return to tranceaddict TranceAddict Forums Archive > Archives > Classic old threads / Inactive Forums > Retired Forums > Frequently Asked Questions / Tutorials / How do I?

 
Spyware/Malware or Why I Should've Kept Linux
View this Thread in Original format
idoru
Well, somehow, my computer is ed and I have absolutely no clue how it happened. Here's what's going on with it...

- My wallpaper is covered by some weird IE window that I'm unable to close. It appears under all of my icons and gives me some warning about having spyware on my computer. The .HTML file is located in C:\Windows\Web\desktop.html which I know isn't supposed to be there.

- Google and the more popular search engines (not AlltheWeb, thank God) have been hijacked and give me spam/porn results no matter what I search for.

- Various links in Mozilla (yeah, weird) redirect to IPCons.Biz. For example, if I click on Music Discussion in the main forums, it links me to an IPCons.biz search site for "music." Many words that don't originally have links, such as 'you' and 'computer' are given links to an IPCons.biz site for a search for those respective words.

- The little bubble on Windows that pops-up in the taskbar occasionally pops-up with a "Spyware has been detected" which, if clicked on, leads to a bogus search site for Spyware.

- And, of course, the occasional pop-up ads.

I've ran both Ad-Aware and Spybot, and they haven't fixed it. I have checked for both VX2 and coolwebsearch, both of which sound a lot similar to this, but those are not the problems. This is the first time I've had any sort of infection, because I've always preached safe computing, and it's weird that this happened because I didn't do anything out of the ordinary.

Any suggestions? (Aside from formatting, at least for the time being. I have too much stuff to back up.)

Edit: I can't click on this topic without being redirected. If you post any links, please provide the full URL so I don't get shoved to a search.
Disney
HijackThis
mezzir
quote:
Originally posted by Disney
HijackThis

beat me to it
boot in safe mode, run that
idoru
Awesome, that seems to have fixed the problems for the most part. No more browser hijacking. The only thing that's left is that the IE window still pops up over my wallpaper. I'll end up figuring it out, though.

Thanks. :)
Project 7
Adaware
Disney
quote:
Originally posted by Project 7
Adaware


quote:
Originally posted by idoru
...
I've ran both Ad-Aware and Spybot, and they haven't fixed it
...
LeopoldStotch
hkey_current_user\control panel\desktop

hkey_current_user\software\microsoft\internet explorer\desktop\general

HKEY_USERS\S-1-5-21-1065543706-951796526-1614765859-1005\Control Panel\Desktop

HKEY_USERS\S-1-5-21-1065543706-951796526-1614765859-1005\Software\Microsoft\Internet Explorer\Desktop\General

HKEY_USERS\S-1-5-21-1065543706-951796526-1614765859-1005\Software\Microsoft\Windows\CurrentVersion\Themes\LastTheme


check these locations in your registry ... see if your wallpaper settings have been hacked or not .. especially with those dumb xp theme options .. also .. see if you are viewing the desktop as a web page or not .. should be in your display settings .
CLICK TO RETURN TO TOP OF PAGE
 
Privacy Statement