Spyware - GoFuckYourself.com

soukee · 03-02-2004, 02:04 AM

Hi... I have problem with my IExplorer. As a start-up page is seted automatically C:\WINDOWS\secure.html. This site promotes http://www.privacyoutpost.com. (full ref code http://www.privacyoutpost.com/enter.html?wm=dkvaget)
I cant remove it. Can somebody help me?
THX Soukee

zentz · 03-02-2004, 02:07 AM

http://www.safer-networking.org/

klik · 03-02-2004, 02:09 AM

google search for adaware.. i think its the best for getting rid of adware/spyware

=^..^= · 03-02-2004, 02:09 AM

^ yep Spybot S&D is the best

born4porn · 03-02-2004, 02:09 AM

Quote:

Originally posted by zentz
http://www.safer-networking.org/

that's da shit!

Illicit · 03-02-2004, 02:11 AM

Adaware
Spybot Search & Destroy
HiJack This !

Use all three and nothing can touch you

bufferover · 03-02-2004, 02:14 AM

Go to Download.com and get No-Ad-Ware

hoe_vender · 03-02-2004, 02:14 AM

soukee · 03-02-2004, 02:17 AM

Quote:

Originally posted by =^..^=
^ yep Spybot S&D is the best

SpyBot S&D, Ad-Aware, CWshredder, Stinger cant remove it. I dont know what to do:-(

rounders · 03-02-2004, 02:20 AM

www.lavasoftusa.com

for adaware

zentz · 03-02-2004, 02:25 AM

format c:

soukee · 03-02-2004, 02:50 AM

Quote:

Originally posted by zentz
format c:

Last chance:-)

VeriSexy · 03-02-2004, 02:51 AM

adaware

Bezruk · 03-02-2004, 04:01 AM

Quote:

Originally posted by =^..^=
^ yep Spybot S&D is the best

body · 03-02-2004, 05:02 AM

Quote:

Originally posted by =^..^=
^ yep Spybot S&D is the best

Had also fucking probs, cpu usage 100%, homepage changed automatically, if I type in something with cash or pay -> popups appears, this proggie fixed it all!!!!!!!!!

Quatermain · 03-02-2004, 05:19 AM

That is a Trojan you have.

Troj/Regldr-A copies itself to the windows folder as the file Reg32.exe and sets the following registry entry so that it will be executed on system restart:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run \Reg32
= C:\Windows\Reg32.exe

Troj/Regldr-A will set the following registry entries:

HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
HKCU\Software\Microsoft\Internet Explorer\Main\Local Page
HKCU\Software\Microsoft\Internet Explorer\Main\Start Page
HKLM\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
HKLM\Software\Microdoft\Internet Explorer\Main\Local Page
HKLM\Software\Microsoft\Internet explorer\Main\Start Page

to point to the page secure.html located in the default Windows folder. This HTML page claims that the system has been compromised by spyware and prompts one to visit http:||www,privacyoutpost.com/enter.html?wm=dkvaget.

Scan your system with updated anti virus software.

Cash · 03-02-2004, 05:19 AM

Adware remover will help you.

Goblin · 03-02-2004, 05:28 AM

http://www.spywareinfo.com/~merijn/downloads.html
kill em all

03-02-2004, 02:04 AM	#1
soukee Confirmed User Join Date: Feb 2004 Location: EU Posts: 1,108	Spyware Hi... I have problem with my IExplorer. As a start-up page is seted automatically C:\WINDOWS\secure.html. This site promotes http://www.privacyoutpost.com. (full ref code http://www.privacyoutpost.com/enter.html?wm=dkvaget) I cant remove it. Can somebody help me? THX Soukee

03-02-2004, 02:07 AM	#2
zentz Confirmed User Industry Role: Join Date: Nov 2003 Posts: 8,053	http://www.safer-networking.org/ __________________ Programs that owe me money ---- Epassporte.com ~ $2700 \| Protraffic.com ~ $2600 \| XonDemand.com ~ $3000 Email: [email protected]

