Resend my activation email : Register : Log in 
BCF: Bike Chat Forums


Need a key generated

Reply to topic
Bike Chat Forums Index -> The Geek Zone
View previous topic : View next topic  
Author Message

Pie-Roe
World Chat Champion



Joined: 05 Feb 2007
Karma :

PostPosted: 23:17 - 12 Apr 2010    Post subject: Need a key generated Reply with quote

Need a key generated for xp defender pro, my laptop turned off it's firewall for some reason and as such I gathered 34 malicious things today which won't let me run or install anything. So trying avg is useless, and downloading things like spy doctor etc doesn't work.

So yea, XP defender pro is the only thing that works, I have to keep this firefox window open or it won't let me open a new one, or on IE.

If anyone can help massive karma Very Happy

Pyro
____________________
Previous: GSF600, FZR600 x2, ZXR750, XT600 Tenere, CB125, CZ125, ETZ 250, ER5, CCM R30, DRZ400, RF600x4, RF900x2, GS500, VTR1000F, 640 SMC, CB250 NIGHTHAWK, GT550x3, GPX750 TE610, CB500, X11x2, SV650, ZING 125, TL1000R,CB250 Superdream, CBR1100XX
 Back to top
View user's profile Send private message You must be logged in to rate posts

SoND
World Chat Champion



Joined: 10 Jul 2005
Karma :

PostPosted: 23:49 - 12 Apr 2010    Post subject: Reply with quote

XP defender pro is the virus.

https://forums.malwarebytes.org/index.php?showtopic=43672
____________________
Go back to bed - You have no rights - "Streetfighters ~ Mainstream motorcycling's crackwhore sister."
 Back to top
View user's profile Send private message You must be logged in to rate posts

Pie-Roe
World Chat Champion



Joined: 05 Feb 2007
Karma :

PostPosted: 23:56 - 12 Apr 2010    Post subject: Reply with quote

Ah, I see now. That makes much more sense as I have avg, do regular trend micro scans and have adaware.

Pyro
____________________
Previous: GSF600, FZR600 x2, ZXR750, XT600 Tenere, CB125, CZ125, ETZ 250, ER5, CCM R30, DRZ400, RF600x4, RF900x2, GS500, VTR1000F, 640 SMC, CB250 NIGHTHAWK, GT550x3, GPX750 TE610, CB500, X11x2, SV650, ZING 125, TL1000R,CB250 Superdream, CBR1100XX
 Back to top
View user's profile Send private message You must be logged in to rate posts

Pie-Roe
World Chat Champion



Joined: 05 Feb 2007
Karma :

PostPosted: 00:18 - 13 Apr 2010    Post subject: Reply with quote

Woah shit, there was 6 full pages of deleted files from the last 3 years from some removal program off that site.

Internet running rather quick now.

Cheers SoND

Pyro
____________________
Previous: GSF600, FZR600 x2, ZXR750, XT600 Tenere, CB125, CZ125, ETZ 250, ER5, CCM R30, DRZ400, RF600x4, RF900x2, GS500, VTR1000F, 640 SMC, CB250 NIGHTHAWK, GT550x3, GPX750 TE610, CB500, X11x2, SV650, ZING 125, TL1000R,CB250 Superdream, CBR1100XX
 Back to top
View user's profile Send private message You must be logged in to rate posts

SoND
World Chat Champion



Joined: 10 Jul 2005
Karma :

PostPosted: 03:39 - 15 Apr 2010    Post subject: Reply with quote

Guess what I have. Rolling Eyes

Managed to pick this virus up myself. It's a variation of Virtumonde or Vundo.

AFAIK I got it when browsing tv-links.eu, computer was scanned and clean the night before. There was a popup asking to install missing plugins, I told it no and within seconds there was a big Java 6 logo and a ton of XP Defender Pro popups.

Tried taking screenshots but they were all scrambled like below.

It shut off AVG and my web browsers but I was still able to run Spybot to get rid of some of it and return the computer to almost regular functionality.

I also suspended the process ave.exe which stopped the defender pro popups, false alarms and stopped browsers crashing.

Ran ComboFix, it deleted some stuff.

Malwarebytes detected and deleted some adware and a trojan.

