Need Help Now

Knight · 06-07-2005, 04:40 PM

Sad how children these days use such foul language. Now you learned a lesson on the internet. What lesson is it you ask? Don't have such a short temper and start stuff with people (shown in the comment made to Drastik who was meerely trying to crack a joke ). I hope your computer problem is fixed though! Any more questions, just post

**Buzz1927** · 06-07-2005, 01:13 AM

Drastik, if you can't post anything useful, don't post at all.

Byteman · 06-07-2005, 03:19 AM

First off, check the following entries and have HJT fix them:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: ShowBarObj Class - {79A002FB-C126-462D-B4A7-81D6B42D1666} - C:\Program Files\ZUM\acrbat.dll
O2 - BHO: {92E1B3F7-0546-421E-9835-904D25B7BA66} - {C4F147D7-BF25-488E-A12B-EFD43E7029BF} - C:\WINDOWS\system32\winvbie.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O3 - Toolbar: VisuExplorer - {92E1B3F7-0546-421E-9835-904D25B7BA66} - C:\WINDOWS\system32\msiev32.dll
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://81.232.142.131/activex/AxisCamControl.cab

Then, still in HJT, go to the misc tools section and click the "Delete File on Reboot" button. Browse to the followin files and select them individually. When it asks to reboot, say no and goto the next file until you got them all:

C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
C:\Program Files\ZUM\acrbat.dll
C:\WINDOWS\system32\winvbie.dll
C:\WINDOWS\system32\msiev32.dll

Then reboot to safemode (press F8 key while booting up), and delete the following whole folders!

C:\Program Files\MyWaySA
C:\Program Files\MyWay
C:\Program Files\ZUM

Reboot normal and let us know if things are back to normal

Hello · 06-07-2005, 04:12 AM

It has been normal ever since I scanned it with my virus scanner. I will see if anything else happens.

**Praetor** · 06-07-2005, 08:43 PM

Drastik you've been around long enough to know better. Regardless, the point's been made and Hello -- perhaps you can take yer own advice as per post #9.

In any case, lets' get back on topic.

Byteman · 06-07-2005, 09:05 PM

agreed, but i think the topic is ended since he solved his problem, and apparently wants to keep his spyware.

Hello · 06-09-2005, 07:58 PM

Guy is still on here. IM'ed me yesterday with my new PW that I changed like 3 times, and mom's and sister's PW.

**Buzz1927** · 06-09-2005, 08:10 PM

Get Zonealarm firewall. This will ask anytime there is an attempted connection in or out of your pc.

Byteman · 06-09-2005, 08:13 PM

Quote:

Get Zonealarm firewall. This will ask anytime there is an attempted connection in or out of your pc.

for sure! and run the aimfix tool again as well.

Hello · 06-09-2005, 10:32 PM

Byteman, can you go over my log again? The stuff you say I should delete I will. And the first time he told me he hacked in, I ran my virus stuff, and it said about this Instant Access. Now its back on, with someone else. This bastard is really pissing me off. Really needing some help guys. He said "it's on for good".

06-07-2005, 03:19 AM	#3 (permalink)
Byteman Malware Destroyer Join Date: Apr 2005 Location: Hurricane Heaven... still Posts: 1,095	First off, check the following entries and have HJT fix them: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing) O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll O2 - BHO: ShowBarObj Class - {79A002FB-C126-462D-B4A7-81D6B42D1666} - C:\Program Files\ZUM\acrbat.dll O2 - BHO: {92E1B3F7-0546-421E-9835-904D25B7BA66} - {C4F147D7-BF25-488E-A12B-EFD43E7029BF} - C:\WINDOWS\system32\winvbie.dll O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file) O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL O3 - Toolbar: VisuExplorer - {92E1B3F7-0546-421E-9835-904D25B7BA66} - C:\WINDOWS\system32\msiev32.dll O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://81.232.142.131/activex/AxisCamControl.cab Then, still in HJT, go to the misc tools section and click the "Delete File on Reboot" button. Browse to the followin files and select them individually. When it asks to reboot, say no and goto the next file until you got them all: C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL C:\Program Files\ZUM\acrbat.dll C:\WINDOWS\system32\winvbie.dll C:\WINDOWS\system32\msiev32.dll Then reboot to safemode (press F8 key while booting up), and delete the following whole folders! C:\Program Files\MyWaySA C:\Program Files\MyWay C:\Program Files\ZUM Reboot normal and let us know if things are back to normal __________________ Don't byte off more than you can chew...

06-07-2005, 08:43 PM	#5 (permalink)
Praetor Administrator Join Date: Jul 2004 Location: Canada Age: 26 Posts: 19,953	Drastik you've been around long enough to know better. Regardless, the point's been made and Hello -- perhaps you can take yer own advice as per post #9. In any case, lets' get back on topic. __________________ ASUS P5K Premium WiFi-AP, Q6600@3.7 / ASUS P5ND, E6400@3.8 4GB OCz Platinum XTC 8500 / 4GB CorsairXMS2 6400 5x500GB Seagate 7200.10 / 2x500 Seagate 7200.10 OCz 8800GTX 768MB @ 630/800 / 2x Galaxy 8800GT SLI

06-07-2005, 09:05 PM	#6 (permalink)
Byteman Malware Destroyer Join Date: Apr 2005 Location: Hurricane Heaven... still Posts: 1,095	agreed, but i think the topic is ended since he solved his problem, and apparently wants to keep his spyware. __________________ Don't byte off more than you can chew...

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode

06-07-2005, 04:40 PM	#1 (permalink)
Knight New Member Join Date: Jun 2005 Posts: 18	Sad how children these days use such foul language. Now you learned a lesson on the internet. What lesson is it you ask? Don't have such a short temper and start stuff with people (shown in the comment made to Drastik who was meerely trying to crack a joke ). I hope your computer problem is fixed though! Any more questions, just post

06-07-2005, 01:13 AM	#2 (permalink)
Buzz1927 Digaredd Join Date: May 2005 Location: Melbourne AU Posts: 7,613	Drastik, if you can't post anything useful, don't post at all.

06-07-2005, 04:12 AM	#4 (permalink)
Hello banned Join Date: Mar 2005 Location: Maryland Age: 19 Posts: 562	It has been normal ever since I scanned it with my virus scanner. I will see if anything else happens.

06-09-2005, 07:58 PM	#7 (permalink)
Hello banned Join Date: Mar 2005 Location: Maryland Age: 19 Posts: 562	Guy is still on here. IM'ed me yesterday with my new PW that I changed like 3 times, and mom's and sister's PW.

06-09-2005, 08:10 PM	#8 (permalink)
Buzz1927 Digaredd Join Date: May 2005 Location: Melbourne AU Posts: 7,613	Get Zonealarm firewall. This will ask anytime there is an attempted connection in or out of your pc.

06-09-2005, 10:32 PM	#10 (permalink)
Hello banned Join Date: Mar 2005 Location: Maryland Age: 19 Posts: 562	Byteman, can you go over my log again? The stuff you say I should delete I will. And the first time he told me he hacked in, I ran my virus stuff, and it said about this Instant Access. Now its back on, with someone else. This bastard is really pissing me off. Really needing some help guys. He said "it's on for good".