Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Pc,laptop And Psp Affected By Copybook!


  • Please log in to reply
10 replies to this topic

#1 notquiteright

notquiteright

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:38 PM

Posted 25 July 2008 - 06:16 AM

Ok, im sure you've encountered poss on this before..ive tried various spyware programs, ive been into the registry, ive checked my DNS iv even formatted my hard drives and reinstalled windows..spybot is picking up on the nasty copy-book url when i open windows, but i can't seem to stop it, removed some nasty looking bits by running a search for my prefetches and deleted sum documents that told me i was blatently being redirected to other sites...both my laptop and my pc have had this problem, ive tried getting rid of any ominous looking files..leaving my modem off overnight to renew my ip ad, yet it still seems to track me down...starting to get a little frustrated!
Any help would be a great assistance, im not daft but this is just out of my knowledge base!
Thanks, Carla

BC AdBot (Login to Remove)

 


#2 HitSquad

HitSquad

    You're Bleepin' or you're Weepin'


  • Members
  • 1,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Momma
  • Local time:10:38 AM

Posted 25 July 2008 - 07:06 AM

Hi notquiteright, welcome to BC. :thumbsup:
Take a look at this thread. CARRUTHERS post in particular.

#3 notquiteright

notquiteright
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:38 PM

Posted 25 July 2008 - 07:13 AM

unfortunaly i have already seen and tried that,my ip and dns is already obtained automatically theres no malicious adresses in there neither

Edited by Orange Blossom, 25 July 2008 - 08:40 AM.
Move from XP forum to Infected forum. ~ OB


#4 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,993 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:11:38 AM

Posted 25 July 2008 - 08:42 AM

Hello notquiteright,

Can you please name the AntiSpyware programs you have tried besides Spybot?

Also, please let us know what other security programs you have installed.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#5 notquiteright

notquiteright
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:38 PM

Posted 25 July 2008 - 08:46 AM

i have used avaste antivirus, adware andmadvanced spyware remover and adwatche, i also used zone labs zone alarm and the standard windows firewall

#6 notquiteright

notquiteright
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:38 PM

Posted 29 July 2008 - 04:39 PM

OK, i have a previous post which is no longer getting any activity, copybook has got worse my laptop (direst ethernet to router) is infected as is my pc(wireless) and my sony psp (wireless) and search engine results puts me thru copy book on all three of them. I did a system reboot and formatted my pc, but didnt work, i thought maybe it would help if i changed my ip ad (difficult as i have virgin media broadband) so i altered the mac ad of the router through comand prompt and changed my ip ad, still infected...searched for prefetches and deleted a couple of files that showed me i was blatanly being redirected. This was last week, now unable to access internet of any kind on PC or laptop, and desktop is playing up on pc, I am formatting my pc yet again...would i have to do anything to BIOS? also i darent reaccess internet for fear of becoming reinfected. What i really need is somebody to guide me through the process or atleast give me a few steps, i will actually need to print this out as i am at work (have no other internet access) then take it home and do what you tell me...i will repost and keep you as up to date as I can but you must appreciate this will be a lengthy process.
Thanks to anybody willing to help.

#7 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,416 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:38 AM

Posted 29 July 2008 - 07:37 PM

Hello, I need to ask. Are you running XP,Vista or ??
Also you did a full Format and reistall of the Operating System?
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#8 notquiteright

notquiteright
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:38 PM

Posted 29 July 2008 - 10:41 PM

xp, full format,deleted hard drive partitions full format of new partition, i found and article about this zlob??! i think the error was after formatting and removing the nasties, i reconnected to my infected router..another format may be in order, also i will reset my router b4 reconnecting, i hope to work on the pc first so i wont let the laptop near the internet till i have formatted that too, you think thats a good plan? seeing as every spy/ad/anti virus program i have run fails to pick up the trojan and even if it does it comes back immediately. apparently this trojan targets wireless routers, guesses your wep key then changes all your dns settings, again can u just let me know if you think the above plan will do the trick?

#9 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,416 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:38 AM

Posted 30 July 2008 - 10:40 AM

Hello while I try to get some further info, please run a quick scan..

Please download Malwarebytes Anti-Malware and save it to your desktop.
alternate download link 1
alternate download link 2
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
  • MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
  • On the Scanner tab:
    • Make sure the "Perform Quick Scan" option is selected.
    • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
  • Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Reagardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#10 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,993 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:11:38 AM

Posted 30 July 2008 - 10:51 PM

OK, i have a previous post which is no longer getting any activity,


I've merged the previous with your new one here. :thumbsup: ~ OB
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#11 notquiteright

notquiteright
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:38 PM

Posted 02 August 2008 - 09:59 AM

Thanks for your help guys, i tried various scans..did sum searching it was a zlob..whatever that is and had gotten into my router which is why previous formats hadnt work as my pc had only got reinfected when i logged onto the internet. I reset my router and throught of the meanest password so hopefully i will not get the problem again, everything seems fixed for now...my beloved google is back up and running!
Thanks again for your input.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users