Hello

Welcome, Guest. Please login or register.
Did you miss your activation email?

Author Topic: need help urgently  (Read 1349 times)

Offline Cerberus

  • I\'ve got 3 heads!
  • Legendary Member
  • ******
  • Posts: 4887
  • Karma: +10/-0
  • ffffffffff
    • Random Stuff.
  • PSN ID: Surebrec
need help urgently
« on: October 08, 2004, 03:31:49 AM »
Everytime I click a link on a web page, a pop up window opens up saying "tired of pop ups? your system has adware installed". I close it, and then my firewall tells me that msxmidi.exe is trying to access the internet. It\'s classed as high risk.

The warning message keeps coming up over and over.

When I run my antivirus software & adaware, it finds threats each time, when I delete them, as soon as I repeat the scan, they are there again.

WTF is causing this? and wtf is msxmidi.exe?

Furthermore, how the hell do I stop it?
Don't waste your words I don't need anything from you. I don't care where you've  been or what you plan to do. I am the resurrection and I am the light. I  couldn't ever bring myself to hate you as I'd like.

Offline Samwise
  • Moderator
  • Legendary Member
  • ******
  • Posts: 12129
  • Karma: +10/-0
    • http://151.200.3.8/~vze29k6v/you.html
need help urgently
« Reply #1 on: October 08, 2004, 03:42:57 AM »
http://www.pestpatrol.com/pestinfo/m/msxmidi.asp


"Hijacker: Any software that resets your browser\'s settings to point to other sites. Hijacks may reroute your info and address requests through an unseen site, capturing that info. In such hijacks, your browser may behave normally, but be slower.

Dropper: In viruses and trojans, the dropper is the part of the program that installs the hostile code onto the system."
RRRRRRRRRRRRRRRRRRAPETIME!
(thanks Chizzy!)

Offline mm
  • clyde\'s boss
  • Legendary Member
  • ******
  • Posts: 15576
  • Karma: +10/-0
    • http://
need help urgently
« Reply #2 on: October 08, 2004, 04:05:07 AM »
they come back, because they run as services

regedit is your friend

HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run
\"Leave the gun. Take the cannoli.\" - Clemenza

Offline Cerberus

  • I\'ve got 3 heads!
  • Legendary Member
  • ******
  • Posts: 4887
  • Karma: +10/-0
  • ffffffffff
    • Random Stuff.
  • PSN ID: Surebrec
need help urgently
« Reply #3 on: October 08, 2004, 04:42:17 AM »
Can someone give me detailed directions as how to fix this please?

I need step by step stuff, as I\'ve never come across anything like this before.
Don't waste your words I don't need anything from you. I don't care where you've  been or what you plan to do. I am the resurrection and I am the light. I  couldn't ever bring myself to hate you as I'd like.

Offline JBean
  • Legendary Member
  • ******
  • Posts: 2535
  • Karma: +10/-0
    • http://
need help urgently
« Reply #4 on: October 08, 2004, 05:04:47 AM »
go into your start menu, then click run

type regedit in the run box

go to the folder mm is guiding you to, then delete the suspect item

Offline Cerberus

  • I\'ve got 3 heads!
  • Legendary Member
  • ******
  • Posts: 4887
  • Karma: +10/-0
  • ffffffffff
    • Random Stuff.
  • PSN ID: Surebrec
need help urgently
« Reply #5 on: October 08, 2004, 06:55:03 AM »
I want to make sure I\'m not deleting something I shouldn\'t be by mistake here, so can someone tell me which one it is? I\'m assuming it\'s the last one, but I don\'t want to risk it without knowing for sure.

By deleting this one thing, will that solve all the problems with pop-ups & trojans and stuff??
Don't waste your words I don't need anything from you. I don't care where you've  been or what you plan to do. I am the resurrection and I am the light. I  couldn't ever bring myself to hate you as I'd like.

