NON BS THREAD>>>> sp2chk.exe....new adaware virus??

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Juicy D. Links
    So Fucking Banned
    • Apr 2001
    • 122992

    #1

    NON BS THREAD>>>> sp2chk.exe....new adaware virus??

    Windows>System32 folder setting off as a trojan....

    Anybody have 411 on this shit?
  • Juicy D. Links
    So Fucking Banned
    • Apr 2001
    • 122992

    #2
    hiiiiiiiiiiiiiiiiiiiiiiiii

    Comment

    • sonofsam
      Too lazy to set a custom title
      • Dec 2004
      • 18648

      #3
      some of these wiggers on gfy can't understand normal english... let me translate for you

      juicy : whats the dizzle with this adwizzle, my nortonizzle detectizzled some shizzle....
      I like turtles.

      Comment

      • Triple 6
        Confirmed User
        • Feb 2002
        • 5394

        #4
        your fucked!
        SIG TOO SMALL! Maximum 1200x600 button and no more than 30 text lines of ALL SIZES and COLORS. Unless your sig is for a GFY top banner sponsor, then you may use a 6240x4800 instead of a 1024x800.

        Comment

        • sonofsam
          Too lazy to set a custom title
          • Dec 2004
          • 18648

          #5
          *waits for sickbeatz*


          lol jk
          I like turtles.

          Comment

          • pornguy
            Too lazy to set a custom title
            • Mar 2003
            • 62910

            #6
            How did you find it. norton? ot spybot or what?
            PornGuy skype me pornguy_epic

            AmateurDough The Hottes Shemales online!
            TChicks.com | Angeles Cid | Mariana Cordoba | MAILERS WELCOME!

            Comment

            • Triple 6
              Confirmed User
              • Feb 2002
              • 5394

              #7
              im just counting down before Persius spams this thread with his metrowned pic


              its going on at least 100 threads strong tonite!
              SIG TOO SMALL! Maximum 1200x600 button and no more than 30 text lines of ALL SIZES and COLORS. Unless your sig is for a GFY top banner sponsor, then you may use a 6240x4800 instead of a 1024x800.

              Comment

              • Juicy D. Links
                So Fucking Banned
                • Apr 2001
                • 122992

                #8
                http://computercops.biz/startuplist-6983.html read it yo

                Comment

                • pornguy
                  Too lazy to set a custom title
                  • Mar 2003
                  • 62910

                  #9
                  Juicy. Try this anti virus

                  housecall.trendmicro.com

                  It is a web based virus scan, and it is kick ass.
                  PornGuy skype me pornguy_epic

                  AmateurDough The Hottes Shemales online!
                  TChicks.com | Angeles Cid | Mariana Cordoba | MAILERS WELCOME!

                  Comment

                  • Top Jimmy
                    Confirmed User
                    • Dec 2004
                    • 2513

                    #10
                    Originally posted by sonofsam
                    some of these wiggers on gfy can't understand normal english... let me translate for you

                    juicy : whats the dizzle with this adwizzle, my nortonizzle detectizzled some shizzle....

                    LOL Classic.

                    Don't reply. Let it die.

                    Comment

                    • facialfreak
                      Confirmed User
                      • Feb 2005
                      • 3018

                      #11
                      THis is a program installed by a variant of CoolWebSearch Juicy.

                      It is an Internet Explorer BHO that acts as a backdoor. Stored in the System32 folder under the name ?msXXX.dll? where XXX is three random lower-case letters; uses a random class ID. When a new IE window is open, it contacts its controlling server which directs it to install further software including sp2chk.exe (a rootkit-like hook that makes other CWS files invisible to the Windows file Explorer), tlntadmnx.exe (which puts the site 63.219.181.7 in the IE Trusted Sites Zone, then calls it to install the OnlineDialer/Ole parasite, which loads Richfind/Q) and tcpsvcss.exe (which hijacks the DNS server settings of all internet connections to 69.50.188.180 and 195.225.176.31, allowing these servers to redirect access to any site to an attacker). It can also load the CoolWebSearch/WinProtect, Freshbar and WareOut parasites.

                      THIS IS A STARTUP PROGRAM AND NOT A TASK MANAGER PROCESS ITEM !!
                      Field Value
                      Name sp2chk.exe
                      Command sp2chk.exe
                      Description Added by the Aluroot.A TROJAN!

                      Managed Shared Hosting starting at $4.99/mo
                      Managed VPS starting at $29.99/mo


                      Comment

                      • Juicy D. Links
                        So Fucking Banned
                        • Apr 2001
                        • 122992

                        #12
                        Originally posted by pornguy
                        Juicy. Try this anti virus

                        housecall.trendmicro.com

                        It is a web based virus scan, and it is kick ass.

                        cool Norton detects it....but i cant get rid of it

                        Comment

                        • facialfreak
                          Confirmed User
                          • Feb 2005
                          • 3018

                          #13
                          Here is the latest version of CWShredder ... should get rid of it for ya!

                          http://dev2.gamarays.com/CWShredder.zip

                          MAKE SURE YOU DISABLE SYSTEM RESTORE BEFOR YOU RUN THIS!!

                          My Computer ... RIGHT CLICK your C drive and select MANAGE >> Services >>System Restore [DISABLE]

                          Run CWShredder ... UNPLUG your power cord for 1-2 mins to kill the memory, then reboot ... run PANDA Active Scan ONLINE www.pandasoftware.com ... if it comes up clean, restart System Restore, and MAKE A NEW RESTORE POINT RIGHT AWAY ...

