Tech ARP Forums

Go Back   Tech ARP Forums > Software Discussion > General Software
Register
FAQ Members List Calendar Arcade Mark Forums Read

Google Web www.techarp.com forums.techarp.com

General Software This is the forum for general discussions about software.

Reply
 
LinkBack Thread Tools
Old 17th Mar 2007, 12:21 PM   #41 (permalink)
Jet
Hold me back! I can't stop posting!!!
 
Jet's Avatar
 
Join Date: 5 Sep 2004
Posts: 6,694
Reputation: 1274
Jet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud of
Rep Power: 23
Default

I search for the whole registry i think. I keep pressing "find next" until there is no result..
Jet is offline   Reply With Quote
SPONSOR

Old 17th Mar 2007, 04:30 PM   #42 (permalink)
Fenrisulfr
 
Bestia(ry)'s Avatar
 
Join Date: 11 Oct 2004
Location: Lyngvi
Posts: 2,217
Reputation: 1510
Bestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant future
Rep Power: 22
Default

Searching "whole string"?
Try searching for "fuc", not "fu*ker".
And do some search for "antivirus" or "antivirus.bat", too.
__________________
Gods. Men. Beast alike.
Bestia(ry) is offline   Reply With Quote
Old 17th Mar 2007, 09:08 PM   #43 (permalink)
Da Boss
 
Join Date: 10 Oct 2002
Location: In front of my BenQ Joybook 7000 notebook!
Posts: 29,939
Reputation: 2958
Adrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond repute
Rep Power: 65
Default

Quote:
Originally Posted by Bestia(ry) View Post
• Boot up in safe mode,
• check the registry for entries
• and check especially ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnceEx

and
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\RunOnce


for suspicious entires/some you dunno what they/it mean/s.
Manually checking these sections (that Bestia(ry) posted) is important. Look for anything suspicious.

It needs NOT be "fuc*er" or "antivirus". It just needs to be something out of place.
__________________
Dr. Adrian Wong
Tech ARP | Blog @ Tech ARP | The Free Trade Zone


DYKT : The only offshore account I have is at the sand bank?

Keep Tech ARP free! Visit our sponsors!

We need PROGRAMMERS and TECHNICAL WRITERS! Contact us if you are a hot shot programmer or technical writer!

My items for sale : 50x SD Card | Memory Stick PRO | Cyclone Energy Saver | Seiko SS watch | Tiger/Carlsberg beer jugs | Travel Speakers | Motorola V600 | Nokia N90 SOLD! | New Lowepro Mini Trekker AW

Other items for sale @ the FTZ : Zalman CNPS9500 LED @ $20 | Zalman CNPS7700 Cu @ $20 | Zalman CNPS7000 Cu @ $20 | Swarovski bracelet watches | Dell 17" LCD | Hi-Fi speakers | English DIVX movies | HP LaserJet toners! | Office chairs
Adrian Wong is offline   Reply With Quote
Old 17th Mar 2007, 11:08 PM   #44 (permalink)
Fenrisulfr
 
Bestia(ry)'s Avatar
 
Join Date: 11 Oct 2004
Location: Lyngvi
Posts: 2,217
Reputation: 1510
Bestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant future
Rep Power: 22
Default

Checked already (take a look at his screeners).
Like I've said before, as long as there isn't every single
trace of that s*it removed, it will rebuild itself over
and over again ...

Btw. ... dun ever let your fren using your PC again. ^^
__________________
Gods. Men. Beast alike.
Bestia(ry) is offline   Reply With Quote
Old 17th Mar 2007, 11:58 PM   #45 (permalink)
Da Boss
 
Join Date: 10 Oct 2002
Location: In front of my BenQ Joybook 7000 notebook!
Posts: 29,939
Reputation: 2958
Adrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond repute
Rep Power: 65
Default

Quote:
Originally Posted by Bestia(ry) View Post
Checked already (take a look at his screeners).
Like I've said before, as long as there isn't every single
trace of that s*it removed, it will rebuild itself over
and over again ...

Btw. ... dun ever let your fren using your PC again. ^^
Yeah, I just saw them. I think he has to screen for every possible iterations of the words fuc*er and antivirus, both in the registry and also the file system.
__________________
Dr. Adrian Wong
Tech ARP | Blog @ Tech ARP | The Free Trade Zone


DYKT : The only offshore account I have is at the sand bank?

Keep Tech ARP free! Visit our sponsors!

We need PROGRAMMERS and TECHNICAL WRITERS! Contact us if you are a hot shot programmer or technical writer!

My items for sale : 50x SD Card | Memory Stick PRO | Cyclone Energy Saver | Seiko SS watch | Tiger/Carlsberg beer jugs | Travel Speakers | Motorola V600 | Nokia N90 SOLD! | New Lowepro Mini Trekker AW

Other items for sale @ the FTZ : Zalman CNPS9500 LED @ $20 | Zalman CNPS7700 Cu @ $20 | Zalman CNPS7000 Cu @ $20 | Swarovski bracelet watches | Dell 17" LCD | Hi-Fi speakers | English DIVX movies | HP LaserJet toners! | Office chairs
Adrian Wong is offline   Reply With Quote
Old 18th Mar 2007, 12:46 AM   #46 (permalink)
Fenrisulfr
 
Bestia(ry)'s Avatar
 
Join Date: 11 Oct 2004
Location: Lyngvi
Posts: 2,217
Reputation: 1510
Bestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant future
Rep Power: 22
Default

Guess he won't do, but the best would be killing all
partitions and perform a fresh install ...
Like I've said, that thing is really uncommon and hardly any1
knows something about it.
Checking AVS- and spyware-libraries, it's nowhere to be found.
__________________
Gods. Men. Beast alike.
Bestia(ry) is offline   Reply With Quote
Old 18th Mar 2007, 12:51 AM   #47 (permalink)
Da Boss
 
Join Date: 10 Oct 2002
Location: In front of my BenQ Joybook 7000 notebook!
Posts: 29,939
Reputation: 2958
Adrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond reputeAdrian Wong has a reputation beyond repute
Rep Power: 65
Default

Quote:
Originally Posted by Bestia(ry) View Post
Guess he won't do, but the best would be killing all
partitions and perform a fresh install ...
Like I've said, that thing is really uncommon and hardly any1
knows something about it.
Checking AVS- and spyware-libraries, it's nowhere to be found.
Yeah, that would be the best solution, I think.
__________________
Dr. Adrian Wong
Tech ARP | Blog @ Tech ARP | The Free Trade Zone


DYKT : The only offshore account I have is at the sand bank?

Keep Tech ARP free! Visit our sponsors!

We need PROGRAMMERS and TECHNICAL WRITERS! Contact us if you are a hot shot programmer or technical writer!

My items for sale : 50x SD Card | Memory Stick PRO | Cyclone Energy Saver | Seiko SS watch | Tiger/Carlsberg beer jugs | Travel Speakers | Motorola V600 | Nokia N90 SOLD! | New Lowepro Mini Trekker AW

Other items for sale @ the FTZ : Zalman CNPS9500 LED @ $20 | Zalman CNPS7700 Cu @ $20 | Zalman CNPS7000 Cu @ $20 | Swarovski bracelet watches | Dell 17" LCD | Hi-Fi speakers | English DIVX movies | HP LaserJet toners! | Office chairs
Adrian Wong is offline   Reply With Quote
Old 18th Mar 2007, 02:08 AM   #48 (permalink)
Jet
Hold me back! I can't stop posting!!!
 
Jet's Avatar
 
Join Date: 5 Sep 2004
Posts: 6,694
Reputation: 1274
Jet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud of
Rep Power: 23
Default

Ok. will do tat after i finish my supper.. Btw if i format my C drive will it get rid of the problem?
Jet is offline   Reply With Quote
Old 18th Mar 2007, 02:10 AM   #49 (permalink)
Fenrisulfr
 
Bestia(ry)'s Avatar
 
Join Date: 11 Oct 2004
Location: Lyngvi
Posts: 2,217
Reputation: 1510
Bestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant futureBestia(ry) has a brilliant future
Rep Power: 22
Default

Only if that thing is not nested in other partitions, too.
Sorry to say, I think it is.
But you can try, you'll see if or if not.
__________________
Gods. Men. Beast alike.
Bestia(ry) is offline   Reply With Quote
Old 18th Mar 2007, 02:36 AM   #50 (permalink)
Jet
Hold me back! I can't stop posting!!!
 
Jet's Avatar
 
Join Date: 5 Sep 2004
Posts: 6,694
Reputation: 1274
Jet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud ofJet has much to be proud of
Rep Power: 23
Default

I took a look at it ady. Still the same.. Do i just delete all 4 command folders in safe boot?
Jet is offline   Reply With Quote
Reply


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +8. The time now is 05:58 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Copyright © 1998-2007 Tech ARP. All rights reserved.