Approve the Cookies
This website uses cookies to improve your user experience. By using this site, you agree to our use of cookies and our Privacy Policy.
OK
Forums  •   • New posts  •   • RTAT  •   • 'Best of'  •   • Gallery  •   • Gear
Guest
Forums  •   • New posts  •   • RTAT  •   • 'Best of'  •   • Gallery  •   • Gear
Register to forums    Log in

 
FORUMS Community Talk, Chatter & Stuff The Lounge 
Thread started 19 Dec 2007 (Wednesday) 06:51
Search threadPrev/next
sponsored links (only for non-logged)

PC "virus" help

 
Robuk
2011 SMWYG Photographer of the Year
Avatar
884 posts
Gallery: 2 photos
Likes: 87
Joined Jun 2006
Location: God's Country......N Wales UK
     
Dec 19, 2007 06:51 |  #1

Hope this is the right forum to hopefully get some help on........

I believe I have some sort of virus/worm on my laptop, but having used pretty every bit of software available to find it, I'm still in the dark on what/where it is. It's taking over my internet connection (Broadband) and I am unable to upload anything to the web, plus my connection speed is up and down like a brides nightie :( so trying to get anything done web wise has become a real nightmare............. :cry: On average it takes from 20 seconds to 40 seconds to load POTN and up to 6 minutes to load yahoo mail as an example...........

I have tried to do a safe boot in windows to sort out the problem but it just won't start up that way which makes me think that the virus/worm has got a pretty good hold of the laptop.

I'm running Win XP Home service pack 2 build 2600, IE ver 7 7.0.5730.11 on an Acer Aspire 9504WSMi

Cheers for any help you may be able to give me to at least relieve my stress :D

Cheers

Rob


Freelance Photos North Wales
www.fpnw.co.uk (external link)
Free Pictures No Way :)

  
  LOG IN TO REPLY
Woolburr
Rest in peace old friend.
Avatar
66,487 posts
Gallery: 115 photos
Best ofs: 2
Likes: 143
Joined Sep 2005
Location: The Tupperware capitol of eastern Oregon...Leicester, NC!
     
Dec 19, 2007 08:00 |  #2

If you can get to here.....www.pandasecurity.com (external link)
Click on the ActiveScan link using IE....if you have a currently active virus, worm, malware or spyware odds are good that it will find it.


People that know me call me Dan
You'll never be a legitimate photographer until you have an award winning duck in your portfolio!
Crayons,Coloring Book, (external link) Refrigerator Art (external link) and What I Really Think About (external link)

  
  LOG IN TO REPLY
Jaime
Goldmember
Avatar
2,464 posts
Likes: 1
Joined Jun 2006
     
Dec 19, 2007 08:18 |  #3

It could also be a trojan horse. You can download this freeware: http://www.download.co​m …3000-8022_4-10377953.html (external link) and use it to scanyour system, If it finds something it will also give you directions on how to clean it.


"My eyes see but a minute reflection of what my soul
longs to capture through the sensual art of photography."
Jaime E. Pagán
https://photography-on-the.net …php?p=6253713#p​ost6253713

  
  LOG IN TO REPLY
Robuk
THREAD ­ STARTER
2011 SMWYG Photographer of the Year
Avatar
884 posts
Gallery: 2 photos
Likes: 87
Joined Jun 2006
Location: God's Country......N Wales UK
     
Dec 19, 2007 08:20 as a reply to  @ Woolburr's post |  #4

Cheers Dan and KonTiki, very much appreciated

Rob


Freelance Photos North Wales
www.fpnw.co.uk (external link)
Free Pictures No Way :)

  
  LOG IN TO REPLY
galahad
Member
Avatar
202 posts
Joined Sep 2006
Location: Ireland
     
Dec 19, 2007 08:28 |  #5

worst case, re-format the harddrive and re-install all the software. Backup the files first before doing the format.


Gear List

  
  LOG IN TO REPLY
cosworth
I'm comfortable with my masculinity
Avatar
10,939 posts
Likes: 21
Joined Jul 2005
Location: Duncan, BC, Canada
     
Dec 19, 2007 08:31 |  #6

galahad wrote in post #4533714 (external link)
Backup the files first before doing the format.

Backup the non-infected files first before doing the format. :rolleyes:


people will always try to stop you doing the right thing if it is unconventional
Full frame and some primes.

  
  LOG IN TO REPLY
Pete
I was "Prime Mover" many years back....
Avatar
38,631 posts
Likes: 25
Joined Jul 2006
Location: Berkshire, UK
     
Dec 19, 2007 08:35 |  #7

If you're fairly computer savvy, then google up "Hijack this". It's a program that lets you see exactly what's being loaded up on system startup. Some of the viruses/malware are fairly tricky in that they immediately spawn themselves as a program of an entirely random name and set the registry up so they load the next time windows boots up. So any scanning software will see the one that's in memory, and clear it, but the next time you boot up, it'll magically re-appear.


Pete
UK SE Catch of the Day

  
  LOG IN TO REPLY
Robuk
THREAD ­ STARTER
2011 SMWYG Photographer of the Year
Avatar
884 posts
Gallery: 2 photos
Likes: 87
Joined Jun 2006
Location: God's Country......N Wales UK
     
Dec 19, 2007 09:02 as a reply to  @ cosworth's post |  #8

I have to find the infected ones first me thinks lol..........

I purchased an external Hard drive, last week as my other three are full, so when that turns up, hopefully this year :evil: I'll do a complete re-format then :D and thanks for everyones comments/help, it's really appreciated......

Pete, I'm pretty computer illiterate when it comes down to it, but I will gave that a go and see how I get on :) cheers

Rob


Freelance Photos North Wales
www.fpnw.co.uk (external link)
Free Pictures No Way :)

  
  LOG IN TO REPLY
cosworth
I'm comfortable with my masculinity
Avatar
10,939 posts
Likes: 21
Joined Jul 2005
Location: Duncan, BC, Canada
     
Dec 19, 2007 09:14 |  #9

Make sure when you do get any anti virus installed (I like avast!) that you do a reboot scan. It scans before it loads windows and it really the best way to do it.

Most viruses are delivered through password keygens/crackers, crappy downloads, cracked software etc. Porn and torrent sites are bad for trojans and spy/malware. Avoid that crap like the plague. Sorta like blaming a car for being bent after you drive it into a pole.

I was rebuilding my wife's old box last night to be given as a gift to a poor family member. I'm quite sure she never clicked the no button to any window that popped up in the 3 years she used it. 4 toolbars, 2 weather applications, money trackers, download optimizers... It had 5 different trojans on it even. She's a little smarter now, not installing anything on her laptop now other than office and never installing anything crappy.

You computer is as clean as you keep it. It's the pitfall of having open hardware choices and WAY too much choice in crappy software.


people will always try to stop you doing the right thing if it is unconventional
Full frame and some primes.

  
  LOG IN TO REPLY
poloman
Cream of the Crop
Avatar
5,442 posts
Likes: 7
Joined Dec 2006
Location: Southern Illinois
     
Dec 19, 2007 10:04 |  #10

Once you get it sorted out....make sure you always use a fire wall. I like zone alarm.


"All those who believe in psychokinesis, raise my right hand!" Steven Wright

  
  LOG IN TO REPLY
kuanyu
Senior Member
575 posts
Joined Jan 2007
Location: Fl. USA
     
Dec 19, 2007 11:26 as a reply to  @ poloman's post |  #11

I would recomend AVG and spybot. This will let you check for both 'virus' and spyware. Both have freeware versions that are very good.


50D & XTi w/Grip - Kit 18-55mm,75-300mm,EF 24-85 IS, 50mm 1.8, 100mm 2.8 macro, 100-400L,580ex,RC-1,(2) AB400s, RF602s ,SoftBox/Barndoors/Brol​ly Box/Sekonic L-308S Lightmeter
empty wallet:(
Kuanyu.zenfolio.com (external link)

  
  LOG IN TO REPLY
cosworth
I'm comfortable with my masculinity
Avatar
10,939 posts
Likes: 21
Joined Jul 2005
Location: Duncan, BC, Canada
     
Dec 19, 2007 11:41 |  #12

poloman wrote in post #4534223 (external link)
Once you get it sorted out....make sure you always use a fire wall. I like zone alarm.

I am a former user of zone alarm. Far too many conflicts with stuff not working. Once I put my machine behind a router and got wise, it became redundant for me.


people will always try to stop you doing the right thing if it is unconventional
Full frame and some primes.

  
  LOG IN TO REPLY
queenbee288
Cream of the Crop
Avatar
5,610 posts
Gallery: 17 photos
Likes: 155
Joined Dec 2004
Location: Stanford, Ky
     
Dec 19, 2007 12:06 |  #13

Go to this site..

http://forums.techguy.​org/ (external link)

It is free. They are fantastic at this kind of thing. I had a terrible trojan once that nothing could get rid of. One of the members there had to make a special tool to kill it.
They are first going to tell you to download Highjack this that was mentioned above. Once you run it copy and paste the results to this website and they will look at it and tell you what to delete. If that doesn't work they will tell you step by step what else to do and they will see you through to the end.

