Damn thing from Jocko Jocks Daddies

[BlueLantern]

The blog Jocko daddies was hacked and I think that I get something from them, I Still din't managed to use avg to do a full scan in the computer (I need it for study), but I will do it now. However I am afraid that I may not be able to remove it.


So... if you are familiar with those virus can you tell me any (free)program better to clean or maybe if they
aren't from the blog?
EDIT:
Also I had problems when the windowns starts, he was getting only to apppear the wallpaper and the icons or the toolbar don't show up. But this may be a problem caused because I reset it too much =P

[Paws]

Strange, I don't have any problems with Firefox and his hijacked weblog :P

[BlueLantern]

Strange, I don't have any problems with Firefox and his hijacked weblog :P

I don't use Firefox? I din't say I use it, or that I want to use it or not.

I want to erase that damnthing! T-T

[hotguy12345]

okok..i think i got the same problem from that post...erm download spybot search and destroy..its fantastic finds all the viruses/spyware/trojans etc.. in about 10 mins ur whole computer is scanned then just simply click delete the files..then immunise option...and check also in your ''add or remove programs'' that there isnt anythin installed that you never installed..lol..post back n tell me what things are there so i know if i had the same problem

[Splitz]

How can you be sure that the spybot program isn't itself intrusive?
This is very complicated!

[shyguyy9]

that specific program is not intrucive. spybot search and destroy... also try adaware... those two have kept my computer clean for the most part. good luck

[hotguy12345]

wouldnt god damn post it to help you if it was intrusive lmao!! but nah.its kept my laptop sweet as pie since i first used it about a month ago when i had critical system errors..anyways hope it helps

[ruffboi]

l have found that norton antivirus by symantec has never let me down, it protects your computer, scans email, and scans web browsing. it also keeps itself updated with new virus definitions
if you do get something, booting your computer in safe mode will usually allow you to delete offending files, however it is best to have a good antivirus to prevent infection in the first place

[mike_n_herrin]

it doesn't look like you have a virus it looks like it's spy ware. i would download (as mentioned above) two programs.

1: spybot search and destroy. Start here: http://www.safer-networking.org/

it's free. i've seen instructions on installing and using it, but i don't know if that would be easiest for you. But here is where the instructions are: http://www.bleepingcomputer.com/tuto...utorial43.html

2. ad-aware se personal: http://www.lavasoft.de/products/ad-a...e_personal.php

it is also free (the se personal version anyway). there are also english instructions on how to install and use it here: http://www.bleepingcomputer.com/tuto...utorial48.html

that second picture you posted looks like an infection by "Winfixer" or at least it's wanting you to install winfixer and may already be stuck on your computer. the info i see on the web says that spybot and ad-aware are capable of detecting and removing that nasty program.

the one thing the instructions for spybot don't tell you is how to remove something "bad" from your system startup. I'll attach two photos so you can see how to do that. So once you install it you will need to click on "mode" then select "advanced mode." that will add several options and you then need to click on "tool" and then "system startup." then follow step by step instructions in picture 2. Picture one shows you how to switch to advanced mode and where tools and system startup is.

so hopefully that hat helps!

- mikey

[Corny]

I don't use Firefox? I din't say I use it, or that I want to use it or not.

well maybe you should use it

[theworldwithout]

Yeah, I've been reading on the other blogs that no one should visit Jocko Daddies Blog . If you do it takes you to another site and it installs malicious software onto your PC.

[BlueLantern]

Thanks for your replies, I only have time to do it later today, I hope that is not too late.

I also afraid that the problem may not be only the programs but from hardware . The computer was warm today in the mornig many hours after from any activity, and I fear that the processor may have some problem.

[BlueLantern]

The image is in poor quality and I can't see step 5.

