0
skymama

Help! Something icky is on my computer.

Recommended Posts

Quote

Be careful if you decide to use "HijackThis". It doesn't separate the bad from the good... it just shows you everything that runs on startup.

HijackThis kicks ass though, it's the only thing that could save my computer. If you decide to use it, go here http://computercops.biz/forum67.html. Friendly people will help you.



yea ya have to know what to look for but i use it every time someone else uses my computer (witch isn't often) and it does a great job.
if my calculations are correct SLINKY + ESCULATOR = EVERLASTING FUN
my site

Share this post


Link to post
Share on other sites
Search google for cwshredder... it restores all your internet settings back to factory and looks for any thing that would try to take over the browser settings... Make sure that you're in safe mode when you scan the hd with any of the ad aware/spybot stuff, and the same goes for nortons...
pm me if you run into any problems

Share this post


Link to post
Share on other sites
Hi Skymama,
I think you may have the same thing that I had last week on my laptop. I ran adaware, spybot, cwshredder, Pest Patrol and Hijack This, and none of them could remove the actual cause. Ad aware was able to identify three components that it labeled "Better Internet", two dll files and a registry entry. However, it was unable to remove those files. I attempted to removed them manually, and I would receive error messages telling me that the files were in use, or a sharing violation had resulted, making it impossible to remove the files. Removing the registry entry in regedit simply resulted in it appearing again on the next reboot. Even booting in safe mode resulted in the same messages when I attempted to remove the dll's. The two dll files were:
auaamon.dll
auaamon.cpy.dll

I don't remember the actual registry string, but the key was called "Guardian".

I finally was able to remove them using a boot disk called "ERD Commander". It is basically a CD that contains everything necessary to boot up the computer from the CD, so no processes on the hard drive are launched. It boots up looking just like XP, and then I went in and was finally able to delete those damn files. My laptop is fine now. Looking at the Adaware forums it appeared that nobody really had a quick fix for this one, and it is a real pain in the ass, but if you can get a boot up disk, its not too bad to remove. Hope this helps if nothing else does...B|

Shawn
_________________

Share this post


Link to post
Share on other sites
skymama, google any of the crap that pops up. i did that when i noticed my home page changed, and discovered that i has coolwwwsearch spybot. adaware wouldn't detect it, spy bot search adn destroy couldn't remove it, and so i found two special coolwwwsearch destroyers from google. you may have to do the same thing too.

yeah, do a ctrl alt del and let us know whats there, or even better, type "msconfig" in the run box... click on the startup tab, and let us know whats checked. it will tell us what is trying to run on startup.

MB 3528, RB 1182

Share this post


Link to post
Share on other sites
Quote

dz.commer showed me was www.housecall.antivirus.com click 'scan now, its free', select your location, and let it do its thing.



I was going to mention that and see that you did already ;) Also skymamma, if you have a dsl or cable connection and you'd like some help I can do a remote into yoru machine and take a look at your registry etc for you. I've done this for a number of dz.commers already and they can vouch for me and my work. PM me and let me know, I'm assuming as well that you are running XP as you talked about the user chooser screen. I can do it whenever, just need to be at my machine and I'll walk you through the steps to let me remote to it
<--- See look, pink dolphins DO exist!

Share this post


Link to post
Share on other sites
The ad popped up again today. It says it is generated by NicTechNetworks.com. I'm pretty sure it's spyware and not a virus, I just need to find a way to get rid of it now. I was going to post the Processes, but there are so many of them! I can't copy and paste them, so I guess I'll have to write them all down, right? That or let KSS take over my computer tonight. :S
She is Da Man, and you better not mess with Da Man,
because she will lay some keepdown on you faster than, well, really fast. ~Billvon

Share this post


Link to post
Share on other sites
My computer at home got so bad with the spyware that it's now in the shop:( Now I'm stuck at the library checking updates on my e-mail for the calendar project. What a pain>:(
May your trails be crooked, winding, lonesome, dangerous, leading to the most amazing view. May your mountains rise into and above the clouds. - Edward Abbey

Share this post


Link to post
Share on other sites
:D Not from me! Damn teenage boys that live in the house. I told the shop that I want a firewall of some kind. No one will be able to get on my computer at home any more except me:P
May your trails be crooked, winding, lonesome, dangerous, leading to the most amazing view. May your mountains rise into and above the clouds. - Edward Abbey

Share this post


Link to post
Share on other sites
yeah if you havent fixed it yet, he did the remote access thing on my computer and everything was fixed w/in an hour. if you're worried about security and stuff, theres a way to set it up where you can see exactly what he's doing, and what files and folders he's accessing. it rocked! good luck again!
Oh Canada, merci pour la livraison!



Share this post


Link to post
Share on other sites
Ok, I hope this is what you all meant, that I did it right and that someone can make heads or tails of it! I'm still getting the thing that says it is "loading" every few minutes and I just got a pop-up right in the middle of typing this even though I have Google Pop-up blocker. [:/]
She is Da Man, and you better not mess with Da Man,
because she will lay some keepdown on you faster than, well, really fast. ~Billvon

Share this post


Link to post
Share on other sites
Quote

Thats really starnge... its all the ones who are notorious for getting porn online that are having problems: Andrea, Jaye, Mar.... Coincidence?B|



Yeah...DAMN those 'Online Chippendales' pop ups!!! >:(>:(>:(:D
~Jaye
Do not believe that possibly you can escape the reward of your action.

Share this post


Link to post
Share on other sites
i went through that list and i didnt see anything that looked like spyware. you have XP right? if not, some of those system processes could be worms. i still say run that antivirus program i linked. it found things norton never found. run your spybot programs and stuff in safe mode. ive found that they find more that way.....

ive found this to be useful http://www.answersthatwork.com/Tasklist_pages/tasklist.htm you can search every running process to see what it does, and whether you need it or not. it also tells you how to get rid of the bad ones. good luck again!!!
Oh Canada, merci pour la livraison!



Share this post


Link to post
Share on other sites
I think I'm going to have to have someone else take a look at it. Some of the things suggested are beyond what I know how to do (like running things in "safe" mode). Sigh...thanks for all the suggestions though, you all rock. B|
She is Da Man, and you better not mess with Da Man,
because she will lay some keepdown on you faster than, well, really fast. ~Billvon

Share this post


Link to post
Share on other sites
Ari (NeedToJump) came over last night and worked on my computer for me. It took awhile and the icky stuff taunted him as he was working with ad-aware to get rid of it, but he prevaled.

Ari is my hero. I worship him. B|
She is Da Man, and you better not mess with Da Man,
because she will lay some keepdown on you faster than, well, really fast. ~Billvon

Share this post


Link to post
Share on other sites
Quote

Are you naked? Cause....naked worshipping is MUCH more highly appreciated.



Oh, you mean everyone isn't naked when they post on dz.com? Darn it, I never get anything right. :P
She is Da Man, and you better not mess with Da Man,
because she will lay some keepdown on you faster than, well, really fast. ~Billvon

Share this post


Link to post
Share on other sites
Quote

Oh, you mean everyone isn't naked when they post on dz.com?






I usually am.........I like to come home from work....take off all my clothes....rub a generous slathering of Vaseline all over my body......put the cover on the chair and keyboard.......then spend a few hours posting naked. :D

Share this post


Link to post
Share on other sites
Quote

I usually am.........I like to come home from work....take off all my clothes....rub a generous slathering of Vaseline all over my body......put the cover on the chair and keyboard.......then spend a few hours posting naked. :D


Now there's a visual!:o
"It's not just a daydream if you choose to make it your life..."


Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

0