anyone get hit with thesten.com BS

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • pussyluver
    Clueless OleMan
    • Mar 2003
    • 11009
    #1

    anyone get hit with thesten.com BS

    Got this spyware hack from thesten.com. Nasty shit! Can't get rid of it. deleted from registry, all files with the name, checked my startup programs etc.

    WTF - is this a rebuild?

    Who's spreading it?

    Whois gives the usual noname....
    Tags: None
    • chowda
      Confirmed User
      • Jun 2003
      • 9527
      #2
      no
      Someone finds you...
      2007

      PS: Nationalnet is the best host I've ever had. And i tried alot of them.

        Comment

        • JDog
          Confirmed User
          • Feb 2003
          • 7453
          #3
          What's it doing? Going to thesten.com? If it is, you just remove your hosts file!

          jDoG
          NSCash now powering ReelProfits.com
          ALSO FEATURING: NSCash.com :: SoloDollars.com :: ReelProfits.com :: BiminiBucks.com :: VOD
          PROGRAMS COMING SOON: Greedy Bucks :: Vengeance Cash
          NOW OFFERING OVER 60 SITES
          CONTACT :: JAMES SMITH :: CHIEF TECHNOLOGY OFFICER :: ICQ (711385133)

            Comment

            • irishfury
              Confirmed User
              • Aug 2003
              • 2611
              #4
              I have found that it is in DNSerr.dll in winnt, iedll.exe in windows media player, loader.exe in windows media player, and wmplayer.exe. When ever any of these executes it infects the registry again.
              I used windows explorer to search for any file containing thesten and dnserr. It takes a long time but at least it ids the files.

              Also, these things infect the hosts file in winnt and the hosts file in system32/drivers/etc with bad ip addresses. You need to delete the bad addresses or it will redirect IE and here you go again.
              Trust no one there all snakes

                Comment

                • WiredGuy
                  Pounding Googlebot
                  • Aug 2002
                  • 34515
                  #5
                  Nope, never heard of it.
                  WG
                  I play with Google.

                    Comment

                    • JSA Matt
                      So Fucking Banned
                      • Aug 2003
                      • 5464
                      #6
                      Originally posted by chowda
                      no

                        Comment

                        Previous template Next
                        Working...