Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Virus Suspected

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Computer Talk
View previous topic :: View next topic  
Author Message
Stylised
Grandmaster Cheater
Reputation: 20

Joined: 04 Nov 2008
Posts: 712

PostPosted: Tue Dec 28, 2010 10:14 am    Post subject: Virus Suspected Reply with quote

I was looking for a winrar crack and I came to this website.
http://mechadairysystems.com/rarlabs-winrar-3-93-patch-hotfile-free-generator.html
Don't download anything in there. After downloading one of them (they all lead to the same download) I find that sometimes a random internet explorer page opens up with an ad (I never use IE).
I also cannot use the league of legends client or access 4chan anymore.
I am using eset nod32 antivirus. I am not running windows firewall and I have tried running the LoL client as admin which didn't work.
I've noticed something in System Config that wasn't there before. This mse thing, it always comes back even though I disable it and restart the computer. There's a picture attached.
Please help.
Whoever helps gets 3 bucks.
Back to top
View user's profile Send private message
AhMunRa
Grandmaster Cheater Supreme
Reputation: 27

Joined: 06 Aug 2010
Posts: 1117

PostPosted: Tue Dec 28, 2010 11:25 am    Post subject: Reply with quote

#1 don't download cracks. They tend to do stuff like this. Start up in Safe Mode and try to remove it. If it returns you will need to use a program to remove it for you.

#2 and this is the most important. Why in the world did you need one for WinRAR?

You do realize that all it does is nag if you don't purchase it, right? I have used mine unregistered forever, I just disregard the nag.


As for 4chan, it was ddosed. It's all over the net even on their status page.

http://status(.)4chan(.)org/ * NOTE remove () word filter is changing the link.

_________________
<Wiccaan> Bah that was supposed to say 'not saying its dead' lol. Fixing >.>
Back to top
View user's profile Send private message
Stylised
Grandmaster Cheater
Reputation: 20

Joined: 04 Nov 2008
Posts: 712

PostPosted: Tue Dec 28, 2010 11:51 am    Post subject: Reply with quote

^Ok, how do I remove this in safe mode?
Back to top
View user's profile Send private message
AhMunRa
Grandmaster Cheater Supreme
Reputation: 27

Joined: 06 Aug 2010
Posts: 1117

PostPosted: Tue Dec 28, 2010 12:00 pm    Post subject: Reply with quote

In your config window I see that the MSE program you are talking about is in your user folder somewhere, you need to find the exact path, in safe mode delete the program. Then remove the entries in registry calling that program. Usually found at HKCU\Software\Microsoft\Windows\CurrentVersion\Run\

What's the full name of this MSE software? There may also be an entry for it in Add\Remove Programs under Control Panel. Check that first before you try anything else.

_________________
<Wiccaan> Bah that was supposed to say 'not saying its dead' lol. Fixing >.>
Back to top
View user's profile Send private message
Stylised
Grandmaster Cheater
Reputation: 20

Joined: 04 Nov 2008
Posts: 712

PostPosted: Tue Dec 28, 2010 12:27 pm    Post subject: Reply with quote

Also, can you tell me where to find those registries specifically? I can't fund HKCU.
Back to top
View user's profile Send private message
AhMunRa
Grandmaster Cheater Supreme
Reputation: 27

Joined: 06 Aug 2010
Posts: 1117

PostPosted: Tue Dec 28, 2010 1:25 pm    Post subject: This post has 1 review(s) Reply with quote

HKCR - HKEY_CLASSES_ROOT
HKCU - HKEY_CURRENT_USER
HKLM - HKEY_LOCAL_MACHINE
HKU - HKEY_USERS
HKCC - HKEY_CURRENT_CONFIG

Sorry, I should have been more specific.

Path in registry will be My Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\

_________________
<Wiccaan> Bah that was supposed to say 'not saying its dead' lol. Fixing >.>
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 457

Joined: 09 May 2003
Posts: 25262
Location: The netherlands

PostPosted: Tue Dec 28, 2010 2:14 pm    Post subject: Reply with quote

try the program here:
http://technet.microsoft.com/en-us/sysinternals/bb963902

It helps you find out all autorun methods and also allows you to remove them
Look specifically for non microsoft signed programs

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Computer Talk All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites