Pages: 1 2 :: [one page] |
|
Author |
Thread Statistics | Show CCP posts - 0 post(s) |
Mezuza
Minmatar
|
Posted - 2009.07.28 03:25:00 -
[1]
My comp slowed down severely. I ran cleaners, Spy Sweeper, uninstalled unrecognizable programs, canceled all un-needed background programs.
Nothing worked.
I believe I found the culprit lying in the System32 folder. I sorted the folder by date modified, and at the top of the list were 2 videos. Completely unrecognizable, and they were last modified July 27th (today). I deleted them, and my comp resumed at normal speed. After deleting the videos, it will try to "re-install" so just delete whatever files pop-up after deletion.
Also, because I believe this was a trojan, change your passwords to EVE online, and anything else you might have typed a password for while the trojan may have been installed on your computer.
|
Zeba
Minmatar Honourable East India Trading Company
|
Posted - 2009.07.28 03:27:00 -
[2]
And for the players who were smart enough not to click any of the links you get +1 Darwin points.
Originally by: Vaden Khale He's doing the moonwalk in HEE-hee-hell.
|
Mezuza
Minmatar
|
Posted - 2009.07.28 03:31:00 -
[3]
thanks for the input
|
Mezuza
Minmatar
|
Posted - 2009.07.28 03:37:00 -
[4]
Edited by: Mezuza on 28/07/2009 03:40:05 Edited by: Mezuza on 28/07/2009 03:38:11
Originally by: Zeba And for the players who were smart enough not to click any of the links you get +1 Darwin points.
because you are so blatantly dumb, i feel i need to clear a couple things up for you.
I DID NOT click on those ****ography links. I DID click on a link where the OP claimed to have some UI Setup screen shots for others to view.
Have a nice day darwin
|
Davinel Lulinvega
|
Posted - 2009.07.28 03:40:00 -
[5]
Originally by: Mezuza Edited by: Mezuza on 28/07/2009 03:38:11
Originally by: Zeba And for the players who were smart enough not to click any of the links you get +1 Darwin points.
because you are so blatantly dumb, i feel i need to clear a couple things up for you.
I DID NOT click on those ****ography links. I DID click on a link where the OP claimed to have some UI Setup screen shots for others to view.
Because the part about realm and fire blast so subtly told you that that was a legit post about eve right?
Originally by: CCP Tuxford Now the op looks like a weirdo that can't read kekekeke!
inb4 stealth edit |
Mezuza
Minmatar
|
Posted - 2009.07.28 03:42:00 -
[6]
Originally by: Davinel Lulinvega
Originally by: Mezuza Edited by: Mezuza on 28/07/2009 03:38:11
Originally by: Zeba And for the players who were smart enough not to click any of the links you get +1 Darwin points.
because you are so blatantly dumb, i feel i need to clear a couple things up for you.
I DID NOT click on those ****ography links. I DID click on a link where the OP claimed to have some UI Setup screen shots for others to view.
Because the part about realm and fire blast so subtly told you that that was a legit post about eve right?
right because i have awful acne and no friends i know wtf that stuff is. get a life boyyy
|
Meridius Dex
Amarr Gunship Diplomacy
|
Posted - 2009.07.28 03:54:00 -
[7]
You ought to at least know enough to not be using IE at all and instead be using Firefox with the no NoScript add-on, which would mean you could click all those links and nothing whatsoever would happen to you -- like me. -- Meridius Dex Visit the Gunship Forums --
|
Davinel Lulinvega
|
Posted - 2009.07.28 03:56:00 -
[8]
Originally by: Mezuza
Originally by: Davinel Lulinvega
Originally by: Mezuza Edited by: Mezuza on 28/07/2009 03:38:11
Originally by: Zeba And for the players who were smart enough not to click any of the links you get +1 Darwin points.
because you are so blatantly dumb, i feel i need to clear a couple things up for you.
I DID NOT click on those ****ography links. I DID click on a link where the OP claimed to have some UI Setup screen shots for others to view.
Because the part about realm and fire blast so subtly told you that that was a legit post about eve right?
right because i have awful acne and no friends i know wtf that stuff is. get a life boyyy
You're awful jumpy. How cute.
Originally by: CCP Tuxford Now the op looks like a weirdo that can't read kekekeke!
inb4 stealth edit |
Mezuza
Minmatar
|
Posted - 2009.07.28 03:57:00 -
[9]
Edited by: Mezuza on 28/07/2009 03:58:28
Originally by: Meridius Dex You ought to at least know enough to not be using IE at all and instead be using Firefox with the no NoScript add-on, which would mean you could click all those links and nothing whatsoever would happen to you -- like me.
i was using mozilla.
Originally by: Davinel Lulinvega You're awful jumpy. How cute.
ya because I post a thread for people that may have clicked the links and got the trojan and all i get is these crappy replies from crappy people
|
Samaritan Azuma
Garoun Investment Bank
|
Posted - 2009.07.28 04:17:00 -
[10]
why would you click on a link from someone who is getting banned w/ their first post?
If it weren't for downtime, I wouldn't make stupid posts. |
|
Mezuza
Minmatar
|
Posted - 2009.07.28 04:57:00 -
[11]
Originally by: Samaritan Azuma why would you click on a link from someone who is getting banned w/ their first post?
what are you talking about. people, don't post if you have no idea what you're talking about
|
Agent Known
Apotheosis of Virtue
|
Posted - 2009.07.28 07:14:00 -
[12]
protip: Don't click any links on a forum just because you can, especially when the domain names are gibberish.
But yes, Firefox, adblock, noscript, and Avast make a great anti-trojan combo.
|
Furb Killer
Gallente
|
Posted - 2009.07.28 07:34:00 -
[13]
Originally by: Meridius Dex You ought to at least know enough to not be using IE at all and instead be using Firefox with the no NoScript add-on, which would mean you could click all those links and nothing whatsoever would happen to you -- like me.
Or just use IE, then also nothing whatsoever happens when you click those links. (Assuming you are not stupid enough to actually allow it to isntall the crap it wants to install).
|
Toxif
Minmatar The Hive Syndicate Vanguard.
|
Posted - 2009.07.28 07:35:00 -
[14]
Funny that I see this now on the EVE-O forums; the NAKED LADY ON SATELLITE ZOMG thing has been spammed to hell and back on the WoW forums.
But yes, +1 Darwin points if you weren't an idiot. ____________________________________________________________
|
Forranz
Shadow of xXDEATHXx
|
Posted - 2009.07.28 07:39:00 -
[15]
I can has sexleg ????
Noscript ftw, I thought it did the same as Adblock.. but.. I think I'll install it for spits and fiddles.
|
Dunan Sanis
Lone Star Academy
|
Posted - 2009.07.28 09:33:00 -
[16]
I clicked the links for the lolz.... Because I am on a Mac :)
|
me0de
Holographic Universe
|
Posted - 2009.07.28 12:02:00 -
[17]
I don't care what they say, you're a pretty smart guy Mezuza
|
Lady Aja
Caldari The White Rabbits The Gurlstas Associates
|
Posted - 2009.07.28 12:19:00 -
[18]
Edited by: Lady Aja on 28/07/2009 12:20:05
Originally by: Samaritan Azuma why would you click on a link from someone who is getting banned w/ their first post?
why would anyone wanna click on a link by spam user sdfgjsdfk3r4efnsw ??
|
hustle man
Amarr Corp 1 Allstars
|
Posted - 2009.07.28 12:30:00 -
[19]
ya because I post a thread for people that may have clicked the links and got the trojan and all i get is these crappy replies from crappy people
could have been allot worse! you could have posted this thread on CAOD!
|
SuiJuris
|
Posted - 2009.07.28 12:49:00 -
[20]
Guys, quit being ****s, the op is trying to help people and you all line up to flame him. Really? --- It's like my mom always said... "I knew I should of drowned that one." |
|
Arous Drephius
|
Posted - 2009.07.28 12:53:00 -
[21]
Originally by: SuiJuris Guys, quit being ****s, the op is trying to help people and you all line up to flame him. Really?
Anyone that was stupid enough to click the links (without suitable protection as described in the above poasts) deserves everything they get tbh.
|
Seriously Bored
Minmatar
|
Posted - 2009.07.28 13:09:00 -
[22]
Originally by: Dunan Sanis I clicked the links for the lolz.... Because I am on a Mac :)
Win.
Also, can we stop flaming the guy who's only trying to pass along a solution to help others out? I understand that the anonymity of the Internet makes all your huevos enormous, but chill out.
|
Eva Blacklist
|
Posted - 2009.07.28 13:41:00 -
[23]
Edited by: Eva Blacklist on 28/07/2009 13:41:48
Originally by: Mezuza My comp slowed down severely. I ran cleaners, Spy Sweeper, uninstalled unrecognizable programs, canceled all un-needed background programs.
Nothing worked.
I believe I found the culprit lying in the System32 folder. I sorted the folder by date modified, and at the top of the list were 2 videos. Completely unrecognizable, and they were last modified July 27th (today). I deleted them, and my comp resumed at normal speed. After deleting the videos, it will try to "re-install" so just delete whatever files pop-up after deletion.
Also, because I believe this was a trojan, change your passwords to EVE online, and anything else you might have typed a password for while the trojan may have been installed on your computer.
PROTIP: OS X, Firefox w/ NoScript
|
Sniper Wolf18
Gallente A Pretty Pony Princess General Tso's Alliance
|
Posted - 2009.07.28 15:24:00 -
[24]
Edited by: Sniper Wolf18 on 28/07/2009 15:25:15 OOOOOH A POOP throwing contest!!!
I BLAME THE KEYLOGGERS ON OP BUYING ISK
/ducks
Edit: Nevermind poop isnt wordfiltered
Second Edit: Wow i am failing hard today
And to finish, thank you for reading my sig -------------------------------------------------- If you are still reading i would probably hav posted by now |
Bongo Debbie
Minmatar Sekret Kool Klubb
|
Posted - 2009.07.28 15:25:00 -
[25]
PROTIP; DONTCLICK ----
|
Sniper Wolf18
Gallente A Pretty Pony Princess General Tso's Alliance
|
Posted - 2009.07.28 15:27:00 -
[26]
Also OP
Giving us the filenames so people who clicked the links dont **** their system to teeny tiny bits would be nice too. Also, if your computer still runs slowly, delete all of system32, the folder is a trojan And to finish, thank you for reading my sig -------------------------------------------------- If you are still reading i would probably hav posted by now |
5pinDizzy
Amarr Caldari State 1st Protectorate
|
Posted - 2009.07.28 15:35:00 -
[27]
TBH I'd consider the OP fair game after that lolful post 4.
But he don't seem too bad a guy, nice job trying to help people.
|
De'Veldrin
Minmatar Special Projects Executive
|
Posted - 2009.07.28 16:22:00 -
[28]
Originally by: Meridius Dex You ought to at least know enough to not be using IE at all and instead be using Firefox with the no NoScript add-on, which would mean you could click all those links and nothing whatsoever would happen to you -- like me.
I love my Firefox. I named it Bob. --Vel
Experience is what you get right after you need it.
|
Tiny Tove
|
Posted - 2009.07.28 16:24:00 -
[29]
Even Firefox is so poor these days it needs an add-on to stop it silently installing things... I donated $5 to NoScript.
|
Ajit Tilak
Gallente East Khanid Trading Khanid Trade Syndicate
|
Posted - 2009.07.28 19:20:00 -
[30]
To the OP. thank you for the tip...
To the children that responded, it is amazing to me that a game that requires intellect to play has so many stupid people in it. This person posts what they hope is a helpful tip and the children must run out and call him names? Please do us all a favor and go play WoW already..
|
|
Havohej
Minmatar Du'uma Fiisi Integrated Astrometrics
|
Posted - 2009.07.28 19:23:00 -
[31]
Originally by: Mezuza right because i have awful acne and no friends i know wtf that stuff is. get a life boyyy
I love how whenever some loser on the internet is confronted with people more computer savvy than themselves, that smarter person must have acne and no friends. Other variations include having no life and living in a parent or grandparent's basement/attic.
Who needs to get a life, again?
"You can still steal their stuff." - CCP Explorer
|
THE L0CK
|
Posted - 2009.07.28 19:54:00 -
[32]
Ah you mean the link about the different UI mods THAT WE DON'T HAVE. Everybody in eve gets the same boring setup.
Also I lost count earlier, how many times has that thread been posted today?
Originally by: Whitehound
If I think, but I do not.
|
B1FF
|
Posted - 2009.07.28 19:59:00 -
[33]
Edited by: B1FF on 28/07/2009 20:01:02
Originally by: Mezuza My comp slowed down severely. I ran cleaners, Spy Sweeper, uninstalled unrecognizable programs, canceled all un-needed background programs.
Nothing worked.
I believe I found the culprit lying in the System32 folder. I sorted the folder by date modified, and at the top of the list were 2 videos. Completely unrecognizable, and they were last modified July 27th (today). I deleted them, and my comp resumed at normal speed. After deleting the videos, it will try to "re-install" so just delete whatever files pop-up after deletion.
Also, because I believe this was a trojan, change your passwords to EVE online, and anything else you might have typed a password for while the trojan may have been installed on your computer.
Umm if it's trying to reinstall then you are STILL INFECTED!
For the truely paranoid I recommend links and a shell acount. Impossible to be infected.
|
Ephemeron
North Eastern Swat Pandemic Legion
|
Posted - 2009.07.28 20:05:00 -
[34]
This spammer has been hitting EVE several times before already. I think he will continue to do so and his topics will get more EVE-related so more stupid people will fall for it.
Some easy give-aways - when you open a forum and see that the same person created threads in 20+ forum subdivisions, with same topic, you SHOULD get suspicious. When you see web link with really odd domain name, you should get suspicious.
And finally, try control your urge to click every damn link on the internet.
CCP better be working on new strategy to deal with this, cause this isn't the end of it. And simply putting .exe in word filter isn't a solution. I suggest that the easiest thing CCP can do is add an alert system for GMs when forum gets 5 new topics from same character within 10 minutes. When it detects this, it should block the character posting ability until GM clears it.
|
Barakkus
Caelestis Iudicium
|
Posted - 2009.07.28 20:48:00 -
[35]
Originally by: Meridius Dex You ought to at least know enough to not be using IE at all and instead be using Firefox with the no NoScript add-on, which would mean you could click all those links and nothing whatsoever would happen to you -- like me.
Yeah cuz firefox is soooooooooo secure http://www.uscert.gov/current/index.html#mozilla_firefox_3_5_vulnerability
|
Spass Stoiantschewsky
|
Posted - 2009.07.29 04:03:00 -
[36]
Hi, I'm Spass Stoiantschewsky.
I growed prehensile tail and this thread not yet be locked. Shame.
|
Khemul Zula
Amarr Keisen Trade League
|
Posted - 2009.07.29 04:15:00 -
[37]
Originally by: Ajit Tilak ...it is amazing to me that a game that requires intellect to play has so many stupid people in it...
This is a commonly held myth about EVE. In reality not much intelligence is required to fit the standard fleet fit, lock target and fire.
Although I do laugh quite a bit when people throw out Firefox (and to a much much lesser extent Mac OS) as "I don't worry about infections!" responses. Usually the first people curled up in a ball in the corner shaking back and forth mumbling to themselves when something does in fact go wrong.
"In the beginning there was nothing, which exploded."
|
John Pirus
Minmatar Republic Military School
|
Posted - 2009.07.29 05:52:00 -
[38]
Time to reformat.
|
Lance Fighter
Amarr
|
Posted - 2009.07.29 06:14:00 -
[39]
I really laugh at all the people who post that oh they are so great cus they have a mac.
One day, someone, just to **** you all off (hell, it might just be me >.> ) is gonna write something that completely destroys your cute little osx. And when that happens, i damn well hope you are prepared for it - Because I sure as hell know that I will be among those in the front row laughing my ass off.
Why?
BECAUSE IVE GOT A WINDOWS. </semi-rant> |
Landrassa
Friendly Neighbourhood Extortion Company
|
Posted - 2009.07.29 10:58:00 -
[40]
Originally by: Khemul Zula
Originally by: Ajit Tilak ...it is amazing to me that a game that requires intellect to play has so many stupid people in it...
This is a commonly held myth about EVE. In reality not much intelligence is required to fit the standard fleet fit, lock target and fire.
Fleet fit? There's tons of pilots out there with fits that look like they simply did a Ctrl-A on their items and clicked "fit to ship" --------------------------------------------------- Recruitment thread |
|
CAPSLOCKBROKE
Sankkasen Mining Conglomerate Libertas Fidelitas
|
Posted - 2009.07.29 12:23:00 -
[41]
80%+ of this thread = Epic Fail.
Thank you Mezuza, I am sorry to hear you had the misfortune of getting a trojan, and I hope you are able to get rid of it completely.
If you find you are still having problems, try Lavasoft's Ad-Aware.
Also, if you get your account hacked, CCP has apparently been being good about reimbursements and fixing the problems.
Goodluck buddy!
|
Lrrp
Minmatar The Graduates Morsus Mihi
|
Posted - 2009.07.29 12:38:00 -
[42]
At the very least I learned about the NoScript add on by reading this post. So good job OP for making a informative post and to the people who actually contributed something.
|
Jones Bones
Beyond Divinity Inc
|
Posted - 2009.07.29 12:41:00 -
[43]
You're telling people who were dumb enough to download an unknown file from an unknown source to go edit their System32 files.
Gasoline, meet my friend fire. =================== Go Bucks! |
Barakkus
Caelestis Iudicium
|
Posted - 2009.07.29 15:25:00 -
[44]
Originally by: Lrrp At the very least I learned about the NoScript add on by reading this post. So good job OP for making a informative post and to the people who actually contributed something.
You can also do the same thing the noscript thing does for firefox with IE. Tools > Internet Options > Security Tab > Custom Level then disable whatever you want in the various sections. It's a little more granular actually. Unless you know what you're doing you might mess up being able to use legit websites as well.
|
Barakkus
Caelestis Iudicium
|
Posted - 2009.07.29 15:27:00 -
[45]
Originally by: Lance Fighter I really laugh at all the people who post that oh they are so great cus they have a mac.
One day, someone, just to **** you all off (hell, it might just be me >.> ) is gonna write something that completely destroys your cute little osx. And when that happens, i damn well hope you are prepared for it - Because I sure as hell know that I will be among those in the front row laughing my ass off.
Why?
BECAUSE IVE GOT A WINDOWS. </semi-rant>
O there are Mac viruses, they're just not very common. Unfortunately Mac users are usually too complacent to get a virus scanner for their Mac.
|
Lrrp
Minmatar The Graduates Morsus Mihi
|
Posted - 2009.07.29 15:30:00 -
[46]
Originally by: Barakkus
Originally by: Lrrp At the very least I learned about the NoScript add on by reading this post. So good job OP for making a informative post and to the people who actually contributed something.
You can also do the same thing the noscript thing does for firefox with IE. Tools > Internet Options > Security Tab > Custom Level then disable whatever you want in the various sections. It's a little more granular actually. Unless you know what you're doing you might mess up being able to use legit websites as well.
Well I'm using the NOscript and seems pretty easy to turn off scripts for a particular websit. It's been a very long time since I used IE.
|
Bish Ounen
Gallente Best Path Inc. Ethereal Dawn
|
Posted - 2009.07.30 02:14:00 -
[47]
Originally by: B1FF Umm if it's trying to reinstall then you are STILL INFECTED!
This.
if anything is reinstalling you are still infected.
Steps to clean your system:
1) DISABLE System restore. Any intelligent virus or trojan inserts itself into the restore points and then restores itself after a reboot.
2) Run Malware Bytes, remove anything it finds
3) Run Ccleaner (pronounced See-Cleaner. NOT Seeseecleaner!)
4) Run a full scan with your favorite fully updated antivirus.
5) Run Rootkit Revealer and check to see if anything odd is hidden on your system.
6) Reboot
7) Run through steps 2 - 5 again
8) If nothing new shows up you are clean.
9) Re-enable system restore and create a fresh restore point.
10) Reboot and you are done.
If that still doesn't clean it then you've got a really nasty rootkit. Back up what you can, wipe your system and reinstall. Fix the Wardec System! Upgrade the Probing System! |
|
|
|
Pages: 1 2 :: [one page] |