Torrent Invites! Buy, Trade, Sell Or Find Free Invites, For EVERY Private Tracker! HDBits.org, BTN, PTP, MTV, Empornium, Orpheus, Bibliotik, RED, IPT, TL, PHD etc!



Results 1 to 7 of 7
  1. #1
    Donor
    Post101's Avatar
    Reputation Points
    4813
    Reputation Power
    100
    Join Date
    Mar 2011
    Posts
    3,806
    Time Online
    3 d 14 h 47 m
    Avg. Time Online
    1 m
    Mentioned
    9 Post(s)
    Quoted
    12 Post(s)
    Liked
    471 times
    Feedbacks
    158 (100%)

    95p.com redirect virus help?

    I just got this virus and can't use my laptop as it just redirects my google searches to 95p.com, there's plenty of guides on how to remove it but I'm stuck on one part.

    It says use task manager and select processes, in processes find the virus (random.exe) and select (end process)

    There is no file called (random.exe) in my processes tab and I'm not sure what to look for and delete.

    Can anyone please point me in the right direction as I have spent hours on this now, thank you.

  2. #2
    Extreme User PureBoy92's Avatar
    Reputation Points
    345
    Reputation Power
    77
    Join Date
    Jan 2011
    Posts
    2,541
    Time Online
    17 h 19 m
    Avg. Time Online
    N/A
    Mentioned
    2 Post(s)
    Quoted
    2 Post(s)
    Liked
    73 times
    Feedbacks
    144 (100%)
    Hey POST101, Found some TIPS for you, I hope it will help you.

    Here the Instructions to Remove 95p.com Virus

    Step1:

    First you have to stop the Process of 95p.com, press CTRL+ALT+DELETE to open the Windows Task Manager. Click on the “Processes” tab, search for the virus, then right-click it and select “End Process” key.

    Step2:

    Remove the 95p.com virus from registry editor. Click “Start” button and selecting “Run.” Type “regedit” into the box and click “OK.” Once the Registry Editor is open, search for the registry keys below:

    HKEY_CURRENT_USER\Software\[random]
    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “[random].exe”
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter “Enabled” = “0″
    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings “ProxyOverride” = ”
    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:33921″
    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings “ProxyEnable” = “1″

    Thats it, Now you will get relief with this hijacking Virus.
    If it doesn't works tell me, I'll find another for you.

  3. #3
    I Am Watching You!
    TheTrader's Avatar
    Reputation Points
    543445
    Reputation Power
    100
    Join Date
    Oct 2010
    Posts
    28,949
    Time Online
    1703 d 16 h 11 m
    Avg. Time Online
    10 h 14 m
    Mentioned
    10392 Post(s)
    Quoted
    2839 Post(s)
    Liked
    30538 times
    Feedbacks
    8640 (100%)
    I haven't got a virus the last 3-4 years...
    But whenever i got one, i didn't even try to get rid of it.
    The only way that made me feel 100% safe, was a fresh OS installation

    PS. Be careful of the porn sites. They are taking advantage of our love for pussies and they are full of viruses

  4. #4
    Donor
    Post101's Avatar
    Reputation Points
    4813
    Reputation Power
    100
    Join Date
    Mar 2011
    Posts
    3,806
    Time Online
    3 d 14 h 47 m
    Avg. Time Online
    1 m
    Mentioned
    9 Post(s)
    Quoted
    12 Post(s)
    Liked
    471 times
    Feedbacks
    158 (100%)
    That's the one I found too, my problem is this

    Click on the “Processes” tab, search for the virus, then right-click it and select “End Process” key
    What am I searching for?
    The virus would be disguised as a normal program so I don't know what to look for.

    The virus made changes to Internet explorer, so I removed the Internet explorer .exe file in task manager.
    This wiped my laptop: ) now I'm currently doing a repair to put things right

  5. #5
    Donor
    Post101's Avatar
    Reputation Points
    4813
    Reputation Power
    100
    Join Date
    Mar 2011
    Posts
    3,806
    Time Online
    3 d 14 h 47 m
    Avg. Time Online
    1 m
    Mentioned
    9 Post(s)
    Quoted
    12 Post(s)
    Liked
    471 times
    Feedbacks
    158 (100%)
    I see the thanks button just disappeared again, @TheTrader

    No porn this time, my GF click on a link, the Pc said Trojan detected and she clicked remove, this installed the virus

    Damn women!!

    Here is a list of processes in my task manager

    csrss.exe
    dwm.exe
    explorer.exe
    rundll32.exe
    taskhost.exe
    taskmgr.exe
    updater.exe
    rundll32.exe
    winlogon.exe

    So which one of the above could be the virus?
    Last edited by Post101Donor Icon; 01-08-2012 at 08:23 PM.

  6. #6
    Donor
    Post101's Avatar
    Reputation Points
    4813
    Reputation Power
    100
    Join Date
    Mar 2011
    Posts
    3,806
    Time Online
    3 d 14 h 47 m
    Avg. Time Online
    1 m
    Mentioned
    9 Post(s)
    Quoted
    12 Post(s)
    Liked
    471 times
    Feedbacks
    158 (100%)
    Ok so I fixed this.
    I will post what I did incase other members have the same problem.

    I ran (task manager) by pressing ctrl+alt+delete the select the (processes) tab.
    Select the (explorer.exe) like the one highlighted in the above post.
    Right click on it and select (end process)
    Your Pc will crash to a blank screen (don't have a heart attack like I did)
    Force your Pc to shut down by pressing the power button for a few seconds.
    When you turn your Pc back on you should have 2 options:
    (run Pc normally) or (a repair option)
    Click the repair option and let your Pc do the work, when it reboots it will be restored to the settings before you got the virus and you should have no more problems.

  7. #7
    New user chodiac's Avatar
    Reputation Points
    10
    Reputation Power
    0
    Join Date
    Jan 2011
    Posts
    1
    Time Online
    N/A
    Avg. Time Online
    N/A
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)
    Feedbacks
    0
    This has been going around for the past few weeks, it essentially takes a hold on your registry and hijacks it. You can either do repair or modify the registries it affects manually. I'm getting one now for "abnow.com"...


Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •