Welcome, Guest. Please login or register for free.
Did you miss your activation email?
Thursday 26 November 09 21:33 UTC (UK)
Welcome Home Help Surnames Library Shop Search Login Register

+  RootsChat.Com
|-+  General
| |-+  Technical Help
| | |-+  I need a TEKKI
« previous next »
Pages: [1] Print
Author Topic: I need a TEKKI  (Read 518 times)
Sisterjane
RootsChat Marquessate
********
Posts: 6891


Castle Hill Huddersfield...Im Here..Where are They


I need a TEKKI
« on: Wednesday 02 March 05 12:50 UTC (UK) »

hI all
Ialways keep " google " as my home page but the other day it just switched to a another page advertising spyware and no matter what i do it wont let me reset my homepage back to Google,not only that but every 5 mins i get pop ups telling me my computer may have a virus or it says seriously infected.
If im infected ( My norton virus protection says im not) how do i stop these pop ups and reset google.The advert is for SPYWARE BEGONE.
Any help will be much appreciated
Thanks Joe
Logged

Kershaw, Longbottom,Parvin
Areas  Huddersfield, Brighouse, Rastrick ,Thirsk, Sand Hutton
Masters in London/Surrey
Cencus information is crown copyright from www.nationalarchives.gov.uk
Biker
RootsChat Honorary
RootsChat Marquessate
**********
Posts: 4625



Re: I need a TEKKI
« Reply #1 on: Wednesday 02 March 05 13:01 UTC (UK) »

Hi joe

Sorry to hear about this.  Looks like it's hijack software - in other words, takes over your browser.  Don't click on the bogus 'you've got a virus' popup boxes, close them down via your Task manager.

I would do the following (if you haven't already):

1. Update your Norton AV definitions via Live Update.
2. Run a full Virus Scan.
3. If it picks up a Virus then do the appropriate as advised by Norton.
4. If it picks up nothing then
5. Install a spyware remover.  I use Ad-aware, but there are plenty of others.  It's free to download here: http://www.download.com/3120-20_4-0.html?qt=ad-aware&tg=dl-2001&search.x=19&search.y=13

Good luck
Jonathan
Logged

Census information is Crown Copyright http://www.nationalarchives.gov.uk
Little Nell
Global Moderator
RootsChat Marquessate
*******
Posts: 7263



Re: I need a TEKKI
« Reply #2 on: Wednesday 02 March 05 17:23 UTC (UK) »

We use both AdAware and Spybot to keep these hijackers out.  Spybot is also free:
http://www.safer-networking.org/en/index.html
Anti-virus software doesn't pick up hijacking.  It can take a while to get rid of it entirely.

Good luck.

Nell
Logged

All census information: Crown Copyright www.nationalarchives.gov.uk
Sisterjane
RootsChat Marquessate
********
Posts: 6891


Castle Hill Huddersfield...Im Here..Where are They


Re: I need a TEKKI
« Reply #3 on: Wednesday 02 March 05 17:32 UTC (UK) »

Jonathan and Nell
Thanks for those links and i took jonathans advice and downloaded ad-aware and it has stopped the pop ups but its not letting google stay as my homepage, every time i go into my internet options instead of google its changed to " about blank"  Huh
Thanks again Joe
Logged

Kershaw, Longbottom,Parvin
Areas  Huddersfield, Brighouse, Rastrick ,Thirsk, Sand Hutton
Masters in London/Surrey
Cencus information is crown copyright from www.nationalarchives.gov.uk
Little Nell
Global Moderator
RootsChat Marquessate
*******
Posts: 7263



Re: I need a TEKKI
« Reply #4 on: Wednesday 02 March 05 17:40 UTC (UK) »

That could be bad news - look at these:
http://www.securiteam.com/securityreviews/5RP0L0UD5U.html
http://www.pchell.com/support/aboutblank.shtml
How fearless are you? I seem to remember my other half helping at least two other people with this - you don't want to hear what they eventually chose to do.

You really do need some luck and patience to go with it.

Nell

Logged

All census information: Crown Copyright www.nationalarchives.gov.uk
Falkyrn
RootsChat Marquessate
********
Posts: 5247



Re: I need a TEKKI
« Reply #5 on: Wednesday 02 March 05 18:02 UTC (UK) »

First things ..

1. As you've done run adaware or spybot
2. CHECK which number your Internet connection is dialling (if you're on dial up)
3. If you can remember which piece of spyware was installed either do a google search or post the details here.

The problem with these hijackers is that if you don't remove every reference to them they can re install themselves.
Logged

Cuimhnich air na daoine o'n d'thainig thu
Sisterjane
RootsChat Marquessate
********
Posts: 6891


Castle Hill Huddersfield...Im Here..Where are They


Re: I need a TEKKI
« Reply #6 on: Thursday 03 March 05 17:00 UTC (UK) »

http://vv2.i1.topx.cc/index.php?aid=20038
Falkryn this seems t be what is causing my problem and its getting worse it looks like a search engine but all it searches for is Adult stuff.Ive just tried to put google back as my homepage and as soon as i pressed searc it just switched back to the above address
joe
Logged

Kershaw, Longbottom,Parvin
Areas  Huddersfield, Brighouse, Rastrick ,Thirsk, Sand Hutton
Masters in London/Surrey
Cencus information is crown copyright from www.nationalarchives.gov.uk
Falkyrn
RootsChat Marquessate
********
Posts: 5247



Re: I need a TEKKI
« Reply #7 on: Thursday 03 March 05 17:51 UTC (UK) »

rather than clicking on the link myself can you supply the name and I'll search and see if there are any specific instructions for getting rid of it.

