I'm Back...after a Format C
 

Yup, damn trojan got me.
Not a virus, trojan and spyware for porn dialers redirecting me to their web sites and search sites. Used SpyHunter and CW Shredder and it got rid of it all but it also took a few of my drivers. So after getting most of my important items onto my D drive, I just formatted the damn thing.

If you ever come across a url 008k.com, hit ALT F4 as fast as you possibly can. |raygun|

Fuck I hate that shit.|raygun|

Welcome back!

|waves|

Looks like the exit console on that page loads this.

"

That explains the telephone message on ICQ.


Glad you got it straightened out. |bananna| |roses| |bananna|

Cleo, more popups hit than I care to remember. I thought I had it all but didn't.

Here's what I had on my system:
WMPLAYER.exe (the main trojan imbedded here, a CSW something), EUEE.exe, Optimizer.exe, DyFuCa, XXXToolbar, Blnet.exe, NCase.exe, RPCSS.exe, IST_INSTALL.exe, BDL14025.exe and couple more but I didn't write them all down.

Worst thing is I have a popup blocker since I started using IE (always used Netscape before) but for reviews I disable it.

And thanks for the well wishes too btw. :)

Welcome back :)
Sounds like you have more than 1 partition like I have.
I use 2 HD's with 6 partitions.
C, M and P drives on the original hard drive.
D: is the C/D -
M is for music and P is for program file exe's to re install.
X, Y and Z on the largest hard drive.

Keep back ups, and anything important OFF the C Drive.

If you get a virus, such as this, simply reformat the C: drive, (yeah it sucks but hey) you won't lose anything important, like back ups.
You'll have to reinstall all your program files - but the set up files should be on another drive, like drive P - so just click and install.
(oh, and keep a text file of the license or install numbers)

It still sucks the big one - but in an afternoon, you'll be back and running.

Well - Ive been fighting the new Win32.Worm.Sasser.A all night and day - have no friggin idea how I got it but found out there's a new sec patch for XP out that gets rid of the exploit - symptoms are seein a file called ****_up.exe running in your task manager where **** are a group of numbers - it replicates itself hundreds of times. My virus software co. just got the update fix today for the live sheild, as it's just coming out but its nasty. The other symptom is it takes over TCP ports, takes over the Lsass system and if you try to delete the running file, shuts down your computer so it replicate itself again on startup :(

Wb Ramster;(

008k is another little present from our friends at CoolWebSearch |angry|

Someone ought to hunt those ^&#$& down... !

DD

I swear, at time's I just want to shut down the pc and leave it off out of fear.

|sad|

It seems even running a full shields has no effect :( On some of this crap |angry|

Yup, got redirected to that page every few minutes. |angry|

dareutwo
Yes I have several drives and backup all my important programs over there. I actually tried moving Netscape over there because I have ALL my TGP submit pages boomarked via Netscape but after the format and moving Netscape back it wouldn't work.

Anyone have any idea how to access the bookmarks from a browser moved from C drive to D and is still sitting there in D? LOL

Use the import function.

Use Netscape. :) Ya just copy the pages... bookmark.htm etc :D

In IE... "I think" ya can copy the folder over to c:\ Documents and Settings\xxxxxxxx\Favorites

One of the best things to do... is back your bookmarks up to the web occasionally... it's a good backup, and you can access them from ANYWHERE..

DD

There a few bookmark.htm pages in there but they all look like the default bookmark page. Definately not my bookmarks. :(

Oh well, I'm starting to gather my bookmarks again.

Can't you do a search for a string of text inside a file, say the URL of one of your bookmarks, to find your bookmark file?

Bookmarks are not stored in any of the Bookmark.htm html files. As a matter of fact, I looked in C:\Program Files\ at my current Netscape program where I DO have bookmarks again slowly and THAT Bookmark.htm is the same, still full of default settings or something.

The actual bookmarks must be stored in some data file somewhere but I can't find it. I am slowly getting all my bookmarks back so it's not that big a deal.

DangerDave, go take a look at your Bookmark.htm page in your ProgamFiles folder.

I always thought that Windows did the same thing as a *nix, like a Mac, and stored all the user stuff in the user's home directory.

Safari
~/Library/Safari/Bookmarks.plist

Mozilla
~/Library/Mozilla/Profiles/terri/skmpudk5.slt/bookmarks.html

IE
~/Library/Preferences/Explorer/Favorites.html

Well here's a weird one for you. Bookmarks are not stored in the Bookmark.htm file unless you specify it I guess.

Here's a look at my current bookmarks right now. Notice the red circles are two folders default from the browser upon download.
http://www.superporner.com/bookmarks.jpg

Now here is a look at the current Bookmark.htm file in the program files:
http://www.superporner.com/bookmarkfile.jpg

Those two default folders are the only 2 that show up in the Bookmark.htm folder. Notice ESPN.com? I moved that bookmark into the Personal Toolbar Folder and it shows up.

What's the point of having a Bookmark.htm file if it isn't going to store my bookmarks? LOL

Hmmmmmm That is odd... but I aint much help.. cause I dont use bookmarks..... that said.....

Ramster.. have you got Mozilla installed as well as Netscape? I just playe wwith my NN bookmarks .. and they appeared in

C:\Documents and Settings\[Win profile name]\Application Data\Mozilla\Profiles\default\ - (Win 2000)

which appears to be my Mozilla profile?

DD

DangerDave, you're onto something there.
That is Exactly where the bookmarks are.

I have both Netscape 7.1 and 4.75 and everything that is showing up on the bookmark.htm page in C\Program Files\Netscape\ is actually from the 4.75 version (God only knows why) which I only used for my mail (long story) so I guess there is no bookmark.htm for the 7.1 version I had since the old C\Documents is gone.

Oh well, the good thing is I almost have all my submit bookmarks back now anyway.