OT, Someone has been attempting to Hack me?

ozzysdad

I have had some unsual activity with my "puter" for the past 2 day's, My A: Drive has been clicking on and off for no apparent reason, and the icons showing my connection which usually flash back and forth when loading pages, or reading different threads here, or checking email, Which i never open Junk mail, and never open Fwd's, those are my first to delete, even if i know you, I don't open forwards. At any rate, i ran my SBC Anti-Spy, and find that i had a Backdoor Trojan, along with this friggin IBIS Search Hijacker that i keep permanently deleting and even after a reboot, it's back. I keep a blank write protected disk in my A: drive, as i am told this keep's the hacker's from gaining access. I only visit this forum, and my secure email.

I'm not sure where i got this Backdoor Trojan, But i started having computer trouble immediately after i clicked on the thread about Prime Numbers? Coincidence, I don't know? But i suggest if any of you have been experiencing any problems since that thread was posted. I would run either your Spyware or your Antivirus to make sure.

I plan to check my activity logs and see if i can get more info..... and an ISP Locator for the address or provider and find out for sure where it came from. Anyone else having problems?

dthigpen

<< <i>But i started having computer trouble immediately after i clicked on the thread about Prime Numbers? Coincidence, I don't know? >>



Might I suggest a new tin-foil hat?

nwcs

No, but a floppy in the a drive won't make a bit of difference. The reason why deleting that spyware doesn't totally work is that they install a shell extension into windows explorer so that whenever you delete the folder (or it gets deleted using a windows shell script command) it shadow copies itself back up. The best way to delete those is to go to a dos prompt and delete them manually. Also, using something like SpyBot use the advanced tools to look at your startup items. Usually spyware puts something in there, too, to reinstall itself. Also SpyBot can help you with your search pages issue with their advanced mode. You can reassign any suspicious search entries to go to places like google.

Millertime

I use a combination of Zone Alarm and Spybot with good luck. Virus free for years now, and that's with a wife and son that use the computer also.

ozzysdad

<< <i>

<< <i>But i started having computer trouble immediately after i clicked on the thread about Prime Numbers? Coincidence, I don't know? >>



Might I suggest a new tin-foil hat? >>

Alright Doug, Don't be a Real Richard.....

dbldie55

Don't run windows.

XpipedreamR

<< <i>

<< <i>But i started having computer trouble immediately after i clicked on the thread about Prime Numbers? Coincidence, I don't know? >>



Might I suggest a new tin-foil hat? >>

ozzysdad

<< <i>Don't run windows. >>

Yeah Right, "Don't Follow Leader's and watch the parking meter's"

USMC_6115

How Do I Remove IBIS Web Search?

First, uninstall the Web Search program and WinTools program from Add/Remove Programs

1) Click on Start, Settings, Control Panel

2) Double click on Add/Remove Programs

3) Find "Web Search Toolbar" and "Win-Tools Easy Installer (By Web Search)" in the list of installed programs and click on Change/Remove to uninstall it.





During the uninstall process, you will be presented with several prompts to guide you through uninstalling the product. Read these carefully to make sure you are actually choosing to uninstall rather than keep the software.

** Note: I find it particularly funny that after the install, the company actually pops up a screen telling you its not spyware and guiding you to buy spyware removal software with what appears to be affiliate links that the company would profit from. See a screenshot of this advertisement.

5) After rebooting the computer, run HijackThis and remove any of the leftover lines shown above especially the following lines that do not seem to be uninstalled completely.

R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:PROGRA~1Toolbar oolbar.dll

O16 - DPF: {87067F04-DE4C-4688-BC3C-4FCF39D609E7} - http://download.websearch.com/Dnl/T_50024/QDow_AS2.cab

6) Next, open My Computer, Drive C, and double-click on the Program Files folder

7) Right-click and delete the folder below if it still exists

Toolbar

Also check for the presence of the C:Program FilesCommon FilesWintools directory. If this folder still remains you may have to follow the WinTools uninstall procedure.

8) IBIS WebSearch (websearch.com) should now be completely uninstalled from your computer.

dthigpen

<< <i>

<< <i>Don't run windows. >>

Yeah Right, "Don't Follow Leader's and watch the parking meter's" >>



Look out kid, it's something you did,
God knows when, but you're doing it again!

I like this game, let's answer all questions by quoting Bob Dylan!

dbldie55

<< <i>

<< <i>Don't run windows. >>

Yeah Right, "Don't Follow Leader's and watch the parking meter's" >>



If these types of problems don't bother you, why are you posting it here?

ozzysdad

<< <i>

<< <i>

<< <i>Don't run windows. >>

Yeah Right, "Don't Follow Leader's and watch the parking meter's" >>



If these types of problems don't bother you, why are you posting it here? >>

I suppose for the same reasons you are....

dthigpen

<< <i>

<< <i>

<< <i>

<< <i>Don't run windows. >>

Yeah Right, "Don't Follow Leader's and watch the parking meter's" >>



If these types of problems don't bother you, why are you posting it here? >>

I suppose for the same reasons you are.... >>



To increase your post count?

walkinstick

Just on the radio. Microsoft just released today it's new spyware for download today. Maybe it will work. Have not tried it yet.