They got me up and running again.

Good luck!




  
  LOG IN TO REPLY
Robuk
THREAD ­ STARTER
2011 SMWYG Photographer of the Year
Avatar
884 posts
Gallery: 2 photos
Likes: 87
Joined Jun 2006
Location: God's Country......N Wales UK
     
Dec 19, 2007 13:12 as a reply to  @ queenbee288's post |  #14

These are the ones I have found and sbsoft seems to be a real dodgy one, now I just need to find something to get rid of it which is proving difficult :(

Adware:adware/sbsoft Windows Registry
Spyware:Cookie/YieldMa​nager C:\WINDOWS\Temp\sqlite​_cfFmb420gnPCU7F
Spyware:Cookie/Apmebf C:\Documents and Settings\ROBUK\Cookies​\robuk@apmebf[1].txt

Thanks Char, I'll certainly be looking into that tonight :)

I don't download any dodgy software, games etc and I only have two games on the machine from bought CD's, Warcraft III and Sega Rally :oops: lol and don't go anywhere near anything with two XX's let alone three as the laptop is my lifeline to carry out my work on the road and anything goes wrong I don't earn :(

I've found this on the net, anyone have any idea whether it's cosher to follow this...........

Below listed dlls registry entries files are part of this spyware. To manually get rid of it, follow these instructions (at your own risk). SBSoft Removal InstructionsUnregister the following DLLs and reboot
ie2cltr.dll.
Delete these registry entries
HKEY_CLASSES_ROOT\clsi​d\{08bec6aa-49fc-4379-3587-4b21e286c19e}
HKEY_CLASSES_ROOT\inte​rface\{9d573d0e-663c-435f-bf31-2c4497373c41}
HKEY_CLASSES_ROOT\type​lib\{110fa82f-db6c-3c24-8929-60961d10c56e}
HKEY_LOCAL_MACHINE\sof​tware\microsoft\window​s\currentversion\explo​rer\browser helper objects\{08bec6aa-49fc-4379-3587-4b21e286c19e}
HKEY_LOCAL_MACHINE\sof​tware\searchtoolbar
Remove the following files
rdt.ini.

Thanks for all of your help again

Cheers

Rob


Freelance Photos North Wales
www.fpnw.co.uk (external link)
Free Pictures No Way :)

  
  LOG IN TO REPLY
cosworth
I'm comfortable with my masculinity
Avatar
10,939 posts
Likes: 21
Joined Jul 2005
Location: Duncan, BC, Canada
     
Dec 19, 2007 13:15 |  #15

Robuk wrote in post #4535279 (external link)
I don't download any dodgy software, games etc and I only have two games on the machine from bought CD's, Warcraft III and Sega Rally :oops: lol and don't go anywhere near anything with two XX's let alone three as the laptop is my lifeline to carry out my work on the road and anything goes wrong I don't earn :(

You've gone somewhere or done something. The real goal here is to avoid it from happening again after you fix this.

This might be an opportunity to look at alternative operating systems that suit you better.


people will always try to stop you doing the right thing if it is unconventional
Full frame and some primes.

  
  LOG IN TO REPLY
sponsored links (only for non-logged)

1,517 views & 0 likes for this thread, 12 members have posted to it.
PC "virus" help
FORUMS Community Talk, Chatter & Stuff The Lounge 
AAA
x 1600
y 1600

Jump to forum...   •  Rules   •  Forums   •  New posts   •  RTAT   •  'Best of'   •  Gallery   •  Gear   •  Reviews   •  Member list   •  Polls   •  Image rules   •  Search   •  Password reset   •  Home

Not a member yet?
Register to forums
Registered members may log in to forums and access all the features: full search, image upload, follow forums, own gear list and ratings, likes, more forums, private messaging, thread follow, notifications, own gallery, all settings, view hosted photos, own reviews, see more and do more... and all is free. Don't be a stranger - register now and start posting!


COOKIES DISCLAIMER: This website uses cookies to improve your user experience. By using this site, you agree to our use of cookies and to our privacy policy.
Privacy policy and cookie usage info.


POWERED BY AMASS forum software 2.58forum software
version 2.58 /
code and design
by Pekka Saarinen ©
for photography-on-the.net

Latest registered member is griggt
818 guests, 118 members online
Simultaneous users record so far is 15,144, that happened on Nov 22, 2018

Photography-on-the.net Digital Photography Forums is the website for photographers and all who love great photos, camera and post processing techniques, gear talk, discussion and sharing. Professionals, hobbyists, newbies and those who don't even own a camera -- all are welcome regardless of skill, favourite brand, gear, gender or age. Registering and usage is free.