rundll32.exe browser hijacker... impossible to remove?
 

I've tried everything, or so I think...


Ad-aware, safe mode, Spybot S&D, deleting the file... nothing works. The file just re-appears and I get pop ups on every fucking IE page I goto.


You know, I get Adult Friend Finder pop ups. Can I find out who this guy is from his AFF referral code? I will seriously fly out to his house, with camera, kick down his front door, and bend every one of his fucking fingers back until they touch his wrist.


Please, someone help! Either get this file off my computer, or help me get the cock sucker who's profiting off my fucking computer being fucked.

you need to either completely get rid of that annoying gif in your sig, or reduce it to a much smaller size.

http://www.techsupportforum.com/show...stpost&t=12185

And I agree with galleryseek

Download Hi-jack This.

please get rid of it !

now you cannot pretend you are cool , because you obviously are not , so put a nice sig there an you can pretend to be cool :thumbsup

Go to this address.


housecall.trendmicro.com

run the online virus scan. It will get most of that out. It will also tell you the location of the files. Then go in and try to remove them. If you can not delete them, try to rename them. IF the system keeps saying that it can not change it because it is in use, ctrl alt del everything that you can and try again.

If not try doing a restore point about a week before that came up.

Also if you are running the newest version of spybot turn on the teatimer. It stops your registry from being changed without your approval.

Have you run your antivirus software?

huggles how old are u playa

Yeah, Norton 2004 can't find anything and it's fully updated. Spybot S&D doesn't find shit either. It's rundll32.exe for sure. I can delete it, but it just comes back right away.


I'll change the sig as fucking soon as I fix this problem.

stop using IE, use opera or firefox, great combo of browsers

For GFY and other forums I use opera only!

its probably in the registry.
you will have to delete it manually.

start
run
regedit

then look for microsft or explorer files or "user" files,
it may be in their.

be careful what you delete.

hit google with the search term

rundll32.exe

bunch of info their about rundll32.exe

rundll32.exe is a windows program.

i had this trojan/spyware tonight, got it fucking twice.

had to do the system restore on my month old HP twice tonight...pain in the fucking ass...

another thing, it loads up 3-5 programs, if you look in your processes, and if you close them they keep reloading...and it takes all of your cpu..

got mine from a few tgp sites tonight. :mad: :feels-hot

The reason you can't get rid of virii like this is that they "hide" even when you delete an infected file. They hide in .tmp files many times..MOST of the time in windows\temp..delete all the the crap in there as well as any other .tmp files you find in your root directory.

I post my linklist whenever I see threads like this.


CLEAN:
? HijackThis (HJT) / Tutorial
? Ad Aware / Tutorial
? SpySweeper
? Spybot S&D / Tutorial
? CWShredder
? The Cleaner

PREVENT:
? SpywareBlaster
? SpywareGuard

ANTIVIRUS & FIREWALL:
? Kaspersky AV
? Sygate Firewall Pro
? Kerio Firewall
? Zone Alarm

ONLINE VIRUS SCANNERS:
? TrendMicro
? BitDefender
? Panda
? RAV

RECOMMEND:
? DoxDesk Quick Parasite Check
? Windows Update


Everyday and I mean "EVERYDAY", I run Adaware, HJT, SpySweeper, SpySweeper and
1 of the free online virus scanners. Good Luck!

Nice list. I got some of this shit autoinstalled last night from a MGP, it's been nothing but fucking problems since. I would love to torture these spyware fuckers with a razorblade, salt, lemon juice, and a cheese grater. Fucking bastards. :BangBang: