Pixalo Photography Community

Go Back   Pixalo Photography Community > Photography Forums > General photography questions and answers

General photography questions and answers: Discuss Infected with something...Something has got into my computer which keeps changing the internet settings to connect through a proxy server its affecting ...
Welcome to the Pixalo Photography Community. As a Guest you are free to browse the site, but see what extras you get as a Member here.


Reply
 
LinkBack Thread Tools Display Modes
Old 17-01-2006, 23:04   #1 (permalink)
Getting Comfy
 
Gemok's Avatar
 
Join Date: Aug 2005
Posts: 243
Gemok is on a distinguished roadGemok is on a distinguished road

Image editing O.K.
User's Gallery
Infected with something

Something has got into my computer which keeps changing the internet settings to connect through a proxy server its affecting Firefox and IE I've run a complete virus scan and spyware sweep but both came up empty I guess something has altered a registry setting somewhere anyone have a clue where to look?

Its starting to P**S me off may end up reinstalling everything just to get rid of it!
Gemok is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 17-01-2006, 23:11   #2 (permalink)
Feet under the table
 
Warspite's Avatar
 
Join Date: Sep 2005
Location: Newcastle Sunderland Middlesbrough (UK)
Posts: 1,735
Warspite will become famous soon enoughWarspite will become famous soon enoughWarspite will become famous soon enoughWarspite will become famous soon enoughWarspite will become famous soon enoughWarspite will become famous soon enoughWarspite will become famous soon enoughWarspite will become famous soon enough

Image editing O.K.
User's Gallery
Users Camera Equipment List
TBH its probably using an anonymous registry key that keeps replacing anything you trace - the simplest, and most definate way to be rid is to do a clean install. Total pain but you wont be sure if anything you find is the only thing on your system.

Not much help, but its what I've found is the simplest in the longrun.

Goodluck
Warspite is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 17-01-2006, 23:14   #3 (permalink)
Been here a while
 
evilowl's Avatar
 
Join Date: Sep 2005
Location: Marlborough
Posts: 377
evilowl will become famous soon enoughevilowl will become famous soon enoughevilowl will become famous soon enoughevilowl will become famous soon enoughevilowl will become famous soon enoughevilowl will become famous soon enough

Image editing O.K.
User's Gallery
Clean install is overkill.

Download hijack this http://www.tomcoyote.org/hjt/ but RTFM first and if you are not sure about anything do not pass go, do not collect £200 but copy and paste the log from the scan on here and we will advise what to remove.
evilowl is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 17-01-2006, 23:28   #4 (permalink)
CT
Feet under the table
 
CT's Avatar
 
Join Date: Mar 2005
Location: West Mids UK
Posts: 3,368
CT is an unknown quantity at this point

Image editing O.K.
User's Gallery
Sympathies. Hope you get it sorted. A full install is a lot of work.
CT is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 17-01-2006, 23:52   #5 (permalink)
Getting Comfy
 
Gemok's Avatar
 
Join Date: Aug 2005
Posts: 243
Gemok is on a distinguished roadGemok is on a distinguished road

Image editing O.K.
User's Gallery
Thanks for the link evilowl thats a very usefull app
I'm pretty computer savvy so know what I shouldn't be deleting just didn't know where to look in the reg there just way to may branches to look through one by one.
top of the pile was
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 64.110.74.244:8080
promtly deleted now to see if it comes back and to work out how it got there
Gemok is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 18-01-2006, 12:49   #6 (permalink)
Been here a while
 
evilowl's Avatar
 
Join Date: Sep 2005
Location: Marlborough
Posts: 377
evilowl will become famous soon enoughevilowl will become famous soon enoughevilowl will become famous soon enoughevilowl will become famous soon enoughevilowl will become famous soon enoughevilowl will become famous soon enough

Image editing O.K.
User's Gallery
I've just tried browsing to that site and been blocked by our corporate firewall (reason being: proxy avoidance)

It looks like it could be an anoymous proxy to me. But it could also be spyware related (logging sites visited, usernames & passwords etc)

http://www.dnsstuff.com/tools/whois....n.net&email=on

ivan.rodriguez@ses-americom.com
abuse@ses-americom.net
andre.christian@verestar.com
admin@ses-americom.net