I scanned with both programs and still the thing is showing up

[mike_n_herrin]

/\ oh i'm sorry. it's pretty bad looking when you first click on it. i should have said you can zoom in on it and that will clear up the view so you can read it better. sorry

you should get an magnifying glass when you click on the picture and then be able to zoom in by one it should clear up a lot.

step 5 basically is if you can't find anything with the scan but it shows up as a bad thing on the list of things that are starting up when you start windows, you can uncheck the box next to in that window and it will stop it from starting.

i can try emailing you the pictures if you want. they lost their quality when i had to make them jpg to upload to JUB. i can email you the bmp files so they will be easier to read if you want.

[BlueLantern]

I tried, and still the damn thing is showing up T_T

=(

Thanks for your help, but there is something else that I can do?

[mike_n_herrin]

there is maybe another thing you can try. it's a bit more complicated..but not much. it's a program called "hijackthis" that tells you about stuff on your system. I will try and post some instructions here on how/where to get this.

1. Go here: http://www.hijackthis.de/
2. Click the “direct download” link to get hijackthis version 1.99.9
3. You will then need to save the file and unzip it once it’s downloaded.
4. Then you will need to run the program, by double clicking the unzipped file.
5. You’ll get a warning, but just click “ok” and go on.
6. In the next box, click the “do a system scan only” button
7. That will run the scan, once it’s done the text box will have a lot of stuff in it. You now need to click the “save log” button. And then pick where you want it to save to. I would pick the desktop so you can find it easily.
8. The log file will then open in Notepad.
9. In notepad, click edit, select all, then edit (again) and copy. That will copy the text to the clipboard.
10. Then go to this web site and paste the text into the white text box: http://hjt.networktechs.com/
11. Now click the “parse” button at the bottom of the white text box.
12. That will bring up a page that will color code things running on your system and you may be able to see what bad things are running (they are red i think).

You can also copy and paste your text back at the hijack this page here: http://www.hijackthis.de/ and past into the white text box there. Then press the “analyze” button at the bottom. That will bring up a list of things running and then put an icon next to it telling you if it’s ok or not.

after all that if something does show up red you can go back to the Hijack this program run the scan again (or if you left it open you can just go back to that) and put a check in the box next to the bad thing and then click the "add checked to the ignore list" button to make it not run.

you can also post your log file here i think and maybe one of the bigger computer geeks than me can tell just by looking at it what is going on.

good luck!

[eddie1565]

Please do a scan as mike_n_herrin advised above.

Please do an online scan with Kaspersky WebScanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.

• The program will launch and then begin downloading the latest definition files:
• Once the files have been downloaded click on NEXT
  
• Now click on Scan Settings
• In the scan settings make that the following are selected:
  • Scan using the following Anti-Virus database:
  • Extended (if available otherwise Standard)
  • Scan Options:
  • Scan Archives
    Scan Mail Bases
• Click OK
• Now under select a target to scan:
  • Select My Computer
• This will program will start and scan your system.
• The scan will take a while so be patient and let it run.
• Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
• Save the file to your desktop.

You can do a second scan with one of these:

• eTrust Antivirus Web Scanner

• Bit Defender Virus Scan

• Trend Micro Online Scan

• Housecall For alternate browsers

Good luck!

Thomas

[BlueLantern]

CRAAAP!

I try what mike said, and din't work.

My computer Internet explore is not working T-T, msn and web don't work, Shareazaa however does, but nothingelse that I could find that is web-related works =( I not sure is related.

What can I do? I in my sister computer now, I can't stay too long.

[mike_n_herrin]

what didn't work? the program didn't run or it didn't find anything?

do you have firefox yet? if not try and download it from your sister's computer so you can install it on yours and maybe still get to the web. You can try to do a system restore (if it's enabled on your computer), but i'm not sure that will work for a really bad infection. whether the infection is from a virus or spyware.

if you can't get internet explorer to open you could try opening any folder on your computer (even the my computer icon) and typing in a web address in the address bar. On ny sister's computer, we couldn't get internet explorer to run either but we could still get to the web by typing in a web address in a regular windows window.

do you know how to run the system restore option inside windows? i would start by starting windows in safe mode by pressing F8 just a couple seconds after you turn on your computer. you should get a menu about starting the computer in safe mode, safe mode with network support, etc.

