Wow, so where do i start? - Page 2

Jonny69 · 17-02-2010, 10:33

That doesn't look like much is wrong to me. HijackThis will tell you what BHOs (Browser Helper Objects) have been installed onto IE, you can just detach the problem one (or all of them) and it'll open up and run fine. Then you can just do your spyware and virus check as normal.

LeperousDust · 17-02-2010, 12:35

Yeah i have faith, i don't think theres *that* much wrong after i've uninstalled and turned off everything and removed a million brower extensions etc... Autoruns spyware stuff virus stuff and little bit of care *should* do. It'll do enough to keep her happy, and the bottom line is i don't care enough about this person to really try and teach them, and i know trying to teach her would be a waste of my breath. Years ago i'd try that method, make them use firefox and other alternative decent software. Then i grew up and realised it was pointless...

Desmo · 17-02-2010, 12:45

Holy cow, that's bad

Mark · 17-02-2010, 23:30

You could always 'accidentally' 'break' IE. Just tell them you had to uninstall IE because it was causing the problems.

LeperousDust · 18-02-2010, 03:17

It's done spent a few hours whilst i was doing other stuff today, nuked it with combofix (which ive never used but seems a pretty good start) then autoruns for everylast thing, then PC decrapifier and ticked everything random to uninstall, updated windows (installed vista SP2!) installed MSE run that defender and super anti spyware on all the sensible places (limewire bearshare utorrent and others have prebiously been installed) now about to run 3 online virus scanners just in case to cover each others back

Seems fine though, easy does it

More importantly nothing is broken (inc IE) but chrome is set to default now and i've "hidden" IE so she'll have to get ****ing used to chrome

Garp · 18-02-2010, 05:06

Given that viruses can do funny stuff with running anti-virus software, it might be worth nabbing an anti-virus livecd, like Kaspersky's Rescue Disk, and running that through:
http://www.softpedia.com/get/Antivir...scue-Disk.shtm

Mark · 18-02-2010, 08:49

^ Agreed. Less chance of being bitten by a rootkit. How they've 'disappeared' out of the spotlight these days.

LeperousDust · 18-02-2010, 14:24

Nah i just don't care enough

I've run several of everything, checked autoruns for anything vaguely suspicious anywhere and can't see anything. If something is that well hidden, then they deserve to keep the rootkit on her PC

If she was paying me something decent i might bother but nowdays she couldn't care she wants it "cheap" (not the price of the local computer shop) and if shes not paying me my worth then i'm not bothering! Everyones happy, i know i've not done a steller job but i hardly know her and i wont lose any sleep

Although as of this morning the wifi will only connect with local access. Which i fear is to do with my harsh messing =/ Hmmmmm Otherwise it really does all work like brand new out the box...

leowyatt · 18-02-2010, 15:01

combofix is good we use it at work all the time

LeperousDust · 18-02-2010, 15:24

I wouldn't rely solely on it leo, it left loads of harmless yet still **** stuff behind, as with anything its just best to run every decent app under the sun and hope nothing is left unturned.

Anyway quick visit to the dell website internet is working again, seems a vista update and me fiddling and not rebooting and just generally cleansing the computer obviously was going to be a driver disaster

Now it seems i've fully disabled windows defender from starting on startup and when i load it, it gives me the option to turn it on with admin rights, but its off again at reboot. I did really nuke everything it seems

17-02-2010, 10:33	#11
Jonny69 Noob Join Date: Oct 2006 Location: Socialist Republik of Kent Posts: 5,032	That doesn't look like much is wrong to me. HijackThis will tell you what BHOs (Browser Helper Objects) have been installed onto IE, you can just detach the problem one (or all of them) and it'll open up and run fine. Then you can just do your spyware and virus check as normal. __________________

17-02-2010, 12:35	#12
LeperousDust Bananaman Join Date: Jul 2006 Location: Liverpool/Edinburgh Posts: 4,817	Yeah i have faith, i don't think theres that much wrong after i've uninstalled and turned off everything and removed a million brower extensions etc... Autoruns spyware stuff virus stuff and little bit of care should do. It'll do enough to keep her happy, and the bottom line is i don't care enough about this person to really try and teach them, and i know trying to teach her would be a waste of my breath. Years ago i'd try that method, make them use firefox and other alternative decent software. Then i grew up and realised it was pointless... __________________

17-02-2010, 12:45	#13
Desmo The Last Airbender Join Date: Jun 2006 Location: Pigmopad Posts: 11,915	Holy cow, that's bad __________________

18-02-2010, 03:17	#15
LeperousDust Bananaman Join Date: Jul 2006 Location: Liverpool/Edinburgh Posts: 4,817	It's done spent a few hours whilst i was doing other stuff today, nuked it with combofix (which ive never used but seems a pretty good start) then autoruns for everylast thing, then PC decrapifier and ticked everything random to uninstall, updated windows (installed vista SP2!) installed MSE run that defender and super anti spyware on all the sensible places (limewire bearshare utorrent and others have prebiously been installed) now about to run 3 online virus scanners just in case to cover each others back Seems fine though, easy does it More importantly nothing is broken (inc IE) but chrome is set to default now and i've "hidden" IE so she'll have to get ****ing used to chrome __________________

18-02-2010, 05:06	#16
Garp Preparing more tumbleweed Join Date: Jun 2006 Location: Hawaii Posts: 6,038	Given that viruses can do funny stuff with running anti-virus software, it might be worth nabbing an anti-virus livecd, like Kaspersky's Rescue Disk, and running that through: http://www.softpedia.com/get/Antivir...scue-Disk.shtm __________________ Mal: Define "interesting"? Wash: "Oh, God, oh, God, we're all gonna die"?

17-02-2010, 23:30	#14
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	You could always 'accidentally' 'break' IE. Just tell them you had to uninstall IE because it was causing the problems.

18-02-2010, 08:49	#17
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	^ Agreed. Less chance of being bitten by a rootkit. How they've 'disappeared' out of the spotlight these days.

18-02-2010, 14:24	#18
LeperousDust Bananaman Join Date: Jul 2006 Location: Liverpool/Edinburgh Posts: 4,817	Nah i just don't care enough I've run several of everything, checked autoruns for anything vaguely suspicious anywhere and can't see anything. If something is that well hidden, then they deserve to keep the rootkit on her PC If she was paying me something decent i might bother but nowdays she couldn't care she wants it "cheap" (not the price of the local computer shop) and if shes not paying me my worth then i'm not bothering! Everyones happy, i know i've not done a steller job but i hardly know her and i wont lose any sleep Although as of this morning the wifi will only connect with local access. Which i fear is to do with my harsh messing =/ Hmmmmm Otherwise it really does all work like brand new out the box... __________________

18-02-2010, 15:01	#19
leowyatt Chef extraordinaire Join Date: Jul 2006 Location: Infinite Loop Posts: 11,143	combofix is good we use it at work all the time __________________ "Dr Sheldon Cooper FTW!"

18-02-2010, 15:24	#20
LeperousDust Bananaman Join Date: Jul 2006 Location: Liverpool/Edinburgh Posts: 4,817	I wouldn't rely solely on it leo, it left loads of harmless yet still **** stuff behind, as with anything its just best to run every decent app under the sun and hope nothing is left unturned. Anyway quick visit to the dell website internet is working again, seems a vista update and me fiddling and not rebooting and just generally cleansing the computer obviously was going to be a driver disaster Now it seems i've fully disabled windows defender from starting on startup and when i load it, it gives me the option to turn it on with admin rights, but its off again at reboot. I did really nuke everything it seems __________________

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode