Jump to content


  • Content Count

  • Joined

  • Last visited

About famouspogs

  • Rank
  1. I've been having this happened for 3 years and on 3 different computers. What would a DNS flush accomplish? I'm confused. Edit:I've also waited 24 hours so is there still a point? I don't mean to be rude or anything. I'm just confused on what I'm doing and would like to learn.
  2. What would flushing the DNS do though? Could I get some more information about what flushing the DNS would do? Thanks.
  3. The thing is I've had this on 3 Different computers and my friend also has gotten this. I've never really wondered what it was and always thought it was because I was using an old version of msn(MSN 7.5), but my friend got it RIGHT after updating to latest Live messenger. I also run malware bytes all the time. I'll post a log as requested and then run other recommended programs in a little bit. Could you also possible do me a favor and copy and paste whats said on the antionline forums? I've heard antionline links to some malware and I don't want to risk going there. Malwarebytes' An
  4. When I click the email button on the email button in MSN messenger it goes to an old MSN page thats sometimes branded as 2006 or 2007 heres a picture: I'm wondering if my browser is being hijacked somehow. Whenever I click the properties of anything like the headliner it all links to secure.footprint.net. I've heard some people say the sites a security site that microsoft uses and others say its phishing. Does anyone have any more information about this or any similar problems?
  5. What would flushing DNS do? Thanks for responding.
  6. Well I checked the header now and found "Return-Path:" in the email header and it was not my account. So I'm guessing my email was just spoofed.
  7. So I got worried about the hotmail accounts that were phished and thought I'd change my password and I did, figured I was safe. So I woke up this morning and had an email from myself that was obviously spam. To avoid getting a virus I opened it up on my Wii and it had this. Body: We ship Worldwide! To all countries! To all destinations! To unsubscribe from this mailing list, please log in to www.ropehim.com, click on "My Account", click "Update" to edit your registration details and uncheck the "Receive Newsletter?" check box. Or unsubscribe at http://ropehim.com/faq.p
  8. I've actually found alot more stuff here. GMER - http://www.gmer.net Rootkit scan 2009-02-24 08:28:28 Windows 5.1.2600 Service Pack 3 ---- System - GMER 1.0.14 ---- SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwClose [0xACD0D576] SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateKey [0xACD0D432] SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Soft
  9. I've done some more scanning and found some other interesting stuff. I'm wondering what the device thing is. This was from GMER GMER - http://www.gmer.net Rootkit scan 2009-02-24 05:14:05 Windows 5.1.2600 Service Pack 3 ---- System - GMER 1.0.14 ---- SSDT sppe.sys ZwEnumerateKey [0xF7460CA2] SSDT sppe.sys ZwEnumerateValueKey [0xF7461030] ---- Devices - GMER 1.0.14 ---- Device \FileSystem\Ntfs \Ntfs 86F6D1F8 AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast!
  10. I think its just a short version of a link for the computer to understand. I did some googling and found some pages of people talking about how they can't get a couple programs to launch and it was recommended they write it that way because thats how the computer would recognize it. Or at least thats what I think it meant.
  11. This was picked up by sophos anti root kit. It doesn't look suspicious but if anyone could tell me why exactly it may be hidden? and what is this actually windows media player? "C:\PROGRA~1\WINDOW~2\wmplayer.exe" Area: Windows registry Description: Hidden registry value Location: \HKEY_USERS\S-1-5-18\Software\Netscape\Netscape Navigator\User Trusted External Applications\"C:\PROGRA~1\WINDOW~2\wmplayer.exe" Removable: No Notes: (type 1, length "Y e s " Area: Windows registry Description: Hidden registry value Location: \HKEY_USERS\S-1-5-18\Software\Netscape\Netscape Naviga
  12. Alright thanks alot for helping out. I've had smitfraud before and got help from PC pitstop and it helped me alot. Really great site.
  13. I'll go check out the user to user forum thanks. Ad-aware doesn't seem to be finding anything anymore. I really think they were just false positives. I'll keep scanning and if it comes with anything more I'll turn off system restore and both games were installed by CD.
  14. The program stuff it thought was brontok and banker was apart of GTA:SA MP which is very well known to be safe and also apart of rainbow six 2 las vegas. I didn't download rainbow six las vegas or GTA:SA I paid for both. While worrying about this issue I started to realize this could maybe have to do with a copy of XP with SP3 slip streamed into it that I downloaded. I got a new computer with a PCI-E card that the original copy of windows would just not reccomend. After trying to make my own slip streamed SP3 and failing I decided to download a copy from what seems to be a fairly trust
  15. So I just finished an avast search and it came up with nothing besides a decompression bomb in my system restore folder(doesn't seem like a threat), I also ran malwarebytes and it found nothing. Here are all of the logs and what ad-aware removed. Thanks for responding. Malwarebytes' Anti-Malware 1.31 Database version: 1546 Windows 5.1.2600 Service Pack 3 2/20/2009 4:38:31 PM mbam-log-2009-02-20 (16-38-31).txt Scan type: Full Scan (C:\|) Objects scanned: 139574 Time elapsed: 41 minute(s), 46 second(s) Memory Processes Infected: 0 Memory Modules Infect
  • Create New...