Massassi Forums Logo

This is the static archive of the Massassi Forums. The forums are closed indefinitely. Thanks for all the memories!

You can also download Super Old Archived Message Boards from when Massassi first started.

"View" counts are as of the day the forums were archived, and will no longer increase.

ForumsDiscussion Forum → omqwtf
omqwtf
2004-06-14, 8:39 AM #1
Every ten minutes or so, an opera window automatically opens and directs itself to some angelfire website. If I'm in a game, it minimizes and opens the window anyways. Reinstalling opera didn't do anything, so it's an external program doing it. Adaware didn't detect anything suspicious.

Spyware, virus, worm, don't care what it is - I just want to get rid of it. Any ideas?

------------------
WAITER: Here’s your green salad, sir.
ANAKIN: What? You fool, I told you NO CROUTONS! Aaaaaaargh!
The music industry is a cruel and shallow money trench where thieves and pimps run free, and good men die like dogs. There's also a negative side.
2004-06-14, 8:47 AM #2
you could reformat.. [edit]wtf, three replies at the exact same time.

------------------
What once was...

[This message has been edited by Warlord (edited June 14, 2004).]
2004-06-14, 8:47 AM #3
Reformatting would be an obvious solution [http://forums.massassi.net/html/wink.gif]
But more seriously, no I have no ideas.

------------------
nytfyre m0d || f33l t3h p0w3r || t3h l0st c0gz || OMF > *
May the mass times acceleration be with you.
2004-06-14, 8:47 AM #4
You can see if it shows up in Ctrl+Alt+Del, find the name of it, and manually search the WINDOWS or Programs folder.

------------------
Titan A.E.
Titan A.E.
2004-06-14, 8:49 AM #5
Hah I beat you!

------------------
nytfyre m0d || f33l t3h p0w3r || t3h l0st c0gz || OMF > *
May the mass times acceleration be with you.
2004-06-14, 8:51 AM #6
/me hits Darth Slaw with a blunt object

------------------
Titan A.E.
Titan A.E.
2004-06-14, 9:12 AM #7
Spybot and if that doesnt work

http://www.spywareinfo.com/~merijn/files/cwshredder.zip

^^^CWshredder works for somethings spybot and adaware don't pickup

------------------
When you expect the pain - nothing left to ascertain
When you respect the lie - Deadly chasm open wide
---Circle of Dust "Chasm"

[This message has been edited by FH_PhoenixFlame (edited June 14, 2004).]

[This message has been edited by FH_PhoenixFlame (edited June 14, 2004).]
He's Watching you
…../|,-‘`¯¯`\(o)_\,----,,,_………
…( `\(o),,_/` ¯ : o : : : o`-, ….
2004-06-14, 9:30 AM #8
It should be in your task manager. Close one process at a time (don't shut down important system processes and google suspicious ones) and only continue if it continues happening. Make note of each process you close, obviously.
2004-06-14, 9:34 AM #9
a broser hijacker for opera? i'm intrigued.



------------------
Old aunts used to come up to me at weddings, poking me in the ribs and cackling, telling me, "You're next." They stopped after I started doing the same thing to them at funerals.
2004-06-14, 9:36 AM #10
Hardly, just a process that launches a website, and since opera is the default handler, it will open in opera over IE.
Yet Another Massassi Map | Sadly I Have a Blog Too
2004-06-14, 10:20 AM #11
Quote:
<font face="Verdana, Arial" size="2">Originally posted by Hebedee:
It should be in your task manager. Close one process at a time (don't shut down important system processes and google suspicious ones) and only continue if it continues happening. Make note of each process you close, obviously.</font>


I don't think Windows will let you close down anything vital to the system. Win2k doesn't, I know that.

------------------
Frogblast the Vent Core!

--End of Line--
"In the beginning, the Universe was created. This has made a lot of people very angry and has been widely regarded as a bad move." - Douglas Adams
Are you finding Ling-Ling's head?
Last Stand
2004-06-14, 10:30 AM #12
Win2k absolutely lets you close down critical systems. I have done it, and it wasn't pretty > [http://forums.massassi.net/html/frown.gif]

------------------
EvilMagic.net: Brian's Web Log
2004-06-14, 11:00 AM #13
In addition to CWShredder, HijackThis is a very neat program. It helps you to quickly spot programs and other nasty things that are loaded, when windows starts (even if it's not necessarily 100% relevant to your problem now). It helped me a lot, when adaware and CWShredder were powerless.

