|
Forums
|
|
Tecknixia
Joined: 08/15/01
Location: Denver, CO
Posts: 108
|
|
Outerinfo Network
Wednesday, October 11, 2006 at 1:30 AM
|
Quote
Top Bottom
|
I seem to have gotten something on my computer by Outerinfo Network that pops up ads at random. I had done google searches, but didn't find much info. Their website has a file you can download to stop the ads... but it doesn't work.. they go away for a while, but then come back.
I'll be looking into fixing this since it's so annoying and post here if I find out anything... also if you know the fix for this one let me know.
Most recent track: Tecknixia - Technology 2009 Version  Strm  Dnldnonzerosumgain.freeforums.org |
|
|
Tecknixia
Joined: 08/15/01
Location: Denver, CO
Posts: 108
|
|
RE: Outerinfo Network
Wednesday, October 11, 2006 at 1:36 AM
|
Quote
Top Bottom
|
Interesting... I don't know if this is related, but there is a file under my window user name folder that I didn't put there: "xx_cjrw.exe" ... and it was under the startup programs.
I did a google search and it came up with nothing... ?
---
I found a canadian radio station CJRW...
... and by accident I typed in CJWR and got some dude on a game developing forum asking about a way to restart windows from a c++ program... and claims to be a CEO... hmm... but still, that could just be totally coincidental.
cjrw.exe brings up nothing on google.
---
Crap! The ads are back...
Most recent track: Tecknixia - Technology 2009 Version Strm Dnldnonzerosumgain.freeforums.org |
|
|
doofgoblin
Joined: 01/21/02
Location: charlottesville, va
Posts: 191
|
|
RE: Outerinfo Network
Wednesday, October 11, 2006 at 5:17 AM
|
Quote
Top Bottom
|
Ultima turned me on to a program called Hijackthis. that might help you scrub it clean. Google for it, it's a free app!
|
|
|
(((stereofect)))
Joined: 09/02/01
Location: Ontario, Canada
Posts: 1333
|
|
RE: Outerinfo Network
Wednesday, October 11, 2006 at 9:01 AM
|
Quote
Top Bottom
|
Ad-Aware does a good job of getting rid of crap like that too.
www.lavasoft.com
“Any intelligent fool can make things bigger, more complex, and more violent. It takes a touch of genius — and a lot of courage — to move in the opposite direction.” Albert Einstein
|
|
|
Tecknixia
Joined: 08/15/01
Location: Denver, CO
Posts: 108
|
|
RE: Outerinfo Network
Wednesday, October 11, 2006 at 10:39 PM
|
Quote
Top Bottom
|
Yeah, I see that hijackthis is popular on computer forums and the like... it seems I'll probably go that route.
I already have ad-aware, and it doesn't even detect this.
Most recent track: Tecknixia - Technology 2009 Version Strm Dnldnonzerosumgain.freeforums.org |
|
|
(((stereofect)))
Joined: 09/02/01
Location: Ontario, Canada
Posts: 1333
|
|
RE: Outerinfo Network
Thursday, October 12, 2006 at 8:39 AM
|
Quote
Top Bottom
|
Oh, well. Can't say I didn't try.
“Any intelligent fool can make things bigger, more complex, and more violent. It takes a touch of genius — and a lot of courage — to move in the opposite direction.” Albert Einstein
|
|
|
Tecknixia
Joined: 08/15/01
Location: Denver, CO
Posts: 108
|
|
RE: Outerinfo Network
Sunday, October 22, 2006 at 12:01 PM
|
Quote
Top Bottom
|
New development. When I sat down at my computer, I noticed a file had caused iexplorer to fail. The file is:
"t.inx"
I did a google search and found that it's malware. I'll update later whether I'm successful at cleaning it and what I did.
Most recent track: Tecknixia - Technology 2009 Version Strm Dnldnonzerosumgain.freeforums.org |
|
|
A Bit Crusher
Joined: 01/26/02
Location: Tilburg
Posts: 1794
|
|
RE: Outerinfo Network
Sunday, October 22, 2006 at 1:14 PM
|
Quote
Top Bottom
|
Spybot works pretty good for me...
|
|
|
Tecknixia
Joined: 08/15/01
Location: Denver, CO
Posts: 108
|
|
RE: Outerinfo Network
Thursday, October 26, 2006 at 1:43 AM
|
Quote
Top Bottom
|
I haven't installed any programs yet... but I was curious and I did a search for t.inx ...
"t.inx" located in C:\
"T.INX-0B93C7D0.pf" located in C:\WINDOWS\Prefetch
and I found this again...
"xx_cjrw.exe" located in C:\Documents and Settings\Tecknixia
So I moved those files to a seperate folder and restarted my computer...
The ads are more crazy then ever... and I found some interesting things with Windows Task Manager
arpa.exe
duce6.exe
elitepop06.exe (I believe it caused the crazy popups)
MirarSetup_876057.exe
whagent.exe (Webhancer Agent)
pwinrpem.exe
win3207949-253829.exe
ms04829949-253.exe
ac3_0002.exe
Hmm... tried to take care of those and then found this:
b104.exe
There must be some stuff in the registry, so I believe it's time to try some software that can help.
--- update ---
Ok, I tried "System Spyware Interrogator" and it detects stuff, and removes it, but when I restart, something else shows up. Time to get HijackThis...
Most recent track: Tecknixia - Technology 2009 Version Strm Dnldnonzerosumgain.freeforums.org |
|
|
Tecknixia
Joined: 08/15/01
Location: Denver, CO
Posts: 108
|
|
RE: Outerinfo Network
Thursday, October 26, 2006 at 2:31 PM
|
Quote
Top Bottom
|
[Edited by Tecknixia - this post was full of useless information]
Most recent track: Tecknixia - Technology 2009 Version Strm Dnldnonzerosumgain.freeforums.org |
|
|
Tecknixia
Joined: 08/15/01
Location: Denver, CO
Posts: 108
|
|
RE: Outerinfo Network
Thursday, October 26, 2006 at 3:02 PM
|
Quote
Top Bottom
|
Nope, it's still creating new malicious files.
I don't have time for this right now...
[Hijackthis log REMOVED]
I'll have to take a closer look at this later.
Most recent track: Tecknixia - Technology 2009 Version Strm Dnldnonzerosumgain.freeforums.org |
|
|
ibrow
Joined: 06/15/01
Location: eastern soundboard
Posts: 22
|
|
RE: Outerinfo Network
Thursday, October 26, 2006 at 5:34 PM
|
Quote
Top Bottom
|
Hi,
I can see that you are frustrated. It sucks to have mal/spy ware on your system. I've been marginally successful at removing and restoring a system in my house. It sounds like you most likely installed some screensaver app that was supposed to make your computer look like a fish tank, but SURPRISE!! we've now taken over your computer and made it into a zombie. I definately feel your pain.
HOWEVER, (flame mode on)
This bboard is not about solving your spyware related issues. It is, as far as I can remember, a group of people dedicated to learning more about music and music related subjects.
There are many far more relevant bbs systems that are geared toward helping you fix your problem. That is not to say that someone here can't help you, but has anyone responded to your post lately with anything helpful? Posting your HijackThis log was the last straw for me personally and Gid, when have I EVER written anything like this, so you know this is serious.
OK, flame mode off.
I suggest you look into SYSTEM RESTORE first and restore to a point like 1 month or more ago at least WAY before you started having the problem. Then you may MAY be able to go in and manually clear out the junk. You should also try ALL of the spy cleaning programs. I personally use Adaware and have found it to be pretty good.
If all else fails, reformat, reinstall windows and be done with it.
When you get your system cleaned, NEVER install anything other than cool music software, graphics software and from known vendors. NEVER EVER INSTALL SCREENSAVER APPS, BROWSER TOOLBAR SHIZZLE, or any other thing that makes your computer look pretty or promises to ENHANCE your experience. You are learning now that those are just lures to get you to install the baddies.
FINALLY, Please, please don't post your HijackThis log again or I may have to commit seppuku.
------------
for those about to
rok
|
|
|
Tecknixia
Joined: 08/15/01
Location: Denver, CO
Posts: 108
|
|
RE: Outerinfo Network
Friday, October 27, 2006 at 3:05 AM
|
Quote
Top Bottom
|
First, no, I didn't install anything like that... more then likely it came from some strange website. (edit: I don't know where the outerinfo program came from, but I'm sure their "uninstall program" installed more problems.)
Second, I didn't know that this type of thing was forbidden in the Lounge... otherwise I wouldn't have bothered. The reason I made this thread was to log the fix to HELP OTHER people on here who have this on their system...
At first I didn't intend to put the hijackthis log on here, but after working on it for a few hours I grew frustrated and thought MAYBE just MAYBE someone might be able to tell me something useful. SORRY.
If you don't care about my issue, then why are you following my thread?! If you don't like it, don't read it!
Am I "cluttering up" the forums or something?
Btw, you don't have to build up your frustration and then explode on me... all you'd have to do is tell me what's appropriate or not, I'm quite reasonable and will be more than willing to work things out.
I'm upset because my intention was for this thread to be a contribution to the community... not to distract from the community. If my thread is "bringing down the neighborhood", then I won't continue.
Most recent track: Tecknixia - Technology 2009 Version Strm Dnldnonzerosumgain.freeforums.org |
|
|
(((stereofect)))
Joined: 09/02/01
Location: Ontario, Canada
Posts: 1333
|
|
RE: Outerinfo Network
Friday, October 27, 2006 at 5:30 AM
|
Quote
Top Bottom
|
Tecknixia wrote:my intention was for this thread to be a contribution to the community... not to distract from the community.
I don't have any problem with this thread. In fact I find it interesting enough that I keep coming back to see if your situation actually gets resolved or not.
I wouldn't worry about one user getting all bent about a thread that they deem inappropriate. And I'm sure that if this were inappropriate Gideon would have taken care of that a long time ago.
My only regret is I'm unable to help you. I know I wouldn't like my machine to get "hi-jacked" like yours appears to have been.
Maybe this thread should be moved to a more "tech" type forum?
Anywho..
Keep workin' on your problem and be sure to let us know if you come up with any answers.
“Any intelligent fool can make things bigger, more complex, and more violent. It takes a touch of genius — and a lot of courage — to move in the opposite direction.” Albert Einstein
|
|
|
Multi-Panel
Joined: 09/23/01
Posts: 217
|
|
RE: Outerinfo Network
Saturday, October 28, 2006 at 12:27 AM
|
Quote
Top Bottom
|
i think this is a perfectly normal topic for this forum (though indeed it could be in tech talk)
now solving these kind of things is not my cup of tea.. i am of no use 
|
|
|
Tecknixia
Joined: 08/15/01
Location: Denver, CO
Posts: 108
|
|
RE: Outerinfo Network
Monday, October 30, 2006 at 8:47 PM
|
Quote
Top Bottom
|
I'll give a simple fix list first... but I've also listed, below this list, all the steps I went through. By the way, I have Windows XP professional.
Ok, here's the simple list which I would do if I were to do it again:
1) Download and install AVG Anti-Spyware 7.5 - http://www.ewido.net/en/download/
2) When it's installed, open it, select "Update" at the top, then click on "Start update". When the update is finished, close the program.
3) Open the "My Computer" folder, slect "Tools" from the menu bar, then select "Folder Options..." Select the "Veiw" tab, under "Advanced settings" select "Show hidden files and folders" and uncheck "Hide protected operating system files (recommended)" then click "OK" and close the "My Computer" folder.
4) Right click the internet explorer icon, select properties, delete temporary internet files... you can also delete cookies if you want. Click "OK"
5) Right click "My Computer" icon, select properties, select the "System Restore" tab, and put a check in the box by "Turn off System Restore on all drives"
6) From the Start Menu, click on "Run...", type "msconfig", and click "OK". Select "Diagnostic Startup - load basic devices and services only", click "OK" and select the option that restarts your computer.
7) When the computer restarts, open AVG Anti-Spyware 7.5, click on "Scanner" at the top, then click on "Complete System Scan". When the scan is completed, select the option to delete all infections.
At this point, I'm guessing it should be clean... you could open msconfig up again and select "Normal startup". However, if you have a file on your computer that installs a virus, and that file is referred to by "startup", then it might just install the problem back onto the the computer when you restart. Hopefully AVG will take care of that for you. My first scan didn't get everything, but I wasn't in diagnostic mode, and I had operating system files hidden. It told me that "!UPDATE.EXE" or "update.exe" was trying to download files onto my computer. This is a known bad program. The windows file "Update.exe" is normal. That's when I removed "!UPDATE.EXE" from the prefetch folder, and ran AVG again in diagnostic mode, that time it worked!
Here's what I did:
Restarted computer in diagnostic mode
changed window properties to show all files, and show system files
Ran AVG Anti-Spyware 7.5
Unselected arpa from startup files
Ran hijackthis and removed arpa entry
Went through Add/Remove Programs and removed suspicious programs (or tried to)
Deleted some files from Prefetch folder
Run AVG again
Restarted with custom startup in msconfig (most services disabled and only
trusted programs in startup)
Turned off system restore
Emptied Temporary Internet Files
Ran AVG again - NOTHING FOUND
bad prefetch files -
!UPDATE.EXE-27FAECB1.pf
ARPA.EXE-36050179.pf
IPWINS.EXE-30AFCA16.pf
AC3_0002.EXE-384C45C7.pf
DUCE6.EXE-14EAD5F5.pf
MIRARSETUP_876057.EXE-3AFFF352.pf
PWINRPEM.EXE-0A797167.pf
WHAGENT.EXE-2E1B7DCA.pf
ELITEPOP06.EXE-24337A12.pf
MS04829949-253.EXE-01EAE9DA.pf
T.INX-0B93C7D0.pf
WIN3207949-253829.EXE-2BC43C38.pf
bad programs under startup -
elitepop06
pwinrpem
ipwins
etungpx
olwnczhg
ms04829949-253
Duce6
MirarSetup_876057
arpa
win3207949-253829
xx_cjrw
oqdsregm
TA_Start
Think-Adz
Stubborn programs that don't want to be removed from the Add/Remove Programs list:
command
Network Monitor
Viewpoint Manager
Most recent track: Tecknixia - Technology 2009 Version Strm Dnldnonzerosumgain.freeforums.org |
|
|
Tecknixia
Joined: 08/15/01
Location: Denver, CO
Posts: 108
|
|
RE: Outerinfo Network
Monday, October 30, 2006 at 8:55 PM
|
Quote
Top Bottom
|
Multi-Panel wrote:i think this is a perfectly normal topic for this forum (though indeed it could be in tech talk) now solving these kind of things is not my cup of tea.. i am of no use
---
oh wow, a message board glitch ^^^ that's suposed to be ludo, not me!
---
I consider "tech talk" to be conversation about music gear and software, that's why I started this here in the lounge instead.
Most recent track: Tecknixia - Technology 2009 Version Strm Dnldnonzerosumgain.freeforums.org |
|
|
|
|
