Computer problem - Router Forums
Reply
 
LinkBack Thread Tools Display Modes
post #1 of 13 (permalink) Old 01-10-2009, 09:51 AM Thread Starter
Registered User
 
Join Date: Mar 2007
Country: United States
First Name: Steve
Posts: 567
 
Default Computer problem

I use head phone on my computer mainly. Lately, out of nowhere, I will get an audio advertisement for things like Walmart, etc.

These things are startling and I don't like them. There is no new screen that shows up, just these audio speals.


Off topic, but any input appreciated.

Steve Bolton
S Bolton is offline  
Sponsored Links
Advertisement
 
post #2 of 13 (permalink) Old 01-10-2009, 10:44 AM
Community Founder
 
Mark's Avatar
 
Join Date: Aug 2004
Country: Canada
First Name: Mark
Posts: 6,764
 
Default

Sounds like Spyware to me.

Download Adaware SE: http://www.lavasoft.com/single/trialpay.php

Do a full system scan, posts the results of the spam and then restart your computer.

If that doesn't work let me know.

Mark,
Founder of RouterForums.com
Mark is offline  
post #3 of 13 (permalink) Old 01-10-2009, 03:01 PM
Registered User
 
Ralph Barker's Avatar
 
Join Date: Dec 2008
Country: United States
First Name: Ralph
Posts: 2,001
 
Default

If the adware scan doesn't solve the problem, see a Catholic priest. Hearing voices is the first sign of being possessed.

- Ralph
Ralph Barker is offline  
Sponsored Links
Advertisement
 
post #4 of 13 (permalink) Old 01-10-2009, 04:42 PM
Retired Moderator
 
Bob N's Avatar
 
Join Date: Oct 2004
Country: United States
First Name: Bob
Posts: 5,688
     
Default

Now THAT is funny!
Attached Images
 
Bob N is offline  
post #5 of 13 (permalink) Old 01-10-2009, 04:58 PM
Forum Contributor
 
Join Date: Jan 2006
Country: United States
First Name: Bj
Posts: 23,786
       
Default

Good one Ralph

We all have heard the old joke..
Hey Doc, it hurts when I do this , and the Doc said well don't do that.


========
Quote:
Originally Posted by Ralph Barker View Post
If the adware scan doesn't solve the problem, see a Catholic priest. Hearing voices is the first sign of being possessed.



"It's fine to disagree with other members as long as you respect their opinions"

Marc Sommerfeld Tools ,Videos
http://www.youtube.com/channel/UCT-n...RWaEpMA/videos

Find all threads started by bobj3
http://www.routerforums.com/search.php?searchid=944097


bobj3 is offline  
post #6 of 13 (permalink) Old 01-10-2009, 04:59 PM
Registered User
 
Gerard_sr's Avatar
 
Join Date: Dec 2008
Country: United States
First Name: Gerard (AKA: Gerry )
Posts: 246
 
Default

this is post # 10 so I can get you the needed information.
Gerard_sr is offline  
post #7 of 13 (permalink) Old 01-10-2009, 05:00 PM
Registered User
 
Gerard_sr's Avatar
 
Join Date: Dec 2008
Country: United States
First Name: Gerard (AKA: Gerry )
Posts: 246
 
Default

The problem is/was you were hit by one of the numerous "drive-by" web pages that install trojans or malware on computers. One of the files that they may have installed is "XFST.SYS"
Only there is another file that is polymorphic or changes it's name with each reboot, or changes it's name with each time it runs. This checks to see if "XFST.SYS" is there and then re-installs it if it is not.
I have removed several of this type of polymorphic trojans or malware with some difficulty. The only two tools I used for removal were autoruns and processexplorer available through microsoft
( link: http://technet.microsoft.com/en-us/s...s/default.aspx ) and some computer common sense. I then checked to see if they were removed with ad-aware and spybot. Those themselves can not or could not at the time, remove the core polymorphic file. But since the computers that had these were in the September 2008 time frame, Lavasoft's program or spybot (search & destroy) may now work.
It ain't easy and if you really don't know about computers or software, it's totally impossible.
If Mark is unable to help because of distance or he gets bogged down with regular duties, you may consider enlisting the help of a computer type person locally. One that is a computer type and not a game player type.

