my computer got hijacked!

[rudeguy]

got some stupid popup in IE saying that my system might be infected with something....no big deal. Then the thing opened up word and displayed some weird message about if my cd tray opens my system is infected...darn thing popped open my cd rom. Sounds like that aim worm that was going around, but I already tried the fix for that. Also ran adaware, spybot and norton....nothing out of the ordinary.


SOMEONE HELP ME!

UPDATE: I finally got IE back in order...turns out a simple system restore was all I had to do. Weird thing is it sounds just like the virus that someone mentioned, but I could find no trace of if.

 

[v3rrv3]

They have things that will open your CD tray without it being a virus. I remember a thing saying "A free cupholder From Coke" and when you clicked on it your CD tray opened

 

[rudeguy]

Originally posted by: v3rrv3
They have things that will open your CD tray without it being a virus. I remember a thing saying "A free cupholder From Coke" and when you clicked on it your CD tray opened

this thing goes full screen if you just ignore it...pops up some window saying hold down enter key for ten seconds to see something cool...I hit ctrl alt del and showed it something cool...I am posting on mozilla right now so I am good.

 

[MrYogi]

pls use ad-aware and spybot immediately.

 

[Amorphus]

lol. that's a known web browser trick. got another fish, I see.

j00 g0t pwn3t!

 

[rudeguy]

Originally posted by: MrYogi
pls use ad-aware and spybot immediately.

as I said in my first post, I already did that....ran the updates before I ran the search....

I can usually fix this lame crap...but this beast is pissin me off

 

[MercenaryForHire]

Originally posted by: Amorphus
lol. that's a known web browser trick. got another fish, I see.

j00 g0t pwn3t!

Yep, and the last guy who posted a link to one here is still filing off the callous from the booting the Mod Squad handed down. :beer:

- M4H

 

[n0cmonkey]

Sounds like sub7.

 

[rudeguy]

Originally posted by: Amorphus
lol. that's a known web browser trick. got another fish, I see.

j00 g0t pwn3t!

I didnt click on anything though...was just browsing AT when it started up. The only thing I have downloaded lately is the gui for SETI...grrrrr

 

[rudeguy]

Originally posted by: n0cmonkey
Sounds like sub7.

nort would have caught that....wouldnt it?

 

[ViRGE]

Originally posted by: Amorphus
lol. that's a known web browser trick. got another fish, I see.

j00 g0t pwn3t!

Yep, it's nothing more than a Javascript trick that tells IE to open the drive. You're fine, just don't go to that site again.

 

[rudeguy]

Originally posted by: ViRGE

Originally posted by: Amorphus
lol. that's a known web browser trick. got another fish, I see.

j00 g0t pwn3t!

Yep, it's nothing more than a Javascript trick that tells IE to open the drive. You're fine, just don't go to that site again.

I didnt go to any site beside AT????

 

[Turin39789]

you guy suck, you ahve spyware let me try and remember what it is called, adaware and spybot wont catch it. i get so many damn calls on this $hit

 

[Evadman]

It is an extreamly simple To do this because of API. Go API!

Set MP = CreateObject("WMPlayer.OCX.7" )
Set CDROM = MP.cdromCollection
if CDROM.Count >= 1 then
For i = 0 to CDROM.Count - 1
MP.Item(i).Eject
Next
End If

Toss it in some VB script on a web page and watch the fun! Bonus points if you have more than 1 CD Rom, as they should open in alphabetical order

 

[Turin39789]

ha its spywiper

http://forums.spywareinfo.com/index.php?showtopic=19324&st=0&#entry116174

 

[Turin39789]

heres my post from our internal forum, i would recommend you read up on it before doing anything though
" Just had my first call on this, he was a new customer and was a bit freaked out so I did some research on the problem so I could send him to the right people. It seems from an ad from doubleclick, the customers screen went all white, opened his cd-rom tray, opened up notepad basically trying to get him to download spywiper to stop the problem. From my search online I found this page

http://forums.spywareinfo.com/index.php?showtopic=19324&st=0&#en try116174

"It seems I have acquired a problem created by a company called Spy Wiper. When I attempt to go to my home page, the page is re-ddirected to a different URL, and there are 2 or 3 different windows that open. One window is a porn window, one is a note pad advertising spy wiper and causes my CD drawer to open and the other window is advertising links.

I have ran both Ad-ware 6.0 and Spybot-S&D and neither have found anything to correct. I have downloaded HijackThis and am attaching the save log. Could someone please review it and help me clear this up. I am running Windows 98. Please advise if you need any further information."


The online remedy seems to be to go into safe mode to delete system/windows32/mscbo.exe ."

 

[rudeguy]

Originally posted by: Turin39789
heres my post from our internal forum, i would recommend you read up on it before doing anything though
" Just had my first call on this, he was a new customer and was a bit freaked out so I did some research on the problem so I could send him to the right people. It seems from an ad from doubleclick, the customers screen went all white, opened his cd-rom tray, opened up notepad basically trying to get him to download spywiper to stop the problem. From my search online I found this page

http://forums.spywareinfo.com/index.php?showtopic=19324&st=0&#en try116174

"It seems I have acquired a problem created by a company called Spy Wiper. When I attempt to go to my home page, the page is re-ddirected to a different URL, and there are 2 or 3 different windows that open. One window is a porn window, one is a note pad advertising spy wiper and causes my CD drawer to open and the other window is advertising links.

I have ran both Ad-ware 6.0 and Spybot-S&D and neither have found anything to correct. I have downloaded HijackThis and am attaching the save log. Could someone please review it and help me clear this up. I am running Windows 98. Please advise if you need any further information."


The online remedy seems to be to go into safe mode to delete system/windows32/mscbo.exe ."

that is for sure what I have...but I cant find that file in safe mode or not...screw it...I am tired of IE anyways

 

[rudeguy]

DP

 

[rudeguy]

up ya go