Spybot is pretty good at that sort of thing but in many cases you need to be clear first before installing these programs.

what we need to know is

Operating System
browser
Name of Trojan/or log details of it
Logged

Cuimhnich air na daoine o'n d'thainig thu
slogger
RootsChat Extra
**
Posts: 27



Re: I need a TEKKI
« Reply #8 on: Sunday 06 March 05 04:17 UTC (UK) »

Oh Dear,
I`ve got about.blank too. Came on to post a message about this + other error messages and read above posts.

Additional info/questions:

1) When comp boots up the desktop files take ages to convert to proper icons then i get this message,

"windldra has caused an error in (unknown)
windldra will now close"

What does this mean?

2) When i open explorer i get strange homepage with searchbox which has about.blank in the address box. This has only happened today!

3) When i click on some desktop shortcuts for net pages get messages saying there is a error relating to IE. This began last night.

4) Loads of pop ups for spyware ads.

Before i attempt anything at all (which may well be to contact my son or his mate!!!) I need to do some urgent backups.

I am pretty ignorant about comps so don`t mind asking a what is prob a foolish question.

5) If i back up files now,  am i transferring this trojan/spyware onto the disk which will then be reinstalled if i need to run back up disk?

6) Operating system is ME. Stuck with this as thought it was less vulnerable to viruses .. is this true?
i know it makes no difference re spyware. Do i need different spyware removal instructions?


Ugh! I have been clicking on x boxes re spyware adverts. As of now using taskbar is that right?


Finally thanks for those links.

Logged
Falkyrn
RootsChat Marquessate
********
Posts: 5247



Re: I need a TEKKI
« Reply #9 on: Sunday 06 March 05 09:44 UTC (UK) »

First the bad news ..... about.blank is currently one of the hardest to get rid of.

However on the plus side

It primarily attacks Intenet explorer and should  not affect any backups you make of data files unless they are linked to explorer in any way.

It can also be bypassed by using firefox as your browser .... this DOES NOT get rid of it but it gives some breathing space.
Logged

Cuimhnich air na daoine o'n d'thainig thu
Falkyrn
RootsChat Marquessate
********
Posts: 5247



Re: I need a TEKKI
« Reply #10 on: Sunday 06 March 05 09:47 UTC (UK) »

Sorry, re Windows ME .......  Lips Sealed

It has its plus points but Windows 98 Second edition is actually a better operating system.

Windows XP is much better than either.

and I'd better add in that Linux in many of its variants is also pretty good as an operating system  Tongue
Logged

Cuimhnich air na daoine o'n d'thainig thu
Falkyrn
RootsChat Marquessate
********
Posts: 5247



Re: I need a TEKKI
« Reply #11 on: Sunday 06 March 05 09:54 UTC (UK) »

http://spyware.pcwash.com/about-blank.html

has been recommended on other computer forums for this problem

It also has some information on the page about "about.blank"
Logged

Cuimhnich air na daoine o'n d'thainig thu
trystan
Administrator
RootsChat Aristocrat
******
Posts: 1842


One of the RootsChat Caretakers


WWW
Re: I need a TEKKI
« Reply #12 on: Sunday 06 March 05 11:06 UTC (UK) »

I've seen the "about:blank" virus/worm on two of my customers PCs which I had the misfortune to try and configure. This is going back around six months ago, and can't for the life of me remember what I did exactly, sorry. At the time, most were saying that there was no real solution.

In both cases, I only managed to work around the problem, with Spybot running killing off spyware each time the computers booted up.

They've had no real problems since, except that with one of my customers, I ended up installing a PC just for internet use which I installed with SuSE Linux (a lovely operating system).

Just in Googling I've found this which is a step by step guide to removing it:

http://www.securiteam.com/securityreviews/5RP0L0UD5U.html

(whoops just noticed that Little Nell has already given this link - has anybody tried going through it - it would be great to find if it works or not)

Good luck!
Trystan
Logged

Send RootsChat a postcard:
RootsChat.com, Europa House, Barcroft Street, Bury, Lancashire, BL9 5BT
Admin Tip: Forgotten your Username or Password and would like to reply to one of these messages?  CLICK HERE to get a reminder.
AOL Users: You may need to 'cut and paste' any links you get in emails for them to work.
Falkyrn
RootsChat Marquessate
********
Posts: 5247



Re: I need a TEKKI
« Reply #13 on: Sunday 06 March 05 19:54 UTC (UK) »

The problem with "about.blank" is the hidden file which regenerates the visible dll files when they have ben deleted..... you really need to make sure you have got both sides of this trojan before rebooting.
Logged

Cuimhnich air na daoine o'n d'thainig thu
Falkyrn
RootsChat Marquessate
********
Posts: 5247



Re: I need a TEKKI
« Reply #14 on: Sunday 06 March 05 20:05 UTC (UK) »

http://support.microsoft.com/kb/267288/EN-US/

is information from microsoft about a "clean boot process" for Windows ME

this link is a series of instructions for removing the trojan

http://www.faqfarm.com/Computer/Virus/19285
Logged

Cuimhnich air na daoine o'n d'thainig thu
Pages: [1] Print 
« previous next »


[Copyright] [Shrink Link] [About Us] [Terms of Use]
All Census Lookups are Crown Copyright, National Archives for academic and non-commercial research purposes only
RootsChat.com cannot be held responsible directly or indirectly for the messages or content posted by others. Inline images in messages are the copyright of the respective linked sites.
RootsChat.com, Europa House, Bury, Lancashire, BL9 5BT

In loving memory of Eric George Davies, 1934-2009, the father of RootsChat.com































Powered by SMF 1.0.7 | SMF © 2006-2009, Simple Machines LLC
0.052:19