News

Geek Question

Discussion in 'Other Off Topic Forum' started by Texas Forever, Apr 27, 2004.

  1. Texas Forever

    Texas Forever Four Time F1 World Champ
    Rossa Subscribed BANNED

    Apr 28, 2003
    46,667
    Texas!
    I'm so mad I could spit. Somehow a Yahoo toolbar has attached itself to my computer, and I can't get rid of the damn thing. Man, I hate this. I promise that I will never ever pay Yahoo a dime for anything.

    For anyone who can tell me how to get rid of this crap, I'll trade you some free tax advice or something...
     
  2. To remove this ad click here.

  3. Danysh

    Danysh Karting

    Mar 31, 2004
    149
    Dubai
    Full Name:
    Danysh Framroze
    Dale,

    Go to Control Panel -- Add / Remove programs -- scroll to the bottom (alphabetical order) click on the remove button and it'll get rid of the program.

    Cheers,

    d
     
  4. Enzo

    Enzo F1 Rookie

    Feb 14, 2002
    4,077
    MinneSOta
    Full Name:
    Pat Pasqualini
    Dr Tax You can give me a PM with your number I can try and help you out.


    Pat
     
  5. GrigioGuy

    GrigioGuy Splenda Daddy
    Global Moderator Owner

    Nov 26, 2001
    24,958
    E ' ' '/ F
    Full Name:
    Dindu Nuffin
  6. BWS550

    BWS550 Wants to be a mod

    Apr 1, 2002
    8,933
    NEW JERSEY
    Full Name:
    BRUCE WELLINGTON
    ILL HELP IF YOU RID THE I R S FOR ME FOR 10 YRS MIN.

    BRUCE
     
  7. To remove this ad click here.

  8. dantm

    dantm Formula 3

    Nov 1, 2003
    1,092
    YYZ, BOS, SFO
    Full Name:
    Dan B.
    Additionally, go to:

    http://www.lavasoft.de/

    and download their AdAware software. Install it and get the updates, after which you can do a complete system scan. You'll be amazed at the crap that is probably running on your computer without your knowledge...


    /Dan
     
  9. Ike

    Ike F1 Rookie

    Nov 4, 2003
    3,488
    there is another program called Hijackthis It can be found at download.com

    I use it along with adaware. It has found things adaware missed.
     
  10. Texas Forever

    Texas Forever Four Time F1 World Champ
    Rossa Subscribed BANNED

    Apr 28, 2003
    46,667
    Texas!
    All, thanks so much. I was able to zap the bastard. I guess one of these days I might have to read the instruction book... nah!

    And Bruce, for you, anything. Why stop at 10 years? Howza bout a life time pass? :)

    Thx, Dale
     
  11. warrenn

    warrenn Formula Junior

    Mar 12, 2004
    376
    LA for now,NJ really
    You want annoying??? what about this: whenever i enter a search in Yahoo it takes an extra 15 seconds and another window pops up with separate found links. So annoying, spybot -couldn't find it, mcafee -couldn't find it, tried hijackthis just now but I don't know what to keep and what to delete.
     
  12. To remove this ad click here.

  13. Schatten

    Schatten F1 World Champ
    Rossa Subscribed Owner

    Apr 3, 2001
    11,237
    Austin, TX
    Full Name:
    Randy
    please post the hijackthis log. thanks.
     
  14. warrenn

    warrenn Formula Junior

    Mar 12, 2004
    376
    LA for now,NJ really
    Here's the log:

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Dell\OpenManage\Client\Iap.exe
    c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\hkcmd.exe
    C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Yahoo!\browser\ybrwicon.exe
    C:\Program Files\2Wire\2PortalMon.exe
    C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
    C:\PROGRA~1\mcafee.com\agent\mcagent.exe
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    c:\progra~1\mcafee.com\vso\mcvsescn.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\AOL Companion\companion.exe
    C:\Program Files\Common Files\efax\HotTray.exe
    C:\Program Files\Common Files\efax\Dllcmd32.exe
    C:\Program Files\WinZip\WZQKPICK.EXE
    C:\WINDOWS\wanmpsvc.exe
    C:\PROGRA~1\Yahoo!\browser\ycommon.exe
    c:\PROGRA~1\mcafee.com\vso\mcshield.exe
    C:\Program Files\Outlook Express\msimn.exe
    C:\Program Files\Messenger\msmsgs.exe
    c:\progra~1\mcafee.com\vso\mcvsftsn.exe
    C:\Program Files\America Online 9.0\waol.exe
    C:\Program Files\America Online 9.0\shellmon.exe
    C:\Program Files\America Online 9.0\aolwbspd.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Microsoft Office\Office10\EXCEL.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\WINDOWS\SYSTEM32\CALC.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Microsoft Streets and Trips\Streets.exe
    C:\PROGRA~1\WINZIP\winzip32.exe