------------------
Frozen by ICARUS
Frozen in the past by ICARUS
2004-06-14, 11:37 AM #14
Ok well this seems to be happening immediately when I connect to the internet. As long as I'm offline, nothing pops up... strange.

------------------
WAITER: Here’s your green salad, sir.
ANAKIN: What? You fool, I told you NO CROUTONS! Aaaaaaargh!
The music industry is a cruel and shallow money trench where thieves and pimps run free, and good men die like dogs. There's also a negative side.
2004-06-14, 11:56 AM #15
Quote:
<font face="Verdana, Arial" size="2">Originally posted by Brian:
Win2k absolutely lets you close down critical systems. I have done it, and it wasn't pretty > [http://forums.massassi.net/html/frown.gif]

</font>


Really? Interesting... If I was to try and close... say... the System Idle Processes right now, it pops up a window informing me that the "Operation could not be completed. The operation is not valid for this process." and that's that. I'm attributing that to it not letting you close down things vital to the system. Am I misinterpreting that?

------------------
Frogblast the Vent Core!

--End of Line--
"In the beginning, the Universe was created. This has made a lot of people very angry and has been widely regarded as a bad move." - Douglas Adams
Are you finding Ling-Ling's head?
Last Stand
2004-06-14, 12:27 PM #16
Also, when clicking on links in opera, I randomly get error messages saying "connection closed by remote server". Don't know if it's related or not. If I reboot it stops for awhile, but comes back afterwards.

------------------
WAITER: Here’s your green salad, sir.
ANAKIN: What? You fool, I told you NO CROUTONS! Aaaaaaargh!
The music industry is a cruel and shallow money trench where thieves and pimps run free, and good men die like dogs. There's also a negative side.
2004-06-14, 12:46 PM #17
The second problem sounds isolated - my guess is that it might be related to your connection setup. Perhaps your configuration needs to be tweaked (drivers, etc).

Hijack This is pretty much designed to fix your browser problem, but I don't know if it works for Opera...


Good luck and... shouldn't this be in the tech forum? :P
2004-06-14, 1:19 PM #18
What would happen if the System Idle process was dissabled? I've always wonderd.
2004-06-14, 3:38 PM #19
I'd tell you, but like I said, I can't close it down. Brian must know the secret trick to doing so. Frankly, I'd be curious to know what it is so I can try it.

------------------
Frogblast the Vent Core!

--End of Line--
"In the beginning, the Universe was created. This has made a lot of people very angry and has been widely regarded as a bad move." - Douglas Adams
Are you finding Ling-Ling's head?
Last Stand
2004-06-14, 4:52 PM #20
Quote:
<font face="Verdana, Arial" size="2">Originally posted by Obi_Kwiet:
What would happen if the System Idle process was dissabled? I've always wonderd.</font>


The alignment of the stars will fall out of balance and Windows will be confused to why CPU usage isn't at 100%. It will then panic and attempt to overclock itself to somehow compensate for this, your hard drive will overspin, and your floppy drive will blow chunks.

------------------
Please send me e-mail....
2004-06-15, 12:42 AM #21
use IE [http://forums.massassi.net/html/tongue.gif] [http://forums.massassi.net/html/tongue.gif] [http://forums.massassi.net/html/tongue.gif]

------------------
/fluffle
/fluffle
2004-06-15, 8:24 AM #22
The problem isn't opera, it's something on my system. If I set IE as my default browser, it just opens an IE window instead.

I had this crazy idea last night - to set my default browser as IE, then delete iexplore.exe, and use opera... but most likely it'll still keep popping up when my opera window is opened.

------------------
WAITER: Here’s your green salad, sir.
ANAKIN: What? You fool, I told you NO CROUTONS! Aaaaaaargh!
The music industry is a cruel and shallow money trench where thieves and pimps run free, and good men die like dogs. There's also a negative side.
2004-06-15, 8:37 AM #23
Try Hijackthis if you haven't already.

Also, if you can, try to remember when this infection happened. Then check your windows and windows/system32 folders to see if there are a bunch of new .exes (and maybe also other files and even folders) that were created at the same time, the very moment when your problems started. You should then delete those files (with some caution). Some of them are .log files, which will even report some of the things the trojans (or viruses) tried to do.

This is the method I had to use to get rid of one tough trojan infection a while ago...

------------------
Frozen by ICARUS
Frozen in the past by ICARUS

↑ Up to the top!