Quote:
Registry Keys Infected:
HKEY_CLASSES_ROOT\dlp.dlpobj (Adware.WebDir) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\dlp.dlpobj.1 (Adware.WebDir) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{b1e22eb8-2ae8-4e8e-96ae-74f2a1764533} (Adware.WebDir) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{bdbebf18-7615-4971-9ac3-bd6ffb7ad6c1} (Adware.WebDir) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{bdbebf18-7615-4971-9ac3-bd6ffb7ad6c1} (Adware.WebDir) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\DLP.DLL (Trojan.BHO) -> Quarantined and deleted successfully.


AVG detected another Rootkit omlvhiel which I have no doubt is a randomly generated name.

I recommend you update and scan everything.

https://img.photobucket.com/albums/v612/SoND/XPSecurityToolHax.jpg
____________________
Go back to bed - You have no rights - "Streetfighters ~ Mainstream motorcycling's crackwhore sister."
 Back to top
View user's profile Send private message You must be logged in to rate posts

Ichy
World Chat Champion



Joined: 15 Jul 2005
Karma :

PostPosted: 06:41 - 15 Apr 2010    Post subject: Reply with quote

Doesn't hurt to get into the habit of creating restore points. The virus is a PITA for deleting links, stopping everything working. Reboot into safe mode, restore, and away you go.
 Back to top
View user's profile Send private message You must be logged in to rate posts

Pie-Roe
World Chat Champion



Joined: 05 Feb 2007
Karma :

PostPosted: 08:10 - 15 Apr 2010    Post subject: Reply with quote

I got it from surf the channel. I'm replacing this laptop in the next week because the screen no longer works and I have to put it through my tv, so I'm not /that/ bothered but it's stull annoying.

Pyro
____________________
Previous: GSF600, FZR600 x2, ZXR750, XT600 Tenere, CB125, CZ125, ETZ 250, ER5, CCM R30, DRZ400, RF600x4, RF900x2, GS500, VTR1000F, 640 SMC, CB250 NIGHTHAWK, GT550x3, GPX750 TE610, CB500, X11x2, SV650, ZING 125, TL1000R,CB250 Superdream, CBR1100XX
 Back to top
View user's profile Send private message You must be logged in to rate posts

SoND
World Chat Champion



Joined: 10 Jul 2005
Karma :

PostPosted: 12:09 - 16 Apr 2010    Post subject: Reply with quote

Lmao, infected again from tv-links. There must be a malicious ad somewhere because it doesn't happen every time.

Pyro can you tell me what version of firefox you're running?
Help -> About
____________________
Go back to bed - You have no rights - "Streetfighters ~ Mainstream motorcycling's crackwhore sister."
 Back to top
View user's profile Send private message You must be logged in to rate posts

Pie-Roe
World Chat Champion



Joined: 05 Feb 2007
Karma :

PostPosted: 12:48 - 16 Apr 2010    Post subject: Reply with quote

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 (.NET CLR 3.5.30729)

I got it again from surf the channel even with my antivirus and firewall.

Pyro
____________________
Previous: GSF600, FZR600 x2, ZXR750, XT600 Tenere, CB125, CZ125, ETZ 250, ER5, CCM R30, DRZ400, RF600x4, RF900x2, GS500, VTR1000F, 640 SMC, CB250 NIGHTHAWK, GT550x3, GPX750 TE610, CB500, X11x2, SV650, ZING 125, TL1000R,CB250 Superdream, CBR1100XX
 Back to top
View user's profile Send private message You must be logged in to rate posts

SoND
World Chat Champion



Joined: 10 Jul 2005
Karma :

PostPosted: 15:04 - 17 Apr 2010    Post subject: Reply with quote

Check your add-on/plugin list for Java Deployment Toolkit 6.0.108.7

I think this is what was exploited on me.


https://bugzilla.mozilla.org/show_bug.cgi?id=558584
____________________
Go back to bed - You have no rights - "Streetfighters ~ Mainstream motorcycling's crackwhore sister."
 Back to top
View user's profile Send private message You must be logged in to rate posts
Old Thread Alert!

The last post was made 16 years, 147 days ago. Instead of replying here, would creating a new thread be more useful?
  Display posts from previous:   
This page may contain affiliate links, which means we may earn a small commission if a visitor clicks through and makes a purchase. By clicking on an affiliate link, you accept that third-party cookies will be set.

Post new topic   Reply to topic    Bike Chat Forums Index -> The Geek Zone All times are GMT + 1 Hour
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum

Read the Terms of Use! - Powered by phpBB © phpBB Group
 

Debug Mode: ON - Server: birks (www) - Page Generation Time: 0.08 Sec - Server Load: 0.5 - MySQL Queries: 13 - Page Size: 65.28 Kb