    O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_11_0.dll
    O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [YBrowser] C:\Program Files\Yahoo!\browser\ybrwicon.exe
    O4 - HKLM\..\Run: [IPInSightMonitor 01] "C:\Program Files\SBC Yahoo!\Connection Manager\IP InSight\IPMon32.exe"
    O4 - HKLM\..\Run: [2wSysTray] C:\Program Files\2Wire\2PortalMon.exe
    O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
    O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
    O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
    O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
    O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    O4 - HKLM\..\Run: [AHNUXEKR] C:\WINDOWS\AHNUXEKR.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
    O4 - Global Startup: AOL Companion.lnk = C:\Program Files\AOL Companion\companion.exe
    O4 - Global Startup: CompuServe 7.0 Tray Icon.lnk = C:\Program Files\CompuServe 7.0\cstray.exe
    O4 - Global Startup: eFax.com Tray Menu.lnk = C:\Program Files\Common Files\efax\HotTray.exe
    O4 - Global Startup: Live Menu.lnk = C:\Program Files\Common Files\efax\Dllcmd32.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O9 - Extra button: Yahoo! Login (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Login (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
    O9 - Extra button: Real.com (HKLM)
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinstc.cab
    O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
    O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab
    O16 - DPF: {9CF28A69-7659-4C51-BFD5-9ADE19E19EC3} (RegConfig Class) - http://download.yahoo.com/dl/installs/bkm/prod/yregcfg.cab
    O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://download.yahoo.com/dl/installs/ymail/ymmapi.dll
    O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://download.yahoo.com/dl/installs/yab_af.cab
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://bin.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab
    O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} (PhotosCtrl Class) - http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
     
  15. UroTrash

    UroTrash Three Time F1 World Champ
    Consultant Owner

    Jan 20, 2004
    33,636
    Purgatory
    Full Name:
    Internet Poseur
    Heres another geek question.

    I cannot get the on (my code says "off") and I cannot post pictures. Can someone PM me a little info on this. I'm sorry for my profound ignorance, but I have tried everything I know to do.

    Dr. Tax offered free tax advice, I can only offer a free prostate exam!

    Any help appreciated! mds
     
  16. Schatten

    Schatten F1 World Champ
    Rossa Subscribed Owner

    Apr 3, 2001
    11,237
    Austin, TX
    Full Name:
    Randy
    This looks like your culprit here. To remove, you can do it in Spybot under tools, or even by manually editing the registry if you are so inclined. Shouldn't take a few minutes, so if you need a hand, let me know and I'll be glad to assist via AIM/ICQ/MSN or even PM/email.

    You also have quite a bit running in the background there - and that takes up significant system resources added up together. I can help you eliminate most of them, which will take some time but will clean up things a bit on the system, but will not prevent any functionality that is already existing.

    edit: also, don't know what this is: O4 - HKLM\..\Run: [2wSysTray] C:\Program Files\2Wire\2PortalMon.exe
     
  17. Schatten

    Schatten F1 World Champ
    Rossa Subscribed Owner

    Apr 3, 2001
    11,237
    Austin, TX
    Full Name:
    Randy
     
  18. warrenn

    warrenn Formula Junior

    Mar 12, 2004
    376
    LA for now,NJ really
    Schatten,
    Thanks for the advice, But sh-- it didn't work, I used Hijackthis to locate the file you mentioned above, deleted and opened up yahoo.. sure enough.. extra 15 seconds and another pop up window... ugh.. SO ANNOYING!!!!
     
  19. Schatten

    Schatten F1 World Champ
    Rossa Subscribed Owner

    Apr 3, 2001
    11,237
    Austin, TX
    Full Name:
    Randy
    interesting. have you tried adaware as well? sometimes I find that spybot and adaware can catch most of the items together. you can get it here: www.lavasoftusa.com - but just like spybot, you need to get the updated definition file. to get the update, there's a choice under 'online' in spybot, and there's a choice for 'check for updates' in adaware.
     
  20. tvrfreak

    tvrfreak F1 Rookie
    BANNED

    Mar 31, 2003
    3,879
    Arkansas
    Full Name:
    F K
    What does the title of your window say? Is there any text in the title bar at all? Google that and it might give you a clue. Also, I use Google Toolbar, which works well. It has a pop-up blocker built in, which might stop the second window.
     
  21. Schatten

    Schatten F1 World Champ
    Rossa Subscribed Owner

    Apr 3, 2001
    11,237
    Austin, TX
    Full Name:
    Randy
    Indeed. I prefer this over the Yahoo bars, etc. http://toolbar.google.com

    Also, currently revising an existing spyware/adware faq that should help people experiencing spyware/adware issues.
     

Share This Page