gergermen

yes

下次如果再有啲咁情況，可以睇呢個文件入面內容，咁你識搞嘞

[ Last edited by gergermen on 2006-1-15 at 05:24 PM ]

147ak477

edited the hosts file
hope the popup doesn't show

你之前有冇裝過?咩SOFTWARE/ 咩TOOLBAR之類，同埋之前有冇呢種情況，幾時出現。

i downloaded a crack file from internet  "an exe file"
then the windows task bar pop up sth said spyware infected and my desktop background changed to the one i said above

then i install norton, microsoft antispy, yahoo task bar etc
still cannot solve.. it

i have just restarted the computer

gergermen

Originally posted by 147ak477 at 2006-1-15 17:37:
edited the hosts file
hope the pop...

啲CRACK FILE 唔好亂咁DOWN，有啲可能唔係真。
你想揾CRACK FILE我俾個網址你DOWN。

有啲問題可能軟件搞唔掂，要手工先搞得掂。

改返個HOST文件，應該冇事。

147ak477

i edited the host file
and restart
and open the host file again
those strange things appeared again
and i manually edit it and connnect to internet

after i connect, microsoft anti-spyware detected the contextplus.com wants to modify the windows host file and i click block it

147ak477

pop up appeared again
i checked the host files
again they are modified
should i change the property of that file to read-only?

147ak477

now the situation is even worse
even the hosts files are "clean"
the pop-up still appear

gergermen

你再用HIJACKTHIS掃一次。

個LOG POST上嚟。

應該係仲有咩未清/你唔知裝咗邊個軟件，而嗰個正是根源所在。

gergermen

開始——程式集，啓動，入面有冇咩隨機開嘅程序?

清埋TEMP入面啲內容（連隱藏嗰啲一齊）

開始——執行，MSCONFIG，啓動呢項（CAP張圖）

147ak477

(1)
by TEMP, you mean c:\ TEMP
or C:\Documents and Settings\Administrator\Local Settings\Temp?

scan log please change to .log

[ Last edited by 147ak477 on 2006-1-15 at 11:42 PM ]

147ak477

開始——程式集，啓動，入面有冇咩隨機開嘅程序?

only have microsoft office and acrobat reader quick launch