Renegade Public Forums
C&C: Renegade --> Dying since 2003™, resurrected in 2024!
Home » General Discussions » General Discussion » Oh noes! My megahurtz have been hijacked!
Oh noes! My megahurtz have been hijacked! [message #105929] Tue, 03 August 2004 19:05 Go to next message
SuperFlyingEngi is currently offline  SuperFlyingEngi
Messages: 1756
Registered: November 2003
Karma: 0
General (1 Star)
Well, I have a really spyware problem [at least I think it's spyware.] that I must remove from my computer. It affects Google Image searches. When I go to http://www.google.com/ like normal, everything works fine, and then I click on the Images tab, and I get redirected through http://www.safe-site.com/ to some website like NationalGeographic.com. Needless to say, this makes it quite impossible to perform google image searches, and drive me right up the wall in anger. If anyone knows anything about this, i would greatly appreciate some information. I always get the same effect with IE, Opera, and Mozilla Firefox.

But, tragically, spyware has screwed IE so far to hell, it's never coming back unless I re-format both my harddrives.

Any help is much appreciated Smile


"To announce that there must be no criticism of the President, or that we are to stand by the President, right or wrong, is not only unpatriotic and servile, but is morally treasonable to the American public." -- Theodore Roosevelt (1918)

"The danger to political dissent is acute where the Government attempts to act under so vague a concept as the power to protect "domestic security." Given the difficulty of defining the domestic security interest, the danger of abuse in acting to protect that interest becomes apparent. --U.S. Supreme Court decision (407 U.S. 297 (1972)

The Liberal Media At Work
An objective look at media partisanship
Oh noes! My megahurtz have been hijacked! [message #105930] Tue, 03 August 2004 19:48 Go to previous messageGo to next message
Panther is currently offline  Panther
Messages: 243
Registered: July 2003
Karma: 0
Recruit

get spybot and kill the spyware.

http://www.snapfiles.com/get/spybot.html


http://www.freeflow-solutions.com/sigs/ffsig.gif
Oh noes! My megahurtz have been hijacked! [message #105931] Tue, 03 August 2004 19:50 Go to previous messageGo to next message
Sir Kane
Messages: 1701
Registered: March 2003
Location: Angerville
Karma: 0
General (1 Star)
Assuming you have windows 2000 or above:

Open C:\WINDOWS\system32\drivers\etc\hosts with notepad and look for suspicious entries. (Don't think spybot cleans that up if there's stuff added)


Proud N9500 and proud N6270 user. Creator of the IEE libraries (original bhs.dll) and the RB series software.
http://n00bstories.com/image.fetch.php?id=1189992501http://www.n00bstories.com/image.fetch.php?id=1257492907
Oh noes! My megahurtz have been hijacked! [message #105933] Tue, 03 August 2004 19:59 Go to previous messageGo to next message
z310
Messages: 2459
Registered: July 2003
Karma: 0
General (2 Stars)
^^^ Meh... (the image)

get spybot or a similar program, lavasoft has a good one...
Oh noes! My megahurtz have been hijacked! [message #105935] Tue, 03 August 2004 20:02 Go to previous messageGo to next message
cheesesoda is currently offline  cheesesoda
Messages: 6507
Registered: March 2003
Location: Jackson, Michigan
Karma: 0
General (5 Stars)

z310

^^^ Meh... (the image)

get spybot or a similar program, lavasoft has a good one...

Stop bitching about that.

Yeah Spybot and Ad-aware can work well, but try deleting those suspicious entries.


whoa.
Oh noes! My megahurtz have been hijacked! [message #105936] Tue, 03 August 2004 20:04 Go to previous messageGo to next message
z310
Messages: 2459
Registered: July 2003
Karma: 0
General (2 Stars)
i didnt bitch Razz
Oh noes! My megahurtz have been hijacked! [message #105946] Tue, 03 August 2004 21:00 Go to previous messageGo to next message
DarkDemin is currently offline  DarkDemin
Messages: 1483
Registered: March 2003
Karma: 0
General (1 Star)
j_ball430

z310

^^^ Meh... (the image)

get spybot or a similar program, lavasoft has a good one...

Stop bitching about that.

Yeah Spybot and Ad-aware can work well, but try deleting those suspicious entries.


I agree and you can take a good look at my sig too.


http://www.tiberiumforums.net/sig/tiberiumforumssig.jpg
Oh noes! My megahurtz have been hijacked! [message #105949] Tue, 03 August 2004 21:16 Go to previous messageGo to next message
Ferhago is currently offline  Ferhago
Messages: 1013
Registered: March 2003
Karma: 0
General (1 Star)
Just so you can never open this page again.

FUCK!


People on IRC that night will understand
Oh noes! My megahurtz have been hijacked! [message #105958] Tue, 03 August 2004 23:51 Go to previous messageGo to next message
revenuke is currently offline  revenuke
Messages: 97
Registered: December 2003
Karma: 0
Recruit
bitdender(antivirus) + zone alarm(firewall) + adware + tune up utilities 2004 = NO MORE PROBLEMS

(download all these softwares)


maps.darev.co.uk

http://img38.photobucket.com/albums/v117/revenuke/rev1.jpg
Oh noes! My megahurtz have been hijacked! [message #105959] Wed, 04 August 2004 00:13 Go to previous messageGo to next message
SHOKAgent is currently offline  SHOKAgent
Messages: 33
Registered: July 2004
Karma: 0
Recruit
This is all you need.

http://www.astalavista.com//data/winxptweakguide.htm
Oh noes! My megahurtz have been hijacked! [message #105963] Wed, 04 August 2004 00:38 Go to previous messageGo to next message
NHJ BV is currently offline  NHJ BV
Messages: 712
Registered: February 2003
Karma: 0
Colonel
AdAware is pretty good too, http://www.lavasoft.de .
Oh noes! My megahurtz have been hijacked! [message #105973] Wed, 04 August 2004 01:03 Go to previous messageGo to next message
Crimson is currently offline  Crimson
Messages: 7429
Registered: February 2003
Location: Phoenix, AZ
Karma: 0
General (5 Stars)
ADMINISTRATOR
You need F-prot. That's the only thing that managed to clean a horrible infection that ran through the Crimmy/Blazer network. You would create a boot disk that runs before corrupted, messed up Windows can load and cleans things up nicely.

I'm the bawss.
Oh noes! My megahurtz have been hijacked! [message #105978] Wed, 04 August 2004 03:03 Go to previous messageGo to next message
Blazea58 is currently offline  Blazea58
Messages: 408
Registered: May 2003
Karma: 0
Commander
Silent Kane

Assuming you have windows 2000 or above:

Open C:\WINDOWS\system32\drivers\etc\hosts with notepad and look for suspicious entries. (Don't think spybot cleans that up if there's stuff added)


-------

If there is only one entry in it, does that mean anything? do i delete that as well, cause im having some of the same problems as him Mad


http://i175.photobucket.com/albums/w125/Blaze558/ECW_WebBanner1.jpg
Oh noes! My megahurtz have been hijacked! [message #105984] Wed, 04 August 2004 04:25 Go to previous messageGo to next message
ViperFUD is currently offline  ViperFUD
Messages: 69
Registered: April 2003
Karma: 0
Recruit
Not if that entry is

127.0.0.1         localhost

all that does is map "localhost" to your computer (127.0.0.1).

it's actually kinda useful to map othersite to your coputer, ie
127.0.0.1         media.fastclick.net
127.0.0.1         ad.doubleclick.net


(from my computer) which will block ads from those sites.

now, some viruses will be evil and make it say
127.0.0.1         http://www.mcafee.com

so you can't get anti-virus software. that's bad. and if you see anything mapped to anything OTHER than 127.0.0.1 it means its redirecting somethign to a different site. Which is also bad.

anyways,
Viper


And shepherds we shall be,
For thee, my Lord, for thee.
Power hath descended forth from thy hand;
That our feet may swiftly carry out thy command.
And we shall flow a river forth to thee,
And teeming with souls shall it ever be.
Oh noes! My megahurtz have been hijacked! [message #105986] Wed, 04 August 2004 05:58 Go to previous messageGo to next message
SuperFlyingEngi is currently offline  SuperFlyingEngi
Messages: 1756
Registered: November 2003
Karma: 0
General (1 Star)
Ferhago

Just so you can never open this page again.

F*&^!


People on IRC that night will understand


Lol...No, I'm using my dad's laptop right now, not the crapped-up family desktop.

I plan to have said IRC crisis resolved by tonight or so, but until then, I probably won't be able to get on because of all you mean people. Sad

Just so everyone knows, I have already run Spybot and Adaware, each has found like 200 entries, but nothing seems to go away. Right now, my Internet Explorer is redirected through Search200.com or something, [I wouldn't try to access a link to that site if I were you] and has two added search bars [Kind of like Google Toolbar except they suck and I don't want them there.]


"To announce that there must be no criticism of the President, or that we are to stand by the President, right or wrong, is not only unpatriotic and servile, but is morally treasonable to the American public." -- Theodore Roosevelt (1918)

"The danger to political dissent is acute where the Government attempts to act under so vague a concept as the power to protect "domestic security." Given the difficulty of defining the domestic security interest, the danger of abuse in acting to protect that interest becomes apparent. --U.S. Supreme Court decision (407 U.S. 297 (1972)

The Liberal Media At Work
An objective look at media partisanship
Oh noes! My megahurtz have been hijacked! [message #105996] Wed, 04 August 2004 07:41 Go to previous messageGo to next message
SuperFlyingEngi is currently offline  SuperFlyingEngi
Messages: 1756
Registered: November 2003
Karma: 0
General (1 Star)
Well, I downloaded and used F-prot, it got some stuff, and looking through what is was scanning, I think I found where all the broswer hijackers are. But the real problem with my computer is proving to be much harder -

Cybersitter 2002.

I feel such intense shame at having a netnanny running on my computer and not being able to remove it myself... But then I thought, "Wait, people on Renegadeforums.com know everything!" So, I come to you with a quandary. How do I remove Cybersitter 2002 from my computer?

http://www.cexx.org/censware.htm

I've tried everything there, and it doesn't work. I've deleted the Net98 folder and C2K in the registry key, cut C2K from the run list in msconfig, but it ALWAYS appears on startup, no matter what I do. My guess is that it piggybacks a run script or something on another program, some Windows thing, I would guess, but I don't know what it is.

If anyone could help me purge this, I would be much obliged.


"To announce that there must be no criticism of the President, or that we are to stand by the President, right or wrong, is not only unpatriotic and servile, but is morally treasonable to the American public." -- Theodore Roosevelt (1918)

"The danger to political dissent is acute where the Government attempts to act under so vague a concept as the power to protect "domestic security." Given the difficulty of defining the domestic security interest, the danger of abuse in acting to protect that interest becomes apparent. --U.S. Supreme Court decision (407 U.S. 297 (1972)

The Liberal Media At Work
An objective look at media partisanship
Oh noes! My megahurtz have been hijacked! [message #105998] Wed, 04 August 2004 07:53 Go to previous messageGo to next message
Fabian is currently offline  Fabian
Messages: 821
Registered: April 2003
Location: Boston, MA
Karma: 0
Colonel
From now on, dont use IE. Mozilla or Opera are safer.
Oh noes! My megahurtz have been hijacked! [message #106006] Wed, 04 August 2004 08:37 Go to previous messageGo to next message
Beanyhead is currently offline  Beanyhead
Messages: 549
Registered: February 2003
Location: Kentucky, USA
Karma: 0
Colonel

OH NOES MY MEGAHERTZ EXPLODEDD

http://www.beaconpedestal.com/explode
Oh noes! My megahurtz have been hijacked! [message #106012] Wed, 04 August 2004 09:18 Go to previous messageGo to next message
Jalapeno Jones
Messages: 11
Registered: February 2004
Karma: 0
Recruit
SEAL

From now on, dont use IE. Mozilla or Opera are safer.


I stopped using IE once it stopped working - right now I switch between Firefox and Opera. Both work a lot better, but CyberSTUPID still affects both of them. Is Winsock a necessary file? Because I read somewhere that Opera perpetrates its evil through a modified Winsock file...


The war is right outside your door.
--Rage Against the Machine "Testify"
Oh noes! My megahurtz have been hijacked! [message #106066] Wed, 04 August 2004 11:49 Go to previous messageGo to next message
SuperFlyingEngi is currently offline  SuperFlyingEngi
Messages: 1756
Registered: November 2003
Karma: 0
General (1 Star)
Whoa...what the?

I made that post, not Jalapeno Jones or whoever he is...Why does it say that he posted it?

Oh, and I read somewhere that Cybersitter perpetrates its evil through a modified Winsock file, not Opera.

That is weird...


"To announce that there must be no criticism of the President, or that we are to stand by the President, right or wrong, is not only unpatriotic and servile, but is morally treasonable to the American public." -- Theodore Roosevelt (1918)

"The danger to political dissent is acute where the Government attempts to act under so vague a concept as the power to protect "domestic security." Given the difficulty of defining the domestic security interest, the danger of abuse in acting to protect that interest becomes apparent. --U.S. Supreme Court decision (407 U.S. 297 (1972)

The Liberal Media At Work
An objective look at media partisanship
Oh noes! My megahurtz have been hijacked! [message #106090] Wed, 04 August 2004 13:10 Go to previous messageGo to next message
DarkDemin is currently offline  DarkDemin
Messages: 1483
Registered: March 2003
Karma: 0
General (1 Star)
It happened to me once too. I posted wallpapers in a wallpaper thread and it said j_ball430 did.

http://www.tiberiumforums.net/sig/tiberiumforumssig.jpg
Oh noes! My megahurtz have been hijacked! [message #106103] Wed, 04 August 2004 14:05 Go to previous messageGo to next message
SuperFlyingEngi is currently offline  SuperFlyingEngi
Messages: 1756
Registered: November 2003
Karma: 0
General (1 Star)
Never mind, I fixed Cybersitter.

Turns out I just needed to change a 1 to a 0 in the registry, and it shuts down.

SuperFlyingEngi: CyberSUCKS 2002:
1 0


"To announce that there must be no criticism of the President, or that we are to stand by the President, right or wrong, is not only unpatriotic and servile, but is morally treasonable to the American public." -- Theodore Roosevelt (1918)

"The danger to political dissent is acute where the Government attempts to act under so vague a concept as the power to protect "domestic security." Given the difficulty of defining the domestic security interest, the danger of abuse in acting to protect that interest becomes apparent. --U.S. Supreme Court decision (407 U.S. 297 (1972)

The Liberal Media At Work
An objective look at media partisanship
Oh noes! My megahurtz have been hijacked! [message #106141] Wed, 04 August 2004 16:57 Go to previous message
icedog90 is currently offline  icedog90
Messages: 3483
Registered: April 2003
Karma: 0
General (3 Stars)
Isn't this supposed to go in the "Technical Support" forum?
Previous Topic: Doom 3!
Next Topic: My son is a hacker!
Goto Forum:
  


Current Time: Tue Nov 19 20:02:30 MST 2024

Total time taken to generate the page: 0.01173 seconds