View previous topic :: View next topic |
Author |
Message |
Stylised Grandmaster Cheater Reputation: 20
Joined: 04 Nov 2008 Posts: 712
|
Posted: Tue Dec 28, 2010 10:14 am Post subject: Virus Suspected |
|
|
I was looking for a winrar crack and I came to this website.
http://mechadairysystems.com/rarlabs-winrar-3-93-patch-hotfile-free-generator.html
Don't download anything in there. After downloading one of them (they all lead to the same download) I find that sometimes a random internet explorer page opens up with an ad (I never use IE).
I also cannot use the league of legends client or access 4chan anymore.
I am using eset nod32 antivirus. I am not running windows firewall and I have tried running the LoL client as admin which didn't work.
I've noticed something in System Config that wasn't there before. This mse thing, it always comes back even though I disable it and restart the computer. There's a picture attached.
Please help.
Whoever helps gets 3 bucks.
|
|
Back to top |
|
|
AhMunRa Grandmaster Cheater Supreme Reputation: 27
Joined: 06 Aug 2010 Posts: 1117
|
Posted: Tue Dec 28, 2010 11:25 am Post subject: |
|
|
#1 don't download cracks. They tend to do stuff like this. Start up in Safe Mode and try to remove it. If it returns you will need to use a program to remove it for you.
#2 and this is the most important. Why in the world did you need one for WinRAR?
You do realize that all it does is nag if you don't purchase it, right? I have used mine unregistered forever, I just disregard the nag.
As for 4chan, it was ddosed. It's all over the net even on their status page.
http://status(.)4chan(.)org/ * NOTE remove () word filter is changing the link.
_________________
<Wiccaan> Bah that was supposed to say 'not saying its dead' lol. Fixing >.> |
|
Back to top |
|
|
Stylised Grandmaster Cheater Reputation: 20
Joined: 04 Nov 2008 Posts: 712
|
Posted: Tue Dec 28, 2010 11:51 am Post subject: |
|
|
^Ok, how do I remove this in safe mode?
|
|
Back to top |
|
|
AhMunRa Grandmaster Cheater Supreme Reputation: 27
Joined: 06 Aug 2010 Posts: 1117
|
Posted: Tue Dec 28, 2010 12:00 pm Post subject: |
|
|
In your config window I see that the MSE program you are talking about is in your user folder somewhere, you need to find the exact path, in safe mode delete the program. Then remove the entries in registry calling that program. Usually found at HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
What's the full name of this MSE software? There may also be an entry for it in Add\Remove Programs under Control Panel. Check that first before you try anything else.
_________________
<Wiccaan> Bah that was supposed to say 'not saying its dead' lol. Fixing >.> |
|
Back to top |
|
|
Stylised Grandmaster Cheater Reputation: 20
Joined: 04 Nov 2008 Posts: 712
|
Posted: Tue Dec 28, 2010 12:27 pm Post subject: |
|
|
Also, can you tell me where to find those registries specifically? I can't fund HKCU.
|
|
Back to top |
|
|
AhMunRa Grandmaster Cheater Supreme Reputation: 27
Joined: 06 Aug 2010 Posts: 1117
|
|
Back to top |
|
|
Dark Byte Site Admin Reputation: 460
Joined: 09 May 2003 Posts: 25363 Location: The netherlands
|
Posted: Tue Dec 28, 2010 2:14 pm Post subject: |
|
|
try the program here:
http://technet.microsoft.com/en-us/sysinternals/bb963902
It helps you find out all autorun methods and also allows you to remove them
Look specifically for non microsoft signed programs
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
|
|