Nilsy42
Comment
-
lol...i'm still having no luck. i downloaded the windows onecare beta and all it did was slow my system down dramatically and freeze every time it scanned for viruses...Originally posted by Harmonwtf are you talking about? This has nothing to do with the activation code dude. You're on crack. This IS some sort of spyware/malware. Don't rip on people trying to help like you know it all... you apparently know jack shit
Comment
-
I had some NASTY viruses and trojans hit my comp about a week back or so - Downloaded a program called Spyware doctor - It did a tremendous job... You should check it out, I believe the first removal and scan are free .. I went ahead and paid the $30 for itBLAZING BUCKS - Leading The Fight Against Saturation!
1000's Of Pics For Your TGP Submissions, Pre-Built Free Sites, and Dynamically
Changing Tours Assuring Your Traffic Is ALWAYS Converting The Best It Possibly Can!
ICQ : 253483920 or [email protected]Comment
-
i tried that one too, didn't find it either. i think i've tried almost every program out there by now lol...Originally posted by BlazingBucks_RyanComment
Comment