Go Back   Computer Forums > General Computing > Hardware
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 10-05-2007, 02:15 AM   #1
Golden Master
 
ArrizX's Avatar
 
Join Date: Apr 2005
Posts: 16,073
Send a message via MSN to ArrizX
Default Damn, what is this?

Ok, I have no idea what the hell this thing is.

Uh, some sort of virus.

AntiVir cant delete it, it just seems to keep coming back. I removed it from add-remove programs, but its still there. I delete its contents out of C, and yet it remains.

It keeps popping up in a balloon and whenvever I click it, it brings up a new IE window going to their site.

Maybe its one of those legit, but super clingy virus programs. I have no idea. But I want it gone.

Safe mode hasn't worked so far either. Nor has spybot, or crap cleaner.

This is what it keeps linking me too
http://www.antispygolden.com/?aid=1338


WTF can I do to get this off my computer. Nothing will get it, and I don't know where the directory is.


Oh ya. When I pull up msconfig, the box shuts out immediately.
__________________

__________________
. ()()()()
./l ,[_\_\ ],
l---L ()lllllll()-
()_) ()_)--o-)_)
ArrizX is offline   Reply With Quote
Old 10-05-2007, 03:05 AM   #2
Golden Master
 
mammikoura's Avatar
 
Join Date: Jul 2005
Posts: 7,459
Send a message via MSN to mammikoura
Default Re: Damn, what is this?

maybe try going to safe mode and then using msconfig to disable it? That way it shouldn't be able to shut down msconfig. You should also have some kind of program to prevent it from adding itself to the startup again. I use teatimer (comes with spybot).
__________________

__________________
0_o
mammikoura is offline   Reply With Quote
Old 10-05-2007, 07:16 AM   #3
Site Team
 
celegorm's Avatar
 
Join Date: Sep 2006
Posts: 10,713
Send a message via AIM to celegorm
Default Re: Damn, what is this?

Take out your hard drive and scan it with a different computer. There is a slim chance what you have could be hiding on a windows file that's in use thus un able to be scanned.

I would try safemode first though, soo much easier.
__________________
"as a fanboy i refuse to admit it and will pull countless things out of my butt to disprove it"

Team Thelegorm! Total Kills: 21 (i iz in uor profile, editsing your sigz)
celegorm is offline   Reply With Quote
Old 10-05-2007, 07:49 AM   #4
Daemon Poster
 
xtremezx2's Avatar
 
Join Date: Sep 2006
Posts: 915
Default Re: Damn, what is this?

if its a little icon down by the clock it sounds like smitfraud (winhound, spyfalcon, ect). try searching for smitfraud removal on google.
xtremezx2 is offline   Reply With Quote
Old 10-05-2007, 02:02 PM   #5
Fully Optimized
 
Spec's Avatar
 
Join Date: Aug 2005
Posts: 1,641
Default Re: Damn, what is this?

Hey koby, i had the same problem remember? i reinstalled windows and it still didnt do anything... but safe mode then disabling it in msconfig worked, then deleting the file helped too.
__________________
Thermaltake ARMOR/ mATX intelG33 Motherboard/4gb G.SKILL High Gaming Performance ddr2-1200/Radeon 3870 1gb edition/850w Thermaltake superduty psu

PokerDegenerate: Don't listen to these guys, I like the IDE makes it look vintage like a 68 Camaro SS...
Spec is offline   Reply With Quote
Old 10-05-2007, 02:21 PM   #6
Golden Master
 
dude_se's Avatar
 
Join Date: Nov 2004
Posts: 8,632
Send a message via AIM to dude_se Send a message via MSN to dude_se
Default Re: Damn, what is this?

hijack this should help aswell, then id also run different antiviruses and stuff, all in safe mode of course
__________________
Laptop spec: ASUS X53E, i5 2430m 2.4ghz, 3gb ram, 320gb hdd, intel hd graphics, usb 3.0
dude_se is offline   Reply With Quote
Old 10-05-2007, 02:24 PM   #7
Fully Optimized
 
Spec's Avatar
 
Join Date: Aug 2005
Posts: 1,641
Default Re: Damn, what is this?

Quote:
Originally Posted by dude_se View Post
hijack this should help aswell, then id also run different antiviruses and stuff, all in safe mode of course
yeah..something like avast.
__________________
Thermaltake ARMOR/ mATX intelG33 Motherboard/4gb G.SKILL High Gaming Performance ddr2-1200/Radeon 3870 1gb edition/850w Thermaltake superduty psu

PokerDegenerate: Don't listen to these guys, I like the IDE makes it look vintage like a 68 Camaro SS...
Spec is offline   Reply With Quote
Old 10-05-2007, 04:30 PM   #8
Golden Master
 
ArrizX's Avatar
 
Join Date: Apr 2005
Posts: 16,073
Send a message via MSN to ArrizX
Default Re: Damn, what is this?

Well, I cant get into safe mode. I automatically get the blue screen when I try safe mode.

I tried ending explorer.exe, and then using command prompt to delete the file. I found it, and its "Online Video Add-On" in the program files menu. However, its funny, because when I type "DEL C:/" In command, I can delete all contents, however, when I list the directory for the file I want to remove, It says invalid location, or could not find the location. So its not like its on the computer.

And when just open the folder, my virs program detects it, but I cant do anything but deny access to it because its in use, even then that does nothing.

Thats a good idea; hijack this. I completely forgot about that ill have to run it when I get home.
__________________
. ()()()()
./l ,[_\_\ ],
l---L ()lllllll()-
()_) ()_)--o-)_)
ArrizX is offline   Reply With Quote
Old 10-05-2007, 04:49 PM   #9
Golden Master
 
Join Date: Mar 2005
Posts: 13,091
Default Re: Damn, what is this?

That and maybe a Spybot scan. Looks like spyware to me.
lhuser is offline   Reply With Quote
Old 10-05-2007, 04:50 PM   #10
Fully Optimized
 
MooseMan's Avatar
 
Join Date: Nov 2005
Location: United States
Posts: 2,627
Send a message via AIM to MooseMan
Default Re: Damn, what is this?

Well... Try a program such as Ad-Aware (SE or 2007). You are trying virus programs mostly and it can be taken care of by spyware/adware removal programs frequently.

I would bet that Webroot's Spysweeper could remove it, but I believe the only way you can utilize spysweeper is by purchasing it, which I doubt you are interested in.
__________________

__________________
.::The top folder on the CF F@H team::.
http://fah-web.stanford.edu/cgi-bin/...&teamnum=42655
MooseMan is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 12:02 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0