dumb moves result in viruses :(

BigMacZach · 26-December-05, 12:41 AM

Lol yes i was surfing the net lookin for a cd key generator for a game for my friend. I was using the site [edited out] i think it is and searched another site into it. ANYWAYS i ended up with a virus or a trojan which reaked some havock on my computer until i rebooted in safe mode and scanned my comp with nortan and with adaware. The virus is gone except now theres a pesky little red x in my system trey that bothers me with popup bubbles saying " your computer is infected!" Also when i login a RUNDLL window pops up saying "Error loading 002k0uzo.dll This specified module could not be found." And another thing is my wallpaper. It doesnt change and it says "spyware infection" and its blue. I know my real wall paper is still underneath though as if its just a window on top. Ive done some searching on this virus but havent yet got a way to totally rid these symptoms. This virus im pretty sure is related to a spyware scanner of some sort like worldantispy or i think the name of it was spysheriff. Any advice on removing these things are welcomed and appreciated ty.

Edit by GlitterKill // Removed url for a site with illegal content. Please do not provide url/links like this again. Thanks. Consider this a warning.

Pharaoh · 26-December-05, 12:49 AM

Quote:

Originally Posted by BigMacZach


	Lol yes i was surfing the net lookin for a cd key generator f

A format and re-install will fix the OS and eradicate any virus or spyware you may have.

musclecars&computers · 26-December-05, 01:09 AM

Yep thats the best u can do is a format and install and don't use those types of sites cause u will get viruses or spyware sooner than later.

BigMacZach · 26-December-05, 12:10 PM

yea reinstalling windows would work but i want to keep my stuff

and im sure theres some ways to get rid of these things. I'll keep surfing around and see if i cant find anything.

Nerdz · 26-December-05, 12:35 PM

back it up if it hasnt effected your files, then delete the file that caused the operation in the first place.

GrandpaNoob72 · 26-December-05, 12:42 PM

Quote:

Originally Posted by BigMacZach


	I'll keep surfing around and see if i cant find anything.

Seems to me that is what started all this mess for you...

hartigan · 26-December-05, 01:07 PM

Quote:

Originally Posted by GrandpaNoob72


	Seems to me that is what started all this mess for you...

I agree.

ranger1033 · 26-December-05, 01:56 PM

I have to agree with GrandpaNoob72, surfing the web could actually cause you more problems, i would definitely reformat and reinstall windows to be on the safe side. Most of those viruses could actually embed them self into all your files and the only way to totally get rid of them would be to reinstall and format your harddrive.

BigMacZach · 26-December-05, 04:31 PM

Quote:

Originally Posted by GrandpaNoob72


	Seems to me that is what started all this mess for you...

well when you look for things illegal like a cd key generator to play online thats what happenes. general surfing does just magicly give you spy ware. Surfing a site like astalavista is asking for spy ware almost.

RBIEZE · 26-December-05, 04:56 PM

If your going to continue these kinds of activities ,It may be in your best interest to use an old POS Pc.
Ive heard people call them"download wh*res",or "File mules"
Basically its a disposable pc,something old and cheap with a smaller harddrive(Reformats quiker), preferably removable .
That way when your infected,which is INEVITABLE when STUPIDLY dealing in Pron or W*REs
Its easy to fix.
You could avoid all of this by staying away from that crap,you dont even need to download anything to get infected ,just loading the page can do it.

Not very good odds I'd say...

GrandpaNoob72 · 26-December-05, 05:30 PM

Hmmm... I guess you could always make your "friend" pay to have the HDD reformatted... No, wait, it was his cheap ass that either couldn't/wouldn't pay for a legit copy of the game in the first place, so he could play online without having to resort to warez or any other form of piracy...

Bottom line, you pays yer money (or not, it appears), and you takes yer choice...

Seikatsu · 26-December-05, 07:06 PM

Ah, I hate when things like that happen. But "warez" sites are a play ground for scumbugs who have too much time on their hands and like to destroy another's property.
Use the CD-R version (Do not use the floppy as it may be corrupted by the malware-- even if the file-protect lever on the disk is switched) of DBAN to wipe your drive.
(It's slower for a full sterilization, but it will annilihate even the most obnoxious stick-tight malware.)

Guide for installing questionable material:
1) Connect only the main drive and a optical drive
(preferably a plain-jane CD-ROM drive that can read burned disks)
and be sure it is a <30Gb capacity drive.
Then make a full back-up

2)Download file to dispoable drive (that <30Gb device) and then
immediately hard-shut down your internet connection.
(Disconnect the cable[s] and then have your firewall lock the system down)

3) Run Anti-virus and anti-Malware programs (Full scan)

4) install download

5) Re-run anti-virus and anti-malwarwe protocols and rootkit revealer

6a) If clean-- enjoy
6b) If its infected-- Fire Up DBAN (I go for a ten-pass wipe myself)

HigHTecHReDNecK · 26-December-05, 07:31 PM

Quote:

Originally Posted by Seikatsu


	Ah, I hate when things like that happen. But "warez" sites are a play ground for scumbugs who have too much time on their hands and like to destroy another's property. Use the CD-R version (Do not use the floppy as it may be corrupted by the malware-- even if the file-protect lever on the disk is switched) of DBAN to wipe your drive. (It's slower for a full sterilization, but it will annilihate even the most obnoxious stick-tight malware.) Guide for installing questionable material: 1) Connect only the main drive and a optical drive (preferably a plain-jane CD-ROM drive that can read burned disks) and be sure it is a <30Gb capacity drive. Then make a full back-up 2)Download file to dispoable drive (that <30Gb device) and then immediately hard-shut down your internet connection. (Disconnect the cable[s] and then have your firewall lock the system down) 3) Run Anti-virus and anti-Malware programs (Full scan) 4) install download 5) Re-run anti-virus and anti-malwarwe protocols and rootkit revealer 6a) If clean-- enjoy 6b) If its infected-- Fire Up DBAN (I go for a ten-pass wipe myself)

I have a better idea, GO BUY THE SOFTWARE!! or tell your friend to. Buying the software w/cd key garentee's you a nice clean install, and keeps you from this kind of headache. Not to be mean , but if you dont have the skills to avoid getting your pc infected , your better off staying away from these "SCUMBAG" type of sites. So basiclly , like with drugs, JUST SAY NO ** to warez/hacks/etc etc**

Slaymate · 26-December-05, 07:59 PM

I have to agree with HigHTecHReDNecK. Helping a friend is 1 thing. Trying to save a few $$$ by cheating is another. What comes around, goes around. Next time just tell your friend it's not worth the trouble.

beachbum86 · 26-December-05, 08:00 PM

Quote:

Originally Posted by HigHTecHReDNecK


	I have a better idea, GO BUY THE SOFTWARE!! or tell your friend to. Buying the software w/cd key garentee's you a nice clean install, and keeps you from this kind of headache. Not to be mean , but if you dont have the skills to avoid getting your pc infected , your better off staying away from these "SCUMBAG" type of sites. So basiclly , like with drugs, JUST SAY NO to warez/hacks/etc etc

couldnt of said it better myself.

to BigMacZach-
that must be some friend of yours to agree to have you perform illigal activities for him

Splitter · 26-December-05, 08:46 PM

I think someone mentioned backing up your stuff and reformatting.....

.....well.. if you use system restore, you'll keep getting whatever is killing your PC... so that's out.

:::::::echoeing other sentiments::::::: If you don't go to these sites, you most likely won't get your pc trashed.

Most adults learn from their mistakes, hopefully you are adult enough to get "legal" software and keys in the future.

BigMacZach · 29-December-05, 12:36 PM

My friend wasnt even stealing the game he actually just lost his cd key. But ANYWAYS back to my original question would it help if i posted a "hijackThis" log? Ive surfed around and almost figured out how to remove it but the files i read to remove werent on my computed i dunno. Heres a link (http://www.experts-exchange.com/Secu..._21571290.html) to the site i was checkin out. Exact same problem as me except i didnt have the same "offending files" towards the bottom of the page.

26-December-05, 12:41 AM	#1 (permalink)
BigMacZach Apex Techie I Join Date: Jul 2005 Location: CC,T nukkas Posts: 59	dumb moves result in viruses :( Lol yes i was surfing the net lookin for a cd key generator for a game for my friend. I was using the site [edited out] i think it is and searched another site into it. ANYWAYS i ended up with a virus or a trojan which reaked some havock on my computer until i rebooted in safe mode and scanned my comp with nortan and with adaware. The virus is gone except now theres a pesky little red x in my system trey that bothers me with popup bubbles saying " your computer is infected!" Also when i login a RUNDLL window pops up saying "Error loading 002k0uzo.dll This specified module could not be found." And another thing is my wallpaper. It doesnt change and it says "spyware infection" and its blue. I know my real wall paper is still underneath though as if its just a window on top. Ive done some searching on this virus but havent yet got a way to totally rid these symptoms. This virus im pretty sure is related to a spyware scanner of some sort like worldantispy or i think the name of it was spysheriff. Any advice on removing these things are welcomed and appreciated ty. *Edit by GlitterKill // Removed url for a site with illegal content. Please do not provide url/links like this again. Thanks. Consider this a warning.* Last edited by GlitterKill; 26-December-05 at 12:37 PM.

26-December-05, 01:09 AM	#3 (permalink)
musclecars&computers Apex Tech Demi-God Join Date: Aug 2005 Location: Pimping in Lancaster, S.C. Posts: 1,962	Yep thats the best u can do is a format and install and don't use those types of sites cause u will get viruses or spyware sooner than later. __________________

26-December-05, 12:35 PM	#5 (permalink)
Nerdz Sir Knight of Spamalot Join Date: Nov 2003 Location: Water-hoe-Bury, CT Posts: 6,587	back it up if it hasnt effected your files, then delete the file that caused the operation in the first place. __________________ I still fold "No amount of Experimentation can Prove Me right, It only takes one to prove me Wrong"-Albert Einstein

26-December-05, 01:56 PM	#8 (permalink)
ranger1033 Imperial News Bounty Hunter Join Date: Feb 2005 Location: In a Galaxy Far Far Away Rouses Point, NY Posts: 8,013	I have to agree with GrandpaNoob72, surfing the web could actually cause you more problems, i would definitely reformat and reinstall windows to be on the safe side. Most of those viruses could actually embed them self into all your files and the only way to totally get rid of them would be to reinstall and format your harddrive. __________________

26-December-05, 04:56 PM	#10 (permalink)
RBIEZE Apex Tech Demi-God Join Date: Mar 2005 Location: Northern Illinois,In the basement ,programing my CnC mill Posts: 1,771	If your going to continue these kinds of activities ,It may be in your best interest to use an old POS Pc. Ive heard people call them"download whres",or "File mules" Basically its a disposable pc,something old and cheap with a smaller harddrive(Reformats quiker), preferably removable . That way when your infected,which is INEVITABLE when STUPIDLY dealing in Pron or WREs Its easy to fix. You could avoid all of this by staying away from that crap,you dont even need to download anything to get infected ,just loading the page can do it. Not very good odds I'd say... __________________ http://folding.extremeoverclocking.c...e.php?u=132601 In peace, nothing so becomes a man as modesty and humility, but when the blast of war blows in our ears, then imitate the action of the tiger, summon up the blood, disguise fair nature with rage and lend the eye a terrible aspect.

26-December-05, 12:10 PM	#4 (permalink)
BigMacZach Apex Techie I Join Date: Jul 2005 Location: CC,T nukkas Posts: 59	yea reinstalling windows would work but i want to keep my stuff and im sure theres some ways to get rid of these things. I'll keep surfing around and see if i cant find anything.

26-December-05, 05:30 PM	#11 (permalink)
GrandpaNoob72 Eleven-Bravo Sitrep Writer Join Date: Aug 2004 Location: Fort Riley, KS (Back home where I BELONG!) Posts: 3,290	Hmmm... I guess you could always make your "friend" pay to have the HDD reformatted... No, wait, it was his cheap ass that either couldn't/wouldn't pay for a legit copy of the game in the first place, so he could play online without having to resort to warez or any other form of piracy... Bottom line, you pays yer money (or not, it appears), and you takes yer choice... __________________ A veteran - whether active duty, retired, national guard or reserve - is someone who, at one point in their life, wrote a blank check made payable to "The United States of America", for an amount of "up to and including my life". That is Honor, and there are way too many people in this country, who no longer understand that...

26-December-05, 07:06 PM	#12 (permalink)
Seikatsu Apex Master Tech Apprentice Join Date: Aug 2005 Posts: 220	Ah, I hate when things like that happen. But "warez" sites are a play ground for scumbugs who have too much time on their hands and like to destroy another's property. Use the CD-R version (Do not use the floppy as it may be corrupted by the malware-- even if the file-protect lever on the disk is switched) of DBAN to wipe your drive. (It's slower for a full sterilization, but it will annilihate even the most obnoxious stick-tight malware.) Guide for installing questionable material: 1) Connect only the main drive and a optical drive (preferably a plain-jane CD-ROM drive that can read burned disks) and be sure it is a <30Gb capacity drive. Then make a full back-up 2)Download file to dispoable drive (that <30Gb device) and then immediately hard-shut down your internet connection. (Disconnect the cable[s] and then have your firewall lock the system down) 3) Run Anti-virus and anti-Malware programs (Full scan) 4) install download 5) Re-run anti-virus and anti-malwarwe protocols and rootkit revealer 6a) If clean-- enjoy 6b) If its infected-- Fire Up DBAN (I go for a ten-pass wipe myself) __________________ Reality maybe ruled by perception... but a genius lets reality define perception.

26-December-05, 07:59 PM	#14 (permalink)
Slaymate PCApex Reviewer From Hell Join Date: Jun 2004 Location: Sunnydale Posts: 2,789	I have to agree with HigHTecHReDNecK. Helping a friend is 1 thing. Trying to save a few $$$ by cheating is another. What comes around, goes around. Next time just tell your friend it's not worth the trouble.

26-December-05, 08:46 PM	#16 (permalink)
Splitter Foe's Hoe Join Date: May 2005 Location: EastCoast, USA Posts: 561	I think someone mentioned backing up your stuff and reformatting..... .....well.. if you use system restore, you'll keep getting whatever is killing your PC... so that's out. :::::::echoeing other sentiments::::::: If you don't go to these sites, you most likely won't get your pc trashed. Most adults learn from their mistakes, hopefully you are adult enough to get "legal" software and keys in the future. __________________ Network Security Tools: SigSauer P239 .40SW IMI Baby Eagle .40SW S&W M10-6 .38SPL

29-December-05, 12:36 PM	#17 (permalink)
BigMacZach Apex Techie I Join Date: Jul 2005 Location: CC,T nukkas Posts: 59	My friend wasnt even stealing the game he actually just lost his cd key. But ANYWAYS back to my original question would it help if i posted a "hijackThis" log? Ive surfed around and almost figured out how to remove it but the files i read to remove werent on my computed i dunno. Heres a link (http://www.experts-exchange.com/Secu..._21571290.html) to the site i was checkin out. Exact same problem as me except i didnt have the same "offending files" towards the bottom of the page.