Spybot Search & Destroy, ( link: http://www.safer-networking.org/index2.html ) a FREE program, may have prevented this.

I seriously wish you luck with it.

Gerry
Gerard_sr is offline  
post #8 of 13 (permalink) Old 01-10-2009, 07:31 PM Thread Starter
Registered User
 
Join Date: Mar 2007
Country: United States
First Name: Steve
Posts: 567
 
Default

Wow, that is nasty stuff. I have ran malwarebytes twice now and it picked up a bunch of things the first time. I ran it a second time and it found another trojan. I ran CC cleaner and it works well, but takes away all my login info to websites like this one.

Would it hurt to download Spybot Search and Destroy also?

Thanks

Steve Bolton
S Bolton is offline  
post #9 of 13 (permalink) Old 01-10-2009, 07:57 PM
Forum Contributor
 
Join Date: Jan 2006
Country: United States
First Name: Bj
Posts: 23,786
       
Default

Hi SB

Do this it's free


download HiJack This ver.1.99.1
Use this program with care it will take out many items.
For the advance computer user.
download from:
http://www.majorgeeks.com/download3155.html
new ver.
http://www.majorgeeks.com/Trend_Micr...his_d5554.html

Also read the one below
http://www.help2go.com/article153.html
Or from
http://tools.radiosplace.com/HijackThis.exe
ver. 1.91
-------------------------------
http://research.pestpatrol.com/HowTo...r_a_Hijack.asp
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
******>>>>>>>>>>********>>>>>>>
ONCE YOU HAVE THE LOG FILE USE THIS SITE TO
Help You ANALYZE IT.......,see below

http://hijackthis.de/index.php?langselect=english

Post it at

http://hijackthis.de/index.php?langselect=english



Read the Web Page when it pops up
If you are NOT sure don't check the item to be removed
READ,READ,READ
When your done go back and do it one more time
to make sure you got them all...
NOTE***it will make a back up so you can put them
back in if you need to,,,see desktop for folder and files
when your done with the 2nd pass....

read below
http://mvps.org/winhelp2002/hosts.htm


========

Quote:
Originally Posted by S Bolton View Post
Wow, that is nasty stuff. I have ran malwarebytes twice now and it picked up a bunch of things the first time. I ran it a second time and it found another trojan. I ran CC cleaner and it works well, but takes away all my login info to websites like this one.

Would it hurt to download Spybot Search and Destroy also?

Thanks

Steve Bolton



"It's fine to disagree with other members as long as you respect their opinions"

Marc Sommerfeld Tools ,Videos
http://www.youtube.com/channel/UCT-n...RWaEpMA/videos

Find all threads started by bobj3
http://www.routerforums.com/search.php?searchid=944097



Last edited by bobj3; 01-10-2009 at 10:51 PM.
bobj3 is offline  
post #10 of 13 (permalink) Old 01-10-2009, 07:58 PM
Forum Contributor
 
AxlMyk's Avatar
 
Join Date: Jun 2006
Country: United States
First Name: Mike
Posts: 3,165
   
Default

Make sure you get Spybot S&D from here. There are many clones.
http://www.safer-networking.org/index2.html

Also, say yes to Tea-timer when asked.

.
Never, under any circumstances, combine a sleeping pill and a laxative on the same night.

Mike - Retired FoMoCo Tradesman
My Gallery @ http://www.routerforums.com/axlmyks-stuff/
AxlMyk is offline  
Reply

Quick Reply
Message:
Options

Register Now



In order to be able to post messages on the Router Forums forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.

User Name:
Password
Please enter a password for your user account. Note that passwords are case-sensitive.

Password:


Confirm Password:
Email Address
Please enter a valid email address for yourself.

Email Address:
OR

Log-in











Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page
Display Modes
Linear Mode Linear Mode



Similar Threads
Thread Thread Starter Forum Replies Last Post
any computer gurus out there? reds_21 Lobby 14 11-15-2005 09:18 AM
Computer Error ejant Lobby 4 09-24-2004 08:39 AM

Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are On

 
For the best viewing experience please update your browser to Google Chrome