then once you are in windows goto start---programs---accessories---system tools---system restore. if it's enabled then you'll see:
1. Welcome to System Restore page, click Restore my computer to an earlier time (if it is not already selected), and then click Next.
2. On the Select a Restore Point page, click the most recent system checkpoint in the On this list, click a restore point list, and then click Next.
3. A System Restore message may appear that lists configuration changes that System Restore will make. Click OK.
4. On the Confirm Restore Point Selection page, click Next.
5. System Restore should restore the previous Windows XP configuration by running and then restarting (sometimes twice). After it finishes it will boot back into windows and tell you either system restore was or was not successful.

if you can pick dates to restore your computer to, make sure to try and pick a date prior to when you started having the problem. After it restores, you should run your antivirus program again and spybot search and destroy again in case the file is still actually on your computer.

do you have high speed internet? one of us could maybe try to help you with remote assistance (it's part of windows XP) it allows someone to remotely take control of your computer for a short period of time to help fix things. I do this with my mom's computer a lot, but you have to have high speed internet and you'd have to trust one of us. I will be out of town starting in 2 days until January 8th so I won't be able to help till i get back. or maybe tomorrow if you see this in time.

the other thing you could try doing is get a copy of Knoppix on a CD or DVD and try to run that temporarily. I know you are not in the US so i don't know if you could actually get a copy of it. But if you can, Knoppix is a Linux operating system that only runs off the CD/DVD disk and doesn't change anything on your computer. But you can still use it to get to the files you need on your computer if windows XP is broken. So you can open Word files or Excel files and stuff like that.

i tried to find what program was downloaded by going to that jocko blog site, but i can't find a name of anything.

[mike_n_herrin]

ok i found a little bit of info that might help. if you can't get to the web though you'll have to download the programs from some other computer.

this came from this web site: http://forums.spywareinfo.com/index.php?showtopic=71403

Please download VundoFix***** to your desktop: http://www.atribune.org/ccount/click.php?id=4

* Double-click VundoFix***** to run it.
* Put a check next to Run VundoFix as a task.
* You will receive a message saying vundofix will close and re-open in a minute or less. Click OK
* When VundoFix re-opens, click the Scan for Vundo button.
* Once it's done scanning, click the Remove Vundo button.
* You will receive a prompt asking if you want to remove the files, click YES
* Once you click yes, your desktop will go blank as it starts removing Vundo.
* When completed, it will prompt that it will shutdown your computer, click OK.
* Turn your computer back on.


Please download, install, update and scan your system with the free version of Ewido Anti-Malware Scanner:http://www.ewido.net/en/download/

1. When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
2. When you run ewido for the first time, you will get a warning "Database could not be found!". Click OK. We will fix this in a moment.
3. From the main ewido screen, click on update in the left menu, then click the Start update button.
4. After the update finishes (the status bar at the bottom will display "Update successful"). Close Ewido.
5. Please download CCleaner, install it but do not run it yet.
6. Boot into safe mode: Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.
7. Run CCleaner and clean out your Temporary and Temporary Internet Files.
8. Run ewido, click on the Scanner button in the left menu, then click on the Full System Scan button. This scan can take quite a while to run, so time to go get a drink and a snack....
9. If ewido finds anything, it will pop up a notification. You can select "remove" and check the boxes "Perform action with all infections" and "Create encrypted backup" before clicking on OK.
10. When the scan finishes, click on "Save Report". This will create a text file. Please then paste the contents of the text file to this thread.
11. Reboot in Normal mode.

i also saw reference to this program: http://www.atribune.org/ccount/click.php?id=10
that is also supposed to remove the program that is causing the popup for that WinAntivirusPro thing.

[BlueLantern]

Thanks for your help guys, But I think that I will the drastic solution, I reformat (erase) the Hard Disk, I just too pissed with the thing to continue, =P. I will only be able to do it next year. but again thanks