PLA Forums

Other Stuff That Has Little To Do With PLA => Techinical Shit => Technical Support => Topic started by: trevelyn on August 30, 2007, 10:57:08 AM

Title: didn't i flame windows already before??
Post by: trevelyn on August 30, 2007, 10:57:08 AM
hi, uhh.. i set up a windows machine cos people really seem to defend its honor around here, and i needed a fast server to host my NDS files.  well, it is summer, and i live in my computer room anyways because of reasons that make me hate my life, which is air-conditioned.  My gf said "hey can i use your computer? its hot in the room where my pc is.." i said "yeah, whatever" then i sat on the other side of the room and continued with my macbook+ubuntu.  Then, when she was done looking at myspace, and whatever she left.  I was walking out of the room and saw an error on the screen, said that "Antispyware2006 was installed and detected errors"  WTF?!??! i opened "add/remove programs" (what a fucking joke) and sure enough applications were actually installed on the system!! SCUMWARE INSTALLED SOMETHING ON A WINDOWS BOX?!?? i removed everything that i didnt use/want.  and from that point on, when i am patching the NDS roms and decide to check out pla forums while sitting here, USING ONLY FIREFOX, IE opens up and theres pop up windows all over the place.  even just now in the middle of my sentence.  so i opened msconfig and got rid of shit that was in the startup tab, i watched taskmanager like a hawk and browsed the web in the bg, and poof more pop ups, and even print screen showed no process in the taskmanager that would cause them.. netstat shows 8000 connections to amazon ads from the forums, and the forums themselves, thats it.  i wiped all the shit from the registry in the RunOnce and Run folders..
i dont know what else to do? what a pain in the ass.  how is this shit on every fucking corporate computer in the world yet can suck so fucking badly, is beyond the scope of my imagination. does anyone know what i should do next? also can i please get rid of shit in the taskbar like the ugly little red and yellow shields?? (updates and system guard) i am truly not knowledgeable in the microsoft department.

thanks in advance windows users! - trev.
Title: Re: didn't i flame windows already before??
Post by: Tachyon on August 30, 2007, 11:35:50 AM
Dude shit like that is the reason I've committed to learning Linux. I've seen many a box like that and I've always just formatted the drive immediately, Windoze is not worth the hassle.
Title: Re: didn't i flame windows already before??
Post by: M-26-7 on August 30, 2007, 11:54:18 AM
Meh, after a while you just learn to live with the mediocrity. Just like married-life.
Title: Re: didn't i flame windows already before??
Post by: trevelyn on August 30, 2007, 12:28:10 PM
Meh, after a while you just learn to live with the mediocrity. Just like married-life.
thats what you think, im divorcing.

alrighty then here goes..

Windows XP Media Center Edition CD i fucking found in a drawer, installed it worked great, moron touches it, it's broken.  okay, I disabaled EVERYTHING in msconfig and rebooted, - no inet connection at all, nothing..
i opened firefox, and poof IE opens with a 404, looking for "FINDSTUFF.COM" yeah well, they are going to FINDSTUFF like Nikto later, running from 30 different shells, when i connect from a fucking FiOS wlan outside of Mellon Bank.  fucking assholes.. anyways, Media Center XP right? "Add remove programs doesnt list IE, but "add remove windows components does!" so i waited 15 minutes to realise that i just disabled it from the desktop, and start menu....
...

....

wtf does that mean? i cant remove it entirely?? (oh looky theres find stuff.com again) well, i tried to boot into safemode, nope. not an option, F8 brings it up but wont login. i tried to delete the folder "INTERNET EXPLORER" thinking the p.o.s. OS wouldnt be able to find it to spam me with their nonsense. No. it keeps coming back, after deletion, like a virus.  like a yahoo! msgr client. i really hate internet.  i really do, too much advertising, too much spam, too much shite and piss.

its too risky to have a windows machine here at the lab, so i got the two little exe files working under Wine, and im taking it down to simply host the drive full of roms from a REAL computer.  One that actually listens to commands and allows you to configure it and mold to where you think its simply an extension of your body. FreeBSD FTW.

btw the ugly shields/themes/and TONS of useless shit that slows down your machines can be disabled simply through msconfig.  (it makes it even boot faster!)
Title: Re: didn't i flame windows already before??
Post by: trevelyn on August 30, 2007, 12:30:59 PM
(http://i107.photobucket.com/albums/m281/trevelyn2006/fuckyouwindows.jpg?t=1188504801)
Title: Re: didn't i flame windows already before??
Post by: rbcp on August 30, 2007, 12:57:01 PM
Did you have all the service packs and updates installed?  I've been running XP on several computers ever since it came 7 years ago and I've never had any problems like this.  And I have 2 kids who use XP all the time and their computers don't end up with any spyware on them.  I've got them set up with user accounts, though, so I don't think it's possible for them to install anything.  You should also install AVG to protect against viruses and spyware.  It's free software.  http://www.grisoft.com/ (http://www.grisoft.com/)  Or the paid version of it is available on bittorrent.

I tried to help a friend of mine recently who's got major XP spyware and/or virus issues.  I tried installing AVG and some other anti-virus software, but the computer wouldn't take either of them.  We're gonna wipe it all out this weekend and reinstall.  I think XP is a great OS and I've never had much of a reason to hate it.  You just have to keep some kind of anti-virus program running on it and/or keep people off your computer who let those kind of things happen.
Title: Re: didn't i flame windows already before??
Post by: gangals on August 30, 2007, 01:16:39 PM
Trev, here's a program that is able to unlock the hold a program will have on a file when it prevents you from accessing it.

http://ccollomb.free.fr/unlocker


Also for spyware, I advise using SUPERAntiSpyware and ATF Cleaner in safemode.

Once you've gone through msconfig, I advise going into Services and disabling all the crap you don't need.
Title: Re: didn't i flame windows already before??
Post by: Lestan Gregor on August 30, 2007, 01:26:21 PM
Another trick you can try is disabling explorer.exe, since winantispyware is a type of Vundoware. Vundoware can't run while explorer.exe is running.
Title: Re: didn't i flame windows already before??
Post by: trevelyn on August 30, 2007, 02:47:46 PM
omg i lost my mind!! ???

i tried everything i could, i felt like a surgeon under a lamp trying to save a dying man.. i get too fond of my machines.  after all, i talk to them, and pretend they talk back to me.  i watched taskmanager again, this time i pressed alt+ctrl+del instantly as windows opened, and watched and pressed print screen when something new came up, and i found something new.  rfeugosrgbv.exe or something, and then i re-opened msconfig  and there was something *new* in it! ???
so theres now a rogue program (that doesnt show up in taskmanger under processes) that keeps making new dll's that control ie.  why couldnt there be "ps aux" or "kill -9" ??? Brad, and everyone i realise that you guys are good with windows, you told me before, thats why i was asking for advice i didnt mean to re-flame it, i was just so pissed off.  i pay mortgage for a whole house, but all my shit is jammed into one room, and somehow it still got fucked with.  i should pay someone to hug me.  I dont think i feel like going through all the trouble of dl and installing spyware, after all that.. i have 3 drives in that machine 20GB each, its sole purpose was to host the DS ROMs/Backups.  why didnt it ask me for an admin passwd when i installed it ??? i cant log in safe mode as "administrator" if thats even a REAL acct.  cos it asks for a passwd that isnt blank!!  i think i know the smb.conf file like, i think i memorized it by now anyways! so i will just switch, and give the media center edition cd to my brother or mom or something.  tanks guys. 
Title: Re: didn't i flame windows already before??
Post by: Lestan Gregor on August 30, 2007, 03:02:47 PM
If you give me 20 bucks I'll hug you.
Title: Re: didn't i flame windows already before??
Post by: trevelyn on August 30, 2007, 03:53:22 PM
If you give me 20 bucks I'll hug you.
where do you live?
Title: Re: didn't i flame windows already before??
Post by: mr_doc on August 30, 2007, 04:01:12 PM
I use 'hijack this' when people ask me to fix those problems. Download that.
Title: Re: didn't i flame windows already before??
Post by: PHISH-PHREAK on August 30, 2007, 06:25:46 PM
I disabaled EVERYTHING

My own mediocre attempt at humor has been highly amusing to myself. bald
Title: Re: didn't i flame windows already before??
Post by: Jordi on August 30, 2007, 06:32:56 PM
Did you have all the service packs and updates installed?  I've been running XP on several computers ever since it came 7 years ago and I've never had any problems like this.  And I have 2 kids who use XP all the time and their computers don't end up with any spyware on them.  I've got them set up with user accounts, though, so I don't think it's possible for them to install anything.  You should also install AVG to protect against viruses and spyware.  It's free software.  http://www.grisoft.com/ (http://www.grisoft.com/)  Or the paid version of it is available on bittorrent.

I tried to help a friend of mine recently who's got major XP spyware and/or virus issues.  I tried installing AVG and some other anti-virus software, but the computer wouldn't take either of them.  We're gonna wipe it all out this weekend and reinstall.  I think XP is a great OS and I've never had much of a reason to hate it.  You just have to keep some kind of anti-virus program running on it and/or keep people off your computer who let those kind of things happen.

I agree! I love Windows XP and have nothing against it. The version of Windows Vista I'm using isn't all that bad either. From my experience with Spyware and Windows, good luck! I would just re-format and protect your system the first time. You could always try going into safe mode and running Spybot Search and Destroy plus checking the registry and startup folder... That MIGHT work, but even so, it is a gamble.
Title: Re: didn't i flame windows already before??
Post by: Zazen on August 30, 2007, 06:58:07 PM
why couldnt there be "ps aux" or "kill -9" ???

http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/PsTools.mspx - I use these tools a lot.

I find the best way to get rid of spyware is to just search for files modified in the last day (assuming you just recently got infected). You'll find an assload of mysterious-looking .exe's and .dll's. Delete them. When some of them refuse to be deleted, use MoveFile (http://www.microsoft.com/technet/sysinternals/SystemInformation/PendMoves.mspx) to schedule them for deletion and reboot. I have seen only one piece of spyware that will actually sense a pfro and get rid of the entry for it, which I had to delete by booting off a CD. I bet this gets more common, though.
Title: Re: didn't i flame windows already before??
Post by: trevelyn on August 31, 2007, 06:40:22 AM
Did you have all the service packs and updates installed? 
yeah i did.
Quote
I agree! I love Windows XP You could always try going into safe mode
is that a joke? i COULDNT USE SAFE MODE.
Quote
You'll find an assload of mysterious-looking .exe's and .dll's.
yeah, everything is so cryptic looking, but the thing is, if i deleted all the new libs, something would make more.
see:
Quote
so theres now a rogue program (that doesnt show up in taskmanger under processes) that keeps making new dll's that control ie.





fs sa rlidwka

Title: Re: didn't i flame windows already before??
Post by: gangals on August 31, 2007, 07:34:26 AM
If you need to reset the admin password for XP, try Active Password Changer 3.0. that's in Hiren's Boot CD

http://www.iso-tek.org/index.php?showtopic=11627

I'll PM a direct link.
Title: Re: didn't i flame windows already before??
Post by: mr_doc on August 31, 2007, 10:47:11 AM
If you need to change the background image, right click the desktop, then choose properties. From there you can put any image you want as your background.
Title: Re: didn't i flame windows already before??
Post by: Wino on August 31, 2007, 01:47:00 PM
You seem to be on the right track with disabling everything from boot via msconfig. However, if windows is giving you too much trouble, as always, format and reinstall. If you have several disks, chances are windows only exists on one of them. And if you dedicate a drive towards backups, you have a few dvd copies laying around? (hopefully).

Windows is a disposable operating system. It's basically intended to be reinstalled multiple times. While, yes, it is possible to save basically anything (hence the server versions), it's not always worth the effort unless you have something that can not be replaced (like data).

While I'm keeping myself on some sort of leash here, your airhead girlfriend should never use a computer that has any sort of importance, especially when it has anything to do with social networking sites. My friends and family all understand that my computers are hands off, and if you need to do anything, you're going to be using my laptop (OpenBSD, Athlon 2400+, 512MB DDR1, 120GB HD), under a restricted guest account.

To actually remedy your problem, good luck. My suggestion would be stopping all files from booting, absolutely everything. Anything that boots after that, google the process name and find out what it's purpose is. If it's useless, oust it. If you can't easily remove it, google some more and find out what it takes to remove it (MSBLASTER, for instance, was a particularly difficult bitch to remove, you actually had to download a removal program). http://www.processlibrary.com/ is a good resource to find out what should and shouldn't be running (check the program names from within taskmgr). If you still can't win over the virii, try a few of those hit-or-miss programs like hijackthis and antispyware-what-ever-the-fuck. If you can uninstall it easily, it's usually not worth the effort, format and start new again.
Title: Re: didn't i flame windows already before??
Post by: Zazen on August 31, 2007, 06:35:02 PM
Quote
You'll find an assload of mysterious-looking .exe's and .dll's.
yeah, everything is so cryptic looking, but the thing is, if i deleted all the new libs, something would make more.
see:
Quote
so theres now a rogue program (that doesnt show up in taskmanger under processes) that keeps making new dll's that control ie.

Yes, but that something is a file. If you delete all of them, you'll delete the thing that's making more.

Find the mothership by seeing what loads on startup. Try Autoruns for this (http://www.microsoft.com/technet/sysinternals/Utilities/AutoRuns.mspx). You can actually set it to verify genuine microsoft processes and hide them from the list it displays. You won't be able to remove some autorun entries you find because the spyware will re-create them, but you can go after the files they point to. Write down the path and filename, boot off a CD, and delete.
Title: Re: didn't i flame windows already before??
Post by: trevelyn on September 01, 2007, 09:56:30 AM
Quote
You'll find an assload of mysterious-looking .exe's and .dll's.
yeah, everything is so cryptic looking, but the thing is, if i deleted all the new libs, something would make more.
see:
Quote
so theres now a rogue program (that doesnt show up in taskmanger under processes) that keeps making new dll's that control ie.

Yes, but that something is a file. If you delete all of them, you'll delete the thing that's making more.

Find the mothership by seeing what loads on startup. Try Autoruns for this (http://www.microsoft.com/technet/sysinternals/Utilities/AutoRuns.mspx). You can actually set it to verify genuine microsoft processes and hide them from the list it displays. You won't be able to remove some autorun entries you find because the spyware will re-create them, but you can go after the files they point to. Write down the path and filename, boot off a CD, and delete.

thank you Zazen and Wino, Zazen i remember using that program before, but you can do all of that in msconfig, you can see genuine ms shit.  but, it wasnt there, taskmanager didnt show anything at boot as i said.  And yes, Wino Windows IS disposable, in fact the machine in question is now running FreeBSD 6.2 and the NDS files are shared once again.  FreeBSD.  i gave the XP cd to a family member, and will never use it again on ANY machine in my house.
Title: Re: didn't i flame windows already before??
Post by: trevelyn on September 01, 2007, 10:09:57 AM
(http://i107.photobucket.com/albums/m281/trevelyn2006/fuckyouwindows2.jpg)

My own mediocre attempt at humor has been highly amusing to myself. I'LL GET RIGHT ON THAT!
Title: Re: didn't i flame windows already before??
Post by: Zazen on September 01, 2007, 10:55:42 AM
thank you Zazen and Wino, Zazen i remember using that program before, but you can do all of that in msconfig, you can see genuine ms shit. 

msconfig only shows you a limited set of things, you should use other tools next time (although I guess there won't be a next time?). In this case you probably have a browser add-in which isn't something that'll show up in msconfig. Really msconfig is only useful for changing boot options.

Anyway, good luck with your new MySpace friend..
Title: Re: didn't i flame windows already before??
Post by: M-26-7 on September 01, 2007, 11:10:45 AM
(http://i107.photobucket.com/albums/m281/trevelyn2006/fuckyouwindows2.jpg)

My own mediocre attempt at humor has been highly amusing to myself. I'LL GET RIGHT ON THAT!
I like how it doesn't have any option for gender; It just has an okay button.
Title: Re: didn't i flame windows already before??
Post by: trevelyn on September 03, 2007, 07:20:11 AM
(http://i107.photobucket.com/albums/m281/trevelyn2006/fuckyouwindows2.jpg)

My own mediocre attempt at humor has been highly amusing to myself. I'LL GET RIGHT ON THAT!
I like how it doesn't have any option for gender; It just has an okay button.

ugly people like me take what they can get!!
Title: Re: didn't i flame windows already before??
Post by: trevelyn on September 04, 2007, 08:29:53 AM
(http://www.zombie.el.cx/images/FreeBSD.png)

= sex.
Title: Re: didn't i flame windows already before??
Post by: Wino on September 05, 2007, 12:47:55 AM
(http://www.zombie.el.cx/images/FreeBSD.png)

= sex.

EDIT (clarification) Reminds me too much of a macOS (err, well mac style menus). I watched the whatever labs at your home, what box is now a freebsd box?
Title: Re: didn't i flame windows already before??
Post by: trevelyn on September 05, 2007, 06:28:43 AM
oh it was a dell optiplex, a black tower. 933MHz, 360MB RAM.  i gutted it, and put the insides into a black case that looks like a car with led headlights and clear sides with light up fans and shit.  Got a good deal on a flat screen 1024x768 LCD monitor.  and it's just - awesome.  [i need a light up keyboard xD]  And yee, OS X actually has a BSD base system, it says so when you are installing the OS.  Which i have done a lot, Weak-Net obtained 2 iMac G3's (orange and grey) and a G4, which rox btw.  You cxan also see the similarity in a few different little examples, like ifconfig, /dev/ name structures etc.The website is only down because the dick i bought the name from wont fix my IP.  i need to purchase the domain again from somewhere else thats a little more reliable. maybe Weak-Net.net this time around...     
Title: Re: didn't i flame windows already before??
Post by: trevelyn on September 05, 2007, 07:21:54 AM
:D here's one i got at work just now, trying to delete a folder from my CF card that was empty.  (i accidentally right clicked->new->folder)
(http://i107.photobucket.com/albums/m281/trevelyn2006/JOKE-OS.jpg)

i seriously hope this is a joke.  maybe im like that quantum physics professor that wasnt allowed into the labs cos he was "bad luck."  In Fact, peopl used to interview him from a different room! 

The Pauli effect is a tongue-in-cheek reference to the apparently mysterious failure of technical equipment in the presence of certain people, particularly theoretical physicists. It is named after the Austrian theoretical physicist Wolfgang Pauli. -Wikipedia
Title: Re: didn't i flame windows already before??
Post by: Wino on September 10, 2007, 12:38:04 PM
oh it was a dell optiplex, a black tower. 933MHz, 360MB RAM.  i gutted it, and put the insides into a black case that looks like a car with led headlights and clear sides with light up fans and shit.  Got a good deal on a flat screen 1024x768 LCD monitor.  and it's just - awesome.  [i need a light up keyboard xD]  And yee, OS X actually has a BSD base system, it says so when you are installing the OS.  Which i have done a lot, Weak-Net obtained 2 iMac G3's (orange and grey) and a G4, which rox btw.  You cxan also see the similarity in a few different little examples, like ifconfig, /dev/ name structures etc.The website is only down because the dick i bought the name from wont fix my IP.  i need to purchase the domain again from somewhere else thats a little more reliable. maybe Weak-Net.net this time around...     

I know that MacOS X is based off of freebsd, that's the only way I could really tech macs. I've never owned one, and I don't have MacOS on an i386 machine. Used to get me in trouble, we were not supposed to have customers shitting commands into console/dos/whatever, because they had a tendency to fuck things up.

Where'd you get the macs? I'd like a g4-ish mac, before intel got their shitty hands on everything. They're still expensive though (ebay) and I'm broke.
Title: Re: didn't i flame windows already before??
Post by: trevelyn on September 10, 2007, 03:54:24 PM
gifts from a close friend @ Duquesne University! the G4 is the version with the real tower, not the white ball and the screen.  but its fast and runs smooth.