03-02-2004, 02:09 AM	#4
=^..^= Confirmed User Join Date: Jan 2002 Location: ICQ 380-366 Posts: 6,935	^ yep Spybot S&D is the best __________________ #RememberYourRoots #AaronMForGFYHOF

03-02-2004, 02:11 AM	#6
Illicit wtf ? Join Date: Dec 2003 Location: GFY Posts: 11,895	Adaware Spybot Search & Destroy HiJack This ! Use all three and nothing can touch you __________________ Insert Sig Here

03-02-2004, 02:14 AM	#8
hoe_vender Confirmed User Join Date: Dec 2003 Location: Lincoln, NE Posts: 2,018	__________________ ICQ #286508534

03-02-2004, 02:09 AM	#3
klik Confirmed User Industry Role: Join Date: Nov 2001 Location: san diego Posts: 5,092	google search for adaware.. i think its the best for getting rid of adware/spyware

03-02-2004, 02:14 AM	#7
bufferover Too lazy to set a custom title Industry Role: Join Date: Jan 2004 Posts: 25,203	Go to Download.com and get No-Ad-Ware

03-02-2004, 02:20 AM	#10
rounders Confirmed User Join Date: Sep 2003 Location: p0rn0stars & h0es Posts: 2,931	www.lavasoftusa.com for adaware __________________ ICQ#: 153923840

03-02-2004, 02:25 AM	#11
zentz Confirmed User Industry Role: Join Date: Nov 2003 Posts: 8,053	format c: __________________ Programs that owe me money ---- Epassporte.com ~ $2700 \| Protraffic.com ~ $2600 \| XonDemand.com ~ $3000 Email: [email protected]

03-02-2004, 02:51 AM	#13
VeriSexy Join The Royal Family Join Date: Apr 2002 Posts: 25,463	adaware __________________ Looking for a KICK ASS TEEN SPONSOR? Check out ROYAL CASH - THE KING OF TEEN! Incredible webmaster tools FHGs, Morphing Blog and RSS Feeds, Embedded FLV & WMV Videos. With TOP RATIO Sites like TeenStarsOnly.com - Earn $$ with our New Site & Bonus Payouts!! ATMovs.com \| iTeenVideo.com \| TeenSexMovs.com \| TeenSexMania.com

03-02-2004, 05:19 AM	#16
Quatermain Confirmed User Join Date: Feb 2004 Posts: 328	That is a Trojan you have. Troj/Regldr-A copies itself to the windows folder as the file Reg32.exe and sets the following registry entry so that it will be executed on system restart: HKLM\Software\Microsoft\Windows\CurrentVersion\Run \Reg32 = C:\Windows\Reg32.exe Troj/Regldr-A will set the following registry entries: HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL HKCU\Software\Microsoft\Internet Explorer\Main\Local Page HKCU\Software\Microsoft\Internet Explorer\Main\Start Page HKLM\Software\Microsoft\Internet Explorer\Main\Default_Page_URL HKLM\Software\Microdoft\Internet Explorer\Main\Local Page HKLM\Software\Microsoft\Internet explorer\Main\Start Page to point to the page secure.html located in the default Windows folder. This HTML page claims that the system has been compromised by spyware and prompts one to visit http:\|\|www,privacyoutpost.com/enter.html?wm=dkvaget. Scan your system with updated anti virus software. Last edited by Quatermain; 03-02-2004 at 05:24 AM..

03-02-2004, 05:19 AM	#17
Cash Click on my TCG signature Join Date: Feb 2002 Posts: 20,825	Adware remover will help you. __________________ $9.95/month for 15000 GB bandwidth monthly, unlimited (sub)domains and MySQL5, PHP4/5, 500 GB disk storage! ; use any of these invitation codes: 216263692101; 408636009193; 846090586647; my ICQ 30160426!

03-02-2004, 05:28 AM	#18
Goblin Confirmed User Join Date: Dec 2001 Location: Europe Posts: 401	http://www.spywareinfo.com/~merijn/downloads.html kill em all