Staredit Network

Staredit Network -> Miscellaneous -> mmm...adware..tasty..

Report, edit, etc...Posted by Merrell on 2005-04-04 at 18:50:48

Wow, if any of you have or ever had a adware that takes over every ****cking download link?(because it contains the word DOWNLOAD)It also takes words like MAPS and SERVICE, etc. I have ad-aware, which helped nothing...

Its called DAOSEARCH or something, bah..

heres a screen shot..

Report, edit, etc...Posted by pekkel_the_duck on 2005-04-04 at 18:54:27

Go into safemode, use search files and find daosearch and delete anything with that name. It might work...

Report, edit, etc...Posted by Sodium_Chloride on 2005-04-04 at 19:23:45

I doubt that would work unless your following removal directions from a good website. Try to download some anti-adware software (along with it's updates) into a medium and shove it in your PC. Then install and run. If that doesn't work, you can always reformat.

If you ever rid it from your system, remember this:
DON'T CLICK THE MONKEY!

EDIT: Sorry, I meant to type spyware, not adware, but I goofed up.

Report, edit, etc...Posted by Yoshi da Sniper on 2005-04-04 at 19:26:03

Its spyware. I'd never have ads like that.

Report, edit, etc...Posted by LegacyWeapon on 2005-04-04 at 20:03:54

Microsoft AntiSpyware Beta.

It's actually pretty nice and can restore your browser settings (mostly for IE users but helps a lot

)

Report, edit, etc...Posted by Tarh on 2005-04-04 at 20:06:31

Dowload HijackThis, fix your search / home page addresses from the program, scan your PC, and post the results here. With this data, we will be able to help you remove this thing step-by-step manually.

Edit: The program (Microsoft AntiSpyware) referenced above can be downloaded here, in case you were wondering

)

Report, edit, etc...Posted by Merrell on 2005-04-04 at 20:29:19

I'm pretty sure its Adware AND spyware, i get popups all the time... www.daosearch.com/FREE is the main one..

Logfile of HijackThis v1.99.1
Scan saved at 8:25:13 PM, on 04/04/2005
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.00 (5.00.2614.3500)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\BOSTON ACOUSTICS\BOSTON USB AUDIO SYSTEM\BAUSB.EXE
C:\PROGRAM FILES\WILD FILE\GOBACK\GBPOLL.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SM56HLPR.EXE
C:\WINDOWS\SYSTEM\SKBPATCH.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\SERVICES\{0025CD40-9E2B-11D9-8736-444553540000}\SVCHOST.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/ext/gw/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://daosearch.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.gateway.com
F1 - win.ini: run=hpfsched
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
O4 - HKLM\..\Run: [USB Hub Keyboard Patch] SKBPATCH.EXE
O4 - HKLM\..\Run: [Quick Controls] C:\Program Files\Quick Controls\ASTROTOOLBAR.EXE
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [Service Host] C:\WINDOWS\SYSTEM\Services\{0025CD40-9E2B-11D9-8736-444553540000}\SVCHOST.EXE
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [BAUSB] C:\Program Files\Boston Acoustics\Boston USB Audio System\BAUSB.exe
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [GoBack Polling Service] C:\Program Files\Wild File\GoBack\GBPoll.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [MsnMsgr] "c:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O14 - IERESET.INF: START_PAGE_URL=www.gateway.com
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://sympatico.zone.msn.com/bingame/feed...outLauncher.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab

Report, edit, etc...Posted by PodFedJay on 2005-04-04 at 21:10:14

HAHA i had one of those spywares before!!!

But it was called coolsearch watever, my ad-aware would always delete it but it would always reinstall itself. MAN, that spywares blows, it blocked me from goin to