                          Managed Shared Hosting starting at $4.99/mo
                          Managed VPS starting at $29.99/mo


                          Comment

                          • pornguy
                            Too lazy to set a custom title
                            • Mar 2003
                            • 62910

                            #14
                            I gave up norton when HP told me to run my norton, and then run that one. Norton told me the pc was clean. that one found 5 trojans. And it removed them. I got rid of norton, and started using them. They have a great anti and fire wall built into one. Give them a try.
                            PornGuy skype me pornguy_epic

                            AmateurDough The Hottes Shemales online!
                            TChicks.com | Angeles Cid | Mariana Cordoba | MAILERS WELCOME!

                            Comment

                            • Dagwolf
                              President of Canada
                              • Sep 2003
                              • 23141

                              #15
                              I hate CoolWebSearch. If I got my hands on the people responsible for that piece of crap I'd probably start removing some limbs. Starting with the head.
                              Sleep well, and dream of large women.

                              Comment

                              • facialfreak
                                Confirmed User
                                • Feb 2005
                                • 3018

                                #16
                                Norton used to be the shit maybe 3 years ago but Symantec turned it into a cash cow, and banked on the name Norton's had built ....

                                Panda PLATINUM is the best protection you can have these days, as it removes viruses, spyware, malware, AND Trojans .... but is not free.

                                AVG ( www.grisoft.com ) 7.0.300 Free Edition is 5 times the software that Nortons is, and is free updates for life .... use AVG on your machine, and run Panda ActiveScan ONLINE every week or two at the longest!

                                Managed Shared Hosting starting at $4.99/mo
                                Managed VPS starting at $29.99/mo


                                Comment

                                • pornguy
                                  Too lazy to set a custom title
                                  • Mar 2003
                                  • 62910

                                  #17
                                  Howcome no legal issues ahve been raised against them. Too busy chasing porn people to stop the real problems?
                                  PornGuy skype me pornguy_epic

                                  AmateurDough The Hottes Shemales online!
                                  TChicks.com | Angeles Cid | Mariana Cordoba | MAILERS WELCOME!

                                  Comment

                                  • Juicy D. Links
                                    So Fucking Banned
                                    • Apr 2001
                                    • 122992

                                    #18
                                    Originally posted by facialfreak
                                    Norton used to be the shit maybe 3 years ago but Symantec turned it into a cash cow, and banked on the name Norton's had built ....

                                    Panda PLATINUM is the best protection you can have these days, as it removes viruses, spyware, malware, AND Trojans .... but is not free.

                                    AVG ( www.grisoft.com ) 7.0.300 Free Edition is 5 times the software that Nortons is, and is free updates for life .... use AVG on your machine, and run Panda ActiveScan ONLINE every week or two at the longest!
                                    I agree Norton is crap.

                                    Comment

                                    • facialfreak
                                      Confirmed User
                                      • Feb 2005
                                      • 3018

                                      #19
                                      You can also download a 30 day FULL PRO version of SpySubtract Pro here

                                      http://download.intermute.com/downlo...pysubtract.exe

                                      SpySubtract Pro was written by MERJIN (of merjin.org) .... a well known authority on spyware removal.

                                      It will find TONS of things that neither AdAware SE or Spybot S&D will ....
                                      And partway through your trial (3-4 days maybe) it will give you the option to buy it for $14.95 (instead of 29.95) .... Very good value for a piece of mind!

                                      Managed Shared Hosting starting at $4.99/mo
                                      Managed VPS starting at $29.99/mo


                                      Comment

                                      • Juicy D. Links
                                        So Fucking Banned
                                        • Apr 2001
                                        • 122992

                                        #20
                                        Originally posted by pornguy
                                        Howcome no legal issues ahve been raised against them. Too busy chasing porn people to stop the real problems?
                                        politics..........

                                        Comment

                                        • Juicy D. Links
                                          So Fucking Banned
                                          • Apr 2001
                                          • 122992

                                          #21
                                          Originally posted by facialfreak
                                          You can also download a 30 day FULL PRO version of SpySubtract Pro here

                                          http://download.intermute.com/downlo...pysubtract.exe

                                          SpySubtract Pro was written by MERJIN (of merjin.org) .... a well known authority on spyware removal.

                                          It will find TONS of things that neither AdAware SE or Spybot S&D will ....
                                          And partway through your trial (3-4 days maybe) it will give you the option to buy it for $14.95 (instead of 29.95) .... Very good value for a piece of mind!
                                          I have that , very Juicy

                                          Comment

                                          • Triple 6
                                            Confirmed User
                                            • Feb 2002
                                            • 5394

                                            #22
                                            i couldnt find the free version of AVG last time i went to their site - unless im blind, they dont have a free version anmore... its $30 now
                                            SIG TOO SMALL! Maximum 1200x600 button and no more than 30 text lines of ALL SIZES and COLORS. Unless your sig is for a GFY top banner sponsor, then you may use a 6240x4800 instead of a 1024x800.

                                            Comment

                                            • Triple 6
                                              Confirmed User
                                              • Feb 2002
                                              • 5394

                                              #23
                                              yea, im blind..... fucking link on the left that says 'AVG free edition'


                                              sigh
                                              SIG TOO SMALL! Maximum 1200x600 button and no more than 30 text lines of ALL SIZES and COLORS. Unless your sig is for a GFY top banner sponsor, then you may use a 6240x4800 instead of a 1024x800.

                                              Comment

                                              • facialfreak
                                                Confirmed User
                                                • Feb 2005
                                                • 3018

                                                #24
                                                hehehehe

                                                Managed Shared Hosting starting at $4.99/mo
                                                Managed VPS starting at $29.99/mo


                                                Comment

                                                • hydro
                                                  Confirmed User
                                                  • Dec 2003
                                                  • 4216

                                                  #25
                                                  Norton sucks, check out kaspersky. All us hackers use it cause its updated daily and can unpack just about anything.

                                                  Comment

                                                  Working...