Offline Kurt Angle

  • Administrator
  • Legendary Member
  • ******
  • Posts: 7923
  • Karma: +10/-0
  • PSN ID: Supes1975
need help urgently
« Reply #6 on: October 08, 2004, 07:09:26 AM »
Cerberus have you tried CWShredder. I had something similar that Ad-aware and spybot couldn\'t deal with. CWShredder did.

Offline Cerberus

  • I\'ve got 3 heads!
  • Legendary Member
  • ******
  • Posts: 4887
  • Karma: +10/-0
  • ffffffffff
    • Random Stuff.
  • PSN ID: Surebrec
need help urgently
« Reply #7 on: October 08, 2004, 07:11:54 AM »
link?
Don't waste your words I don't need anything from you. I don't care where you've  been or what you plan to do. I am the resurrection and I am the light. I  couldn't ever bring myself to hate you as I'd like.

Offline Kurt Angle

  • Administrator
  • Legendary Member
  • ******
  • Posts: 7923
  • Karma: +10/-0
  • PSN ID: Supes1975
need help urgently
« Reply #8 on: October 08, 2004, 07:14:30 AM »

Offline Cerberus

  • I\'ve got 3 heads!
  • Legendary Member
  • ******
  • Posts: 4887
  • Karma: +10/-0
  • ffffffffff
    • Random Stuff.
  • PSN ID: Surebrec
need help urgently
« Reply #9 on: October 08, 2004, 07:18:56 AM »
that link doesn\'t work
Don't waste your words I don't need anything from you. I don't care where you've  been or what you plan to do. I am the resurrection and I am the light. I  couldn't ever bring myself to hate you as I'd like.

Offline Kurt Angle

  • Administrator
  • Legendary Member
  • ******
  • Posts: 7923
  • Karma: +10/-0
  • PSN ID: Supes1975
need help urgently
« Reply #10 on: October 08, 2004, 07:23:00 AM »

Offline Cerberus

  • I\'ve got 3 heads!
  • Legendary Member
  • ******
  • Posts: 4887
  • Karma: +10/-0
  • ffffffffff
    • Random Stuff.
  • PSN ID: Surebrec
need help urgently
« Reply #11 on: October 08, 2004, 07:46:55 AM »
I downloaded it, ran it. It found something, I got rid of it, and almost instantly, another pop up came up with links to porn sites.

What the **** is happening??????

This is starting to **** me off big time now, it\'s now sending me to sites where it tries to flood my HD with trojans.

This is seriously ****ed up.
« Last Edit: October 08, 2004, 08:01:04 AM by Cerberus »
Don't waste your words I don't need anything from you. I don't care where you've  been or what you plan to do. I am the resurrection and I am the light. I  couldn't ever bring myself to hate you as I'd like.

Offline Nolaws
  • Hero Member
  • *****
  • Posts: 1294
  • Karma: +10/-0
need help urgently
« Reply #12 on: October 08, 2004, 09:01:43 AM »
nm, one link in the page not working
can\'t see why not!

Offline Kurt Angle

  • Administrator
  • Legendary Member
  • ******
  • Posts: 7923
  • Karma: +10/-0
  • PSN ID: Supes1975
need help urgently
« Reply #13 on: October 08, 2004, 09:24:58 AM »
Quote
Originally posted by Cerberus
I downloaded it, ran it. It found something, I got rid of it, and almost instantly, another pop up came up with links to porn sites.

What the **** is happening??????

This is starting to **** me off big time now, it\'s now sending me to sites where it tries to flood my HD with trojans.

This is seriously ****ed up.


You must close all windows when you run it Cerberus. That includes all IE windows and connections. I also found that I had to run Ad-aware and spybot after CWShredder to clear my problem fully.

Offline mm
  • clyde\'s boss
  • Legendary Member
  • ******
  • Posts: 15576
  • Karma: +10/-0
    • http://
need help urgently
« Reply #14 on: October 08, 2004, 03:55:03 PM »
run it from safe mode also

then run sbybot s&d,  then adaware

HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects

is another place spyware hangs out
\"Leave the gun. Take the cannoli.\" - Clemenza

 

SMF spam blocked by CleanTalk