Parts Catalog Accessories Catalog How To Articles Tech Forums
Call Pelican Parts at 888-280-7799
Shopping Cart Cart | Project List | Order Status | Help



Go Back   PeachParts Mercedes-Benz Forum > General Discussions > Off-Topic Discussion

Reply
 
LinkBack Thread Tools Display Modes
  #1  
Old 03-06-2004, 11:41 PM
This space for sale
 
Join Date: Feb 2002
Posts: 3,380
Unhappy computer nightmare

Recently I had a problem with lop toolbar... but managed to find it on the computer and delete it(or atleast I hope I did). Currently, I am having weird problems. My caps lOCKS would turn on at random... and some ads pop out and the google tool bar doesn't take care of it. I also experienced things like the whole page being hilighted(sp?)/highlighted?(sp?) and having the font size in my browser increase or decrease by simply scrolling down using the scroll down wheel on my mouse. Every few seconds.. sometimes a little longer... the browser would act as if there is another window open above it. So I have to click on the browser to "bring it to the front" again. Also.. if I were to leave the computer on and exit out of all programs and browsers... I would find a pop-up ad or 2 on my desktop. All these symptoms began occuring this past week. I am using a PC computer with Windows XP home. If anyone can help me figure out whats causing all this... please let me know. I tried doing an online search.. but all of my keyterms brought up nothing.

I used the following software programs on my computer...
Ad-aware version 6.0
Spybot Search and Destroy
Spy Sweeper
Power Scan
CWShredder v. 1.5.2

I managed to remove just about every singe junk item from my hard drive.. but I still get some BS search engine each time I restart the computer. All of these problems began when I downloaded the newer MSFT messenger and recieved the stupid "LOP toolbar".



Reply With Quote
  #2  
Old 03-07-2004, 12:07 AM
Registered User
 
Join Date: Apr 2003
Location: Central PA
Posts: 52
Did you try using spybot? it is a pretty good freeware program that detects viruses and spyware running. Also you might want to check out your registery on your computer, then you can see what is loading up when your computer starts (such as what spyware and whatnot)

But if you are unfamiliar with the registry let me know and I can tell you where to look, since you defintely don't want to just go around in there deleting things (it can cause MAJOR problems)
Reply With Quote
  #3  
Old 03-07-2004, 12:12 AM
MedMech
Guest
 
Posts: n/a
restart in SAFE MODE (usually F8 when you see the first boot screen. then run the Adaware or Spybot.
Reply With Quote
  #4  
Old 03-07-2004, 04:17 PM
This space for sale
 
Join Date: Feb 2002
Posts: 3,380
Hey Sp0ck...

I tried restarting in safe mode.. but it doesn't do a difference. I will PM Philk since he's being nice enough to offer me help.

One thing I miss about win98se is that IE browser had a toolbar at the bottom that shows you the progress of the page download. On this OS, I don't have that
Reply With Quote
  #5  
Old 03-07-2004, 10:41 PM
jsmith's Avatar
Ronin
 
Join Date: Aug 2001
Location: At Sea
Posts: 1,729
-do a scan with http://housecall.trendmicro.com/ (won't delete problems)
-download hijackthis and use it to delete the dll's that were found in the scan.

hijackthis is the best tool to get rid of these pesky problems but you will have to indentify the problem yourself. last but not least - switch to mozilla and you won't have these problems anymore...
__________________
joE
1993 300e-2.8
- gone now <sigh>
"Do not adjust your mind, it's reality that's malfunctioning"
http://banners.wunderground.com/bann...L/Key_West.gif
Reply With Quote
  #6  
Old 03-08-2004, 02:09 PM
This space for sale
 
Join Date: Feb 2002
Posts: 3,380
wow... it just gets worse. I can't get any webpage to open on my IE browser, so I created a new account on XP and managed to bypass this problem.
I still feel as though SOMEONE is controlling my computer
I ran the Windows Task Manager and have the following listed:

iexplorer.exe
aim.exe
WINAMPA.EXE
EXPLORER.EXE
SPOOLSV.EXE
SVCHOST.EXE
SVCHOST.EXE
taskmgr.exe
SVCHOST.EXE
Tzatd.exe
SVCHOST.EXE
LSASS.EXE
SERVICES.EXE
WINLOGON.EXE
CSRSS.EXE
SMSS.EXE
iexplorer.exe
wuauclt.exe
kfmJ8U3.exe
System
System Idle Process


I am worried about CSRSS.EXE and SMSS.EXE... i did a search and it APPEARS to be a trojan. I would appreciate it if someone might know what I am in. I am afraid to type in passwords to certain pages in fear someone on the other end is seeing all this

$&(%*P@ MSFT
Reply With Quote
  #7  
Old 03-08-2004, 03:02 PM
Registered User
 
Join Date: Aug 2001
Location: Evansville, Indiana
Posts: 8,150
Buy a Mac.

Peter
__________________
1972 220D ?? miles
1988 300E 200,012
1987 300D Turbo killed 9/25/07, 275,000 miles
1985 Volvo 740 GLE Turobodiesel 218,000
1972 280 SE 4.5 165, 000 - It runs!
Reply With Quote
  #8  
Old 03-08-2004, 04:59 PM
MedMech
Guest
 
Posts: n/a
SMSS.EXE http://www.symantec.com/avcenter/venc/data/pf/w32.dalbug.worm.html


http://www.viruslist.com/eng/viruslist.html?id=51071

AND you have to run Hijack this, many worms evade windoze task manager.

Last edited by MedMech; 03-08-2004 at 05:05 PM.
Reply With Quote
  #9  
Old 03-08-2004, 05:16 PM
nellotare's Avatar
Registered User
 
Join Date: Jan 2001
Location: Wilmington, NC
Posts: 334
1. You can also try McAfee Avert Stinger (free to anyone)

2. search techtv.com for similar problems. they once told about a worm that keeps changing so it's not detected by adaware or spybot

3. definately use Mozilla

hope this helps
__________________
Nello Tare

1982 300D (266,001 mi.) looking and running great

Previously owned:
1976 450 SLC
1983 300D
1976 300D
also
1982 Jaguar XJ6 (loved, but gone)
Reply With Quote
  #10  
Old 03-08-2004, 06:25 PM
MedMech
Guest
 
Posts: n/a
Quote:
Originally posted by nellotare


3. definately use Mozilla

hope this helps
DEFINITLY
Reply With Quote
  #11  
Old 03-08-2004, 06:41 PM
nellotare's Avatar
Registered User
 
Join Date: Jan 2001
Location: Wilmington, NC
Posts: 334
thanx Med. i'm suuprized thets the only mispelt werd
__________________
Nello Tare

1982 300D (266,001 mi.) looking and running great

Previously owned:
1976 450 SLC
1983 300D
1976 300D
also
1982 Jaguar XJ6 (loved, but gone)
Reply With Quote
  #12  
Old 03-08-2004, 06:46 PM
MedMech
Guest
 
Posts: n/a
Quote:
Originally posted by nellotare
thanx Med. i'm suuprized thets the only mispelt werd
Shoot incidental PUN I didn't even notice the misepell I wuz in egrement.
Reply With Quote
  #13  
Old 03-08-2004, 07:22 PM
nellotare's Avatar
Registered User
 
Join Date: Jan 2001
Location: Wilmington, NC
Posts: 334
here's another free utility that I like. http://www.docsdownloads.com/enditall.htm It might show you more of what's running than task manager.. don't know.. and you might be able to block the programs you don't want to run. It is powerful, so be careful.

I also use RegCleaner http://www.docsdownloads.com/regclean.htm it can tell you what's in your start up menu and delete them if you want.
__________________
Nello Tare

1982 300D (266,001 mi.) looking and running great

Previously owned:
1976 450 SLC
1983 300D
1976 300D
also
1982 Jaguar XJ6 (loved, but gone)
Reply With Quote
  #14  
Old 03-08-2004, 07:54 PM
nellotare's Avatar
Registered User
 
Join Date: Jan 2001
Location: Wilmington, NC
Posts: 334
Just found these

the following explains a lot about csrss.exe. it's normal but Ladex (and variants) are worms that use this. several links have the "cure"

http://www.google.com/search?hl=en&lr=&ie=UTF-8&oe=UTF-8&q=CSRSS.EXE&btnG=Google+Search

they mention you might want to disable your "system restore" so it doesn't keep coming back

If you need up to date virus protection www.grisoft.com (free version and cheap pay version)

good luck
__________________
Nello Tare

1982 300D (266,001 mi.) looking and running great

Previously owned:
1976 450 SLC
1983 300D
1976 300D
also
1982 Jaguar XJ6 (loved, but gone)
Reply With Quote
  #15  
Old 03-08-2004, 08:34 PM
This space for sale
 
Join Date: Feb 2002
Posts: 3,380
Thank you all...

I *think* I got it under control now. I got a program called "Trend Micro Internet Security". I ran it and it found close to 300 infected files with trojans and viruses! None of these infected files were picked up by adaware or hijackthis. After running the program, I am not encountering any of the symptoms I had earlier (knock on wood). The only problem I have is not being able to get any webpage to show up on my IE browser. So... I am using another "account" on my XP OS. I will move all my bookmarks, files, etc. to the new account and delete the old one.

I presume that Mozilla is a browser? I will check it out to see how I like it. Probably better than that POS IE that loooooves to get $(&%ed with viruses and trojans

Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT -4. The time now is 10:14 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Search Engine Optimization by vBSEO 3.6.0
Copyright 2024 Pelican Parts, LLC - Posts may be archived for display on the Peach Parts or Pelican Parts Website -    DMCA Registered Agent Contact Page