• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Xupiter question

Chaotic42

Chaotic42

Lifer
Something called Xupiter keeps getting installed on our computer here at work. This angers me. I keep using Ad-Aware to remove it, but sure enough a few days latter it's here again. I have two questions:

1. How is it installed? File sharing programs? Porn sites? I need to figure out where this came from so that we can either fire someone or at least make sure they don't do it again if it was an accident.

2. Can I remove it without rebooting into safe mode and deleting the file and then rebooting again. It's in /program files/Xupiter and the .exe and .dll are in use. This is Windows 2000 Professional.
 
It's from people clicking YES on those popups that want to install crap from various websites.
 
We have to have admin access for everyone. We use very old software that has to have full permissions or it breaks. Don't ask me why it won't work without admin access, but we tried for days to make it work.
 
Originally posted by: Chaotic42
Multi post
Click to expand...

first of all, I would try running adaware and reading the services-list log it generates.

Second, I would go to administrative tools and look at every single service that is running. Look for any service that doesn't have a full description (ALL of MSes services have full explanations as to what they do) and look at the location of the service. Try stopping it.

I would find a clean computer and compare the running processes with an infected computer. Xupiter either manifests itself as a process or as a service, and it keeps coming back because you aren't killing something correctly.
 
I got it on my computer once, wasn't from a porn site, seemed to come from a popup while I was searching for some firearm parts. Spybot Search and Destroy worked for me. 🙂
 
I think I got rid of it. I went into it's directory and edited it's files. I put spaces in them, so it can't do anything (the files are all just a single space character).

I then denied all read, write, and execute permissions on the files and the directory. I cleaned the computer *again*, and now it seems as if it is gone.
 
Originally posted by: Chaotic42
I think I got rid of it. I went into it's directory and edited it's files. I put spaces in them, so it can't do anything (the files are all just a single space character).

I then denied all read, write, and execute permissions on the files and the directory. I cleaned the computer *again*, and now it seems as if they are gone.
Click to expand...

oops!
 
Originally posted by: wicktron
Originally posted by: Chaotic42
I think I got rid of it. I went into it's directory and edited it's files. I put spaces in them, so it can't do anything (the files are all just a single space character).

I then denied all read, write, and execute permissions on the files and the directory. I cleaned the computer *again*, and now it seems as if they are gone.
Click to expand...

oops!
Click to expand...

Huh?
 
You don't need to say "yes" to any pop-ups, it just installs itself. Use Spy-Bot to get rid of it.
 
I still say it will NOT install unless you click yes to a popup. I have yet to be sent to a website that installs this thing with no permission given. I challenged someone to send me to a website where this might happen a while back, and to this day no one has been able to do so.
 
Originally posted by: Amused
I still say it will NOT install unless you click yes to a popup. I have yet to be sent to a website that installs this thing with no permission given. I challenged someone to send me to a website where this might happen a while back, and to this day no one has been able to do so.
Click to expand...

Agreed.
 
Originally posted by: Wintermute76
I never click yes to any popup unless I know exactly what it's for. I think that Xupiter will just install itself.
Click to expand...

My challenge still stands.

I challenge anyone to send me to a website that loads this crap without my permission. I'm not saying it's impossible, only that I don't believe anything until I see it.
 
Originally posted by: aves2k
It's from people clicking YES on those popups that want to install crap from various websites.
Click to expand...

*sigh* man, I keep saying this, it doesn't always prompt you. I've gotten it a dozen times, and not gotten ONE prompt to install it...
 
Get the older version of Zone Alarm, ver. 2.6.362. It's the last good free version. minendo was nice enough to host it, here. 🙂

When you install it, DON'T enter a valid e-mail address or agree to let them notify you about updates. The current versions of Zone Alarm suck nasty wind!
 
Originally posted by: geno
Originally posted by: aves2k
It's from people clicking YES on those popups that want to install crap from various websites.
Click to expand...

*sigh* man, I keep saying this, it doesn't always prompt you. I've gotten it a dozen times, and not gotten ONE prompt to install it...
Click to expand...

So send me to a site that does this. In all the years I've been surfing the intarweb, I have YET to have this loaded without my permission on my machine.
 
Originally posted by: Amused
Originally posted by: geno
Originally posted by: aves2k
It's from people clicking YES on those popups that want to install crap from various websites.
Click to expand...

*sigh* man, I keep saying this, it doesn't always prompt you. I've gotten it a dozen times, and not gotten ONE prompt to install it...
Click to expand...

So send me to a site that does this. In all the years I've been surfing the intarweb, I have YET to have this loaded without my permission on my machine.
Click to expand...

We tried that before 😉 I believe you when you say that, but I've set my security settings from high to low, and the only way around it is picking which scripts to run, and which to not run.
 
Originally posted by: Amused
Originally posted by: geno
Originally posted by: aves2k
It's from people clicking YES on those popups that want to install crap from various websites.
Click to expand...

*sigh* man, I keep saying this, it doesn't always prompt you. I've gotten it a dozen times, and not gotten ONE prompt to install it...
Click to expand...

So send me to a site that does this. In all the years I've been surfing the intarweb, I have YET to have this loaded without my permission on my machine.
Click to expand...


I've had it happen one time. I'll try and find the site.

 
You must log in or register to reply here.

TRENDING THREADS

Back
Top