Page 1 of 2 12 LastLast
Results 1 to 15 of 19
  1. #1
    Silver Lounger
    Join Date
    Jun 2001
    Location
    Niagara Falls, New York, USA
    Posts
    1,878
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Another Hijack (Version 6.00.2800.1106 * )

    I have seen some of the recent Hijack threads.

    Before I start firing solutions at my computer I would like to explain my symptoms and what I

  2. #2
    Gold Lounger Rebel's Avatar
    Join Date
    Jul 2001
    Location
    Canada
    Posts
    3,024
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Another Hijack (Version 6.00.2800.1106 * )

    Have you tried Add/Remove Programs (from the Control Panel)? I had a similar situation with a friend's machine - supposedly removed the spyware/adware traces with Sypbot S&D and Adaware. Same symptoms. I then went to the Add/Remove Programs list and found several programs there which I did not recognize. Did some investigation, and they were indeed causing the problems. BUT, when I tried to uninstall them, they could not uninstall as I had removed some of their components with Adaware or Spybot. I actually had to restore what I had removed, and then uninstall worked fine.

    Have a look at Symantec's site for the programs you have found. There may be detailed instructions there on how to manually remove them. Failing this, Google the programs and you will find newsgroups with posts dealing with these problems.
    John
    A Child's Mind, Once Stretched by Imagination...
    Never Regains Its Original Dimensions

  3. #3
    Silver Lounger
    Join Date
    Jun 2001
    Location
    Niagara Falls, New York, USA
    Posts
    1,878
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Another Hijack (Version 6.00.2800.1106 * )

    Hi John

    I was desperate and could not wait for HiJack log results.

    I ran Ad-aware and that found offending items that other programs didn't detect

    I also allowed me to Quarantine and maintain history of the items it case I hosed some important files that I have to restore

    It got rid of the popups I was getting, however

    I

  4. #4
    Gold Lounger Rebel's Avatar
    Join Date
    Jul 2001
    Location
    Canada
    Posts
    3,024
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Another Hijack (Version 6.00.2800.1106 * )

    I'm not sure what could be causing the "The Web page you requested is not available offline" message. Is this message appearing when you click on a link or is it just popping up at random? I assume that you have done a complete scan with your AV program? Apart from this, I don't know what to suggest. Possibly someone else will jump in with something that is relevant.
    John
    A Child's Mind, Once Stretched by Imagination...
    Never Regains Its Original Dimensions

  5. #5
    Silver Lounger
    Join Date
    Jun 2001
    Location
    Niagara Falls, New York, USA
    Posts
    1,878
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Another Hijack (Version 6.00.2800.1106 * )

    Hi John

    I use NAV daily

    I just pops up even when I'm offline.

    See attached

    John
    Attached Files Attached Files

  6. #6
    Gold Lounger Rebel's Avatar
    Join Date
    Jul 2001
    Location
    Canada
    Posts
    3,024
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Another Hijack (Version 6.00.2800.1106 * )

    I would suspect that there are still some remnants of spyware installed. Have you run "Spybot Search & Destroy"? If not, you can download it here . It will often find things that AdAware will not.
    John
    A Child's Mind, Once Stretched by Imagination...
    Never Regains Its Original Dimensions

  7. #7
    Uranium Lounger
    Join Date
    Dec 2000
    Location
    Los Angeles Area, California, USA
    Posts
    7,453
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Another Hijack (Version 6.00.2800.1106 * )

    I'm not sure that I have any ideas that Rebel hasn't already mentioned. <post#=296439>post 296439</post#> lists some of the programs that have been mentioned, but there also 1-2 more. Spybot S&D hasn't updated their database for some time. AdAware does about twice a week.

    If that doesn't work, there are a couple of utilities that may help, but I honestly have difficulty using them...they're a little over my head. I just don't know enough about them. anyhow, one is Filemon & the other is Regmon. When something happens & these programs are running, they tell you what files & what part of the registry respectively is accessed. If you could trap the information when these messages or popups ocurr, you might find out what's causing it.

  8. #8
    Silver Lounger
    Join Date
    Jun 2001
    Location
    Niagara Falls, New York, USA
    Posts
    1,878
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Another Hijack (Version 6.00.2800.1106 * )

    Hi John

    Another question

    Every now and again while in the internet I will get a warning message taht spyware and/or adware has been detected on my computer and gives me the following link

    I s this a valid solution?

