.com.unity Forums
  The Official e-Store of Shrapnel Games

This Month's Specials

Air Assault Task Force- Save $8.00
Bronze- Save $10.00

   







Go Back   .com.unity Forums > Shrapnel Community > Space Empires: IV & V

Reply
 
Thread Tools Display Modes
  #1  
Old July 5th, 2004, 08:25 AM
Karibu's Avatar

Karibu Karibu is offline
Sergeant
 
Join Date: Feb 2003
Location: Finland
Posts: 392
Thanks: 0
Thanked 0 Times in 0 Posts
Karibu is on a distinguished road
Default Re: OT: about:blank homepage hijacker..

Okay, this seems to be tough case. I would have bet it was something in your Run -folder in Registry. Though, once there was one exe, which would install the virus every time I booted my computer. The situation was so, that merely deleting the virus itself diidn't solve the problem, but finding out which was the virus' installation executalbe, deleting it and removing its key from Run -folder in registry.

However, you said there is nothing in your Run -folder, so this is to no help. However, I put here a link to one thread in computer discussion group (its in finnish), but you can see the links in this particular thread, and can follow them. Take a look, there propably is some programs you haven't tried yet. How to get rid of banners, pop ups, etc.
__________________
If you give a man a fish, he will eat a day;
But if you teach a man to fish, he will buy an ugly hat;
And if you talk about a fish to a starving man, then you're a consultant
Reply With Quote
  #2  
Old July 5th, 2004, 12:59 PM
David E. Gervais's Avatar

David E. Gervais David E. Gervais is offline
General
 
Join Date: May 2002
Location: Canada
Posts: 3,227
Thanks: 7
Thanked 44 Times in 28 Posts
David E. Gervais is on a distinguished road
Default Re: OT: about:blank homepage hijacker..

I just checked my e-mail through MS Messenger and it launches IE instead of Mozilla. Guess what? I get a pop-up every time I go to a new page. Know what it is? An ad/warning that I have 'Spyware' on my computer. "Click OK to scan my system for free". I may well be a bit paranoid, but does this not seem to support my theory that it is the 'Spyware Removal" companies that have infected my computer? and in order to remove their spyware I have to 'Pay!' for their software? It's kind of like they shot themselves in the foot, how esle would they know if I had spyware on my system unless they themselves 'Spied' on my system to find out.

If I had the resources I'd sue the pants off the dasterdly spyware companies that are spreading this nasty virus in order to promote sales of their product.

Well, in a few days, I'll do the old Format and re-install of windows and then I'll know my system is clean. (then using Mozilla might help fend off the nasty buggers for a bit longer than IE) BTW, IMHO thise spyware/hijackers are worse than viruses.

Oh well, such is life, it seems that we do indeed live in 'Interesting times'

Cheers!

[ July 05, 2004, 12:00: Message edited by: David E. Gervais ]
Reply With Quote
  #3  
Old July 6th, 2004, 01:13 AM
David E. Gervais's Avatar

David E. Gervais David E. Gervais is offline
General
 
Join Date: May 2002
Location: Canada
Posts: 3,227
Thanks: 7
Thanked 44 Times in 28 Posts
David E. Gervais is on a distinguished road
Default Re: OT: about:blank homepage hijacker..

Quote:
Originally posted by Karibu:
Okay, this seems to be tough case. I would have bet it was something in your Run -folder in Registry. Though, once there was one exe, which would install the virus every time I booted my computer. The situation was so, that merely deleting the virus itself diidn't solve the problem, but finding out which was the virus' installation executalbe, deleting it and removing its key from Run -folder in registry.

However, you said there is nothing in your Run -folder, so this is to no help. However, I put here a link to one thread in computer discussion group (its in finnish), but you can see the links in this particular thread, and can follow them. Take a look, there propably is some programs you haven't tried yet. How to get rid of banners, pop ups, etc.
I have already tried most of the removal programs listed on that page. I even did a search on google and found 'replies' on other forums that detail the process of how to remove the offending hijacker. the system does not seem to want to be purged of the hijacker. I have a 'Boot-CD' anti virus software (Kaperski) that has a virus database that was updated on june 14, 2004. When I do a deep scan of my system (it takes about 1 hour) the anti-virus software reports no viruses found.

Just because I was paranoid, I installed Avast and scanned with it, no virus found with avast. So, I'm pretty sure that my system is virus free, but this hijacker thing obviously can not be detected and removed by the anti-virus software. and the spyware removal programs do find it but are unable to remove it. So why should I believe that if I 'Purchase' (aka register) the spyware removal program it will all of a sudden gain the capability to remove the hijacker. Like I said, I think it's an evil plot by the spyware removal companies to promote sales. And it's not a 'Fear-tactic' campaign, they are simply using an "IN YOUR FACE" bug you to death tactic.

I really hope bill gate's computer get's infected by this piece of **** and he sues them to death.

[/babble mode off]

Cheers!
Reply With Quote
  #4  
Old July 5th, 2004, 03:14 PM
psimancer's Avatar

psimancer psimancer is offline
Corporal
 
Join Date: Jun 2004
Location: texas
Posts: 159
Thanks: 0
Thanked 0 Times in 0 Posts
psimancer is on a distinguished road
Default Re: OT: about:blank homepage hijacker..

ok couple of things
to mention thgat you have probably already tried

one absolutly free ad remover program removes ads spyware etc and havs never done a pop[up on me

go to Ad-aware select the standard Version its free as a bird and truthfully i forgot it was on my machine for the Last 6 months since it doesnt remind me course as a free Version its totally manual not an auto runner not a continous shield or any of that

two check the left hand menu items for plugins and in plugins go to the vx2 page something there about a win nt/2k/xp thats EXtTREMLY diffucult to kill and they have a fix for it for free
__________________
Laaanndd!!!! ---lex luthor
se4 code
L+++ GDY $!+ Fr! C+++ SDS T+hot SF* TCP A&++ M++lrn Mp* RO!V Pw++ Fq Nd** RP+ G++ Au Mm+
Reply With Quote
  #5  
Old July 5th, 2004, 03:49 PM
Gandalf Parker's Avatar

Gandalf Parker Gandalf Parker is offline
Shrapnel Fanatic
 
Join Date: Oct 2003
Location: Vacaville, CA, USA
Posts: 13,736
Thanks: 341
Thanked 479 Times in 326 Posts
Gandalf Parker is on a distinguished road
Default Re: OT: about:blank homepage hijacker..

certain hijackers are really hard to remove. They not only edit the registry but insert variations of commonly used DLL's that will put it back if its removed.

Usually even with ad-aware or spybot you end up having to download a special program written to remove each variation of the program.

Such as... the "blank homepage" and inserting search results to sites like 2020..
http://forums.spywareinfo.com/index.php?showtopic=6000
__________________
-- DISCLAIMER:
This game is NOT suitable for students, interns, apprentices, or anyone else who is expected to pass tests on a regular basis. Do not think about strategies while operating heavy machinery. Before beginning this game make arrangements for someone to check on you daily. If you find that your game has continued for more than 36 hours straight then you should consult a physician immediately (Do NOT show him the game!)
Reply With Quote
  #6  
Old July 5th, 2004, 05:40 PM
David E. Gervais's Avatar

David E. Gervais David E. Gervais is offline
General
 
Join Date: May 2002
Location: Canada
Posts: 3,227
Thanks: 7
Thanked 44 Times in 28 Posts
David E. Gervais is on a distinguished road
Default Re: OT: about:blank homepage hijacker..

I got rid of it by removing any and all startup programs/dll's. Now in msconfig, the 'Startup' tab is completely empty.

I have removed all instances of about:blank in the registry and have rebooted several times, the problem seems to be solved. (until me or the system needs and runs one of the old programs/dll's that used to be in the startup.

FYI: the basic procedure for removing this kind of thing is as follows..

install and run Spybot Search & Destroy,
install and run AdAware (it catches some stuff spybot misses.)
scan your registry and remove any instances of about:blank. (or replace them with your original homepage.)
run HijackThis it catches even more leftover stuff and it can produce a log file that tells you what apps are running and therefore might be corrupt.

following this procedure did not fix the problem. and so I took the more drastic measure of not having any of the startup apps in the registry. (fyi: simply toggling them off in the msconfig does not prevent them from being re-activated by the worm. but if the worm finds no entry to 'modify' it aparently cannot install.

Time will tell if any of the 'startup' apps were critical to my system, but I always have them toggled off in the msconfig anyway, so I don't forsee any problems.

Mozilla is proving to be a very nice browser, I doubt that I will ever return to IE.

nuf said, Cheers!

[ July 05, 2004, 16:40: Message edited by: David E. Gervais ]
Reply With Quote
  #7  
Old July 5th, 2004, 05:54 PM
Captain Kwok's Avatar

Captain Kwok Captain Kwok is offline
National Security Advisor
 
Join Date: Oct 2001
Location: Toronto, Canada
Posts: 5,624
Thanks: 1
Thanked 14 Times in 12 Posts
Captain Kwok is on a distinguished road
Default Re: OT: about:blank homepage hijacker..

Like I suggested before, try system restore. I had a similar problem with a hard to kill hijack program, but got rid of it by restoring the system before I got infected. It was completely gone.
__________________
Space Empires Depot | SE:V Balance Mod
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

Forum Jump


All times are GMT -4. The time now is 08:30 PM.


Powered by vBulletin® Version 3.8.1
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
Copyright ©1999 - 2025, Shrapnel Games, Inc. - All Rights Reserved.