^^I'm sure would all love to get a nice email detailing your findings.
evilowl is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 18-01-2006, 12:55   #7 (permalink)
GfK
Forum Regular
 
Join Date: Aug 2005
Posts: 861
GfK is on a distinguished roadGfK is on a distinguished road
User's Gallery
If I ever get any problems like this, I use:

HijackThis
AdAware *
SpyBot Search&Destroy*
CWShredder

* = both do much the same job, but each manages to find stuff that the other misses, so worth having both.
GfK is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 18-01-2006, 13:32   #8 (permalink)
Forum Regular
 
Venomator's Avatar
 
Join Date: Oct 2005
Location: Hertfordshire
Posts: 921
Venomator is on a distinguished roadVenomator is on a distinguished roadVenomator is on a distinguished road

Image editing O.K.
User's Gallery
Sympathies also Gemok - hope you are sorted now.

Not wishing to butt in on Gemok's probs ...

But hey guys - there is also some really useful reference material here ... thanx for that and it is also good to know there are peeps more than willing to help and advise on stuff other than photography !

Have used SpyBot S&D before and thought this was all we needed !

Stored for future ref ... thanks again !
Venomator is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 19-01-2006, 18:09   #9 (permalink)
Forum Regular
 
Steep's Avatar
 
Join Date: Jan 2005
Location: Inverness
Posts: 960
Steep is an unknown quantity at this point

Image editing O.K.
User's Gallery
System Restore is teh devil! switch it off
Steep is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 19-01-2006, 18:09   #10 (permalink)
GfK
Forum Regular
 
Join Date: Aug 2005
Posts: 861
GfK is on a distinguished roadGfK is on a distinguished road
User's Gallery
Quote:
Originally Posted by Steep
System Restore is teh devil! switch it off
Dunno, its got me out of a few scrapes over the years...
GfK is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 19-01-2006, 18:19   #11 (permalink)
Member
 
Join Date: Jan 2005
Location: kings hill
Posts: 4,636
Matty is an unknown quantity at this point

Image editing O.K.
User's Gallery
if you get a virus of some sort, turn off system restore before you remove it, otherwise the virus doesnt really go at all, found that out the hard way!
Matty is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 19-01-2006, 21:45   #12 (permalink)
Been here a while
 
evilowl's Avatar
 
Join Date: Sep 2005
Location: Marlborough
Posts: 377
evilowl will become famous soon enoughevilowl will become famous soon enoughevilowl will become famous soon enoughevilowl will become famous soon enoughevilowl will become famous soon enoughevilowl will become famous soon enough

Image editing O.K.
User's Gallery
Quote:
Originally Posted by Steep
System Restore is teh devil! switch it off
Indeed

Ghost 4 TEH WIN !!!!111one!!!1
evilowl is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 20-01-2006, 10:28   #13 (permalink)
dod
Feet under the table
 
dod's Avatar
 
Join Date: Feb 2005
Location: Nairn
Posts: 1,907
dod has a spectacular aura aboutdod has a spectacular aura aboutdod has a spectacular aura aboutdod has a spectacular aura aboutdod has a spectacular aura aboutdod has a spectacular aura aboutdod has a spectacular aura aboutdod has a spectacular aura aboutdod has a spectacular aura aboutdod has a spectacular aura aboutdod has a spectacular aura about

Image editing O.K.
User's Gallery
Quote:
Originally Posted by evilowl
Indeed

Ghost 4 TEH WIN !!!!111one!!!1
Ghost has saved me hours of work
dod is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 21-01-2006, 10:10   #14 (permalink)
Marcel
Guest
 
Posts: n/a
User's Gallery
I used to use Acronis True Image Pro, then found the recovery CD just didn't want to play nicely with my new Sata drives, so I use Ghost now instead.
 
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 01:20.


vBulletin Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
ReviewPost & PhotoPost vB3 Enhanced, Copyright 2003-2014 All Enthusiast, Inc.
SEO by vBSEO 3.3.0
Copyright 2006 - 2017 Pixalo.com

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196