Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

www.picsplace.com/sexy/


  • Please log in to reply
8 replies to this topic

#1 damnpicplace

damnpicplace

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:10:31 AM

Posted 31 July 2005 - 03:47 PM

hey, I am about fed up with picsplace.com. Some porn link popping up on me all the time. It even pops up if I clear history. Even when ie isnt open it pops up. I have tried clearing temp files and cookies, I tried xoft spyware and scanned it but cant figure out how to get rid of it. Please help me do this. If anyone has had this problem before how did they do it. I dont want to spend more money on spyware I already bought xoft spyware. Help....

BC AdBot (Login to Remove)

 


#2 cowsgonemadd3

cowsgonemadd3

    Feed me some spyware!


  • Banned
  • 4,557 posts
  • OFFLINE
  •  
  • Local time:11:31 AM

Posted 31 July 2005 - 04:27 PM

You have spyware problems.
Would you please download hijackthis from here:
http://www.merijn.org/files/hijackthis.zip
Then read this tutorial on how to submitt a log. It also tells you there how to unzip it so please read this tutorial before you unzip it.
http://www.bleepingcomputer.com/forums/How...s_Log-t956.html

Thanks

#3 Scarlett

Scarlett

    Bleeping Diva


  • Members
  • 7,479 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:As always I'm beside myself ;)
  • Local time:10:31 AM

Posted 01 August 2005 - 07:09 AM

Hi damnpicplace

I will be splitting off you HJT log to the HijackThis Logs and Analysis forum

You will now find it ---> here

Just please keep in mind that all Highjack This Team Members are volunteers. One must practice a little patience, when waiting for help. I promise you though that they will get to you as soon as they are able.

And above all do not attempt to work on your log yourself. And only take the advice from an official HJT Team Member. Which will show under thier name and avatar.

One more thing. Do not reply to your own post. As the Team keeps an eye out for zero replies. If they see a reply they will assume that someone is already helping you out. Then I'm afraid that you may get lost in the shuffle.

Edited by Scarlett, 01 August 2005 - 07:15 AM.

Posted Image

#4 picsplaceisNOTsexy

picsplaceisNOTsexy

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:10:31 AM

Posted 15 August 2005 - 10:45 PM

To fix this problem simply run the scan at http://www.bitdefender.com/scan8/ie.html

Then use http://www.bleepingcomputer.com/files/killbox.php to delete the file "svchost" which it will be unable to remove for you.

Make sure you only delete the file at the path which bitdefender can not get rid of on its own! DO NOT JUST SEARCH YOUR COMPUTER FOR svchost!

#5 groovicus

groovicus

  • Security Colleague
  • 9,963 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Centerville, SD
  • Local time:09:31 AM

Posted 16 August 2005 - 07:56 AM

Because svchost is also a valid file, and deleting the wrong one will break your computer.

#6 damnpicplace

damnpicplace
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:10:31 AM

Posted 16 August 2005 - 08:53 PM

OK, before I do this I want to make sure I got it.

Run scan

then use killbox program to delete "svchost"

How do I delete it at the path? I just don't want to mess my computer up especially since it's my sisters. :thumbsup:

#7 groovicus

groovicus

  • Security Colleague
  • 9,963 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Centerville, SD
  • Local time:09:31 AM

Posted 16 August 2005 - 09:05 PM

When you run the scan at btdefender, there is going to be a svchost file that can't be deleted. Take note of the path name to that file. Post that up here, and we can confirm that you have the correct one. :thumbsup:

#8 damnpicplace

damnpicplace
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:10:31 AM

Posted 17 August 2005 - 12:38 PM

:thumbsup: Ok here it is: these 2 were unable to be deleted

C:\DriverLoad\svchost.exe
Infected with: Trojan.Clicker.Delf.CN

C:\DriverLoad\svchost.exe
Disinfection failed

C:\DriverLoad\svchost.exe
Delete failed

C:\Program Files\NewDotNet\newdotnet6_38.dll
Detected with: Application.Adware.NewDotNet.B

C:\Program Files\NewDotNet\newdotnet6_38.dll
Disinfection failed

C:\Program Files\NewDotNet\newdotnet6_38.dll
Delete failed

#9 groovicus

groovicus

  • Security Colleague
  • 9,963 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Centerville, SD
  • Local time:09:31 AM

Posted 17 August 2005 - 06:02 PM

Killbox that svchost.. just paste in the full path:C:\DriverLoad\svchost.exe

The NewDotNet infection is an entirely different infection, and if you killbox that one, you are going to destroy your Internet access. Most of the time it can be easily removed from the "Add/Remove" Programs.. if you can't remove it that way, then let us know, and we will help you remove it without damaging your system. :thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users