    Thanks, John

    http://66.33.0.35/spyblocs/adv/rydium2.html

  9. #9
    Uranium Lounger
    Join Date
    Dec 2000
    Location
    Los Angeles Area, California, USA
    Posts
    7,453
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Another Hijack (Version 6.00.2800.1106 * )

    You haven't said whether you've tried the other utilities mentioned. I haven't heard of Spybloc before, but I don't like anything that pops up on your machine without it being knowingly called.

  10. #10
    Gold Lounger Rebel's Avatar
    Join Date
    Jul 2001
    Location
    Canada
    Posts
    3,024
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Another Hijack (Version 6.00.2800.1106 * )

    I agree completely with Phil. Again, there is probably still some remnant of spyware on your machine that is triggering this pop up and directing you to this site. I have never heard of this particular program.
    John
    A Child's Mind, Once Stretched by Imagination...
    Never Regains Its Original Dimensions

  11. #11
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Another Hijack (Version 6.00.2800.1106 * )

    Hmmm, I don't think I'll click that link.

    Are you using XP? Have you disabled the Messenger Service (the built-in service, not the instant messaging program) or are you running a firewall that blocks it? If we can rule out those annoying Messenger Service pop-ups, that will help identify the problem.

  12. #12
    5 Star Lounger
    Join Date
    May 2002
    Location
    43.8N 81.0W, Ontario
    Posts
    815
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Another Hijack (Version 6.00.2800.1106 * )

    Hi John

    66.33.0.35 resolves as "dns5.doteasy.com"
    ....
    doteasy.com appears to be a server on the Tucows domain
    ie:

    Domain Name: DOTEASY.COM
    Registrar: TUCOWS INC.
    Whois Server: whois.opensrs.net
    Referral URL: http://domainhelp.tucows.com
    Name Server: DNS1.IN2NET.COM
    Name Server: DNS2.IN2NET.COM
    Status: REGISTRAR-LOCK
    Updated Date: 23-jul-2003
    Creation Date: 21-aug-1999
    Expiration Date: 21-aug-2004
    ....
    dns5.doteasy.com resolves back to the IP address 209.153.212.105
    ....
    The "Spyblocs" website homepage is http://www.spyblocs.qfx.nu/. This url appears safe but I haven't clicked anywhere on the page that it points to.

    I think it's probably some adware that you've picked up by, perhaps, clicking on a "hotspot" on the Tucows website.
    I'd update and rerun Adaware and update and run Spybot A&D.

    Oh yeah, ... I wouldn't click on the link either!

    Have a Great day!!!
    Ken
    <IMG SRC=http://www.wopr.com/w3tuserpics/KenK_sig.gif>

  13. #13
    Silver Lounger
    Join Date
    Jun 2001
    Location
    Niagara Falls, New York, USA
    Posts
    1,878
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Another Hijack (Version 6.00.2800.1106 * )

    Phil

    So far I have run the following:

    Ran Bazooka Adware and Spyware Scanner 1.12

    It showed the following Spy and Adware programs on my system:

    1. Gator
    2. Hotbar
    3. Internet Optimizer
    4. MS Media Player
    5. n-Case
    6. Precision Time
    7. TwainTech

    I removed all the above except for MS Media Player and I have the same symptoms.

    I ran Ad-aware 6.0, showed up a few remnants of above 7 and they were quarantined

    I ran Spybot 1.2, showed up a few more remnants of above 7 and they were quarantined

    I ran CWShreader v.1.57.0 and reported a clean bill of health.

    I ran HiJackThis v1.97.7, the log was posted on their website to be analyzed.

    When I rerun these programs they show what look like low risk cookies from normal surfing of the net.

    Do I need MS Media Player? Is this safe to delete and reinstall later if I need it?

    John

  14. #14
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Another Hijack (Version 6.00.2800.1106 * )

    Microsoft's media player is called "Windows Media Player." I don't know what MS Media Player is.

  15. #15
    Uranium Lounger
    Join Date
    Dec 2000
    Location
    Los Angeles Area, California, USA
    Posts
    7,453
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Another Hijack (Version 6.00.2800.1106 * )

    Hi John:
    As Jefferson says, MS Media Player isn't the name "Windows Media Player". Nevertheless, I searched Google for MS Media Player & they seem to equate it to Windows Media Player. They also refer to a couple articles on tracking. One of the articles here suggests running Bazooka, which you already have. (I haven't used Bazooka, so I don't have an opinion about it. I'm surprised that it would list WMP as MS Media Player, though.)

    I would try to remove it or clean WMP. Although I have WMP, I refused to set it up to transmit information. And to answer your question, "No. You don't need Media Player". It is merely one of several music players. But if it is WMP, I doubt that it would be causing all the pop-up windows that you mention. Has there been any change in the problem since you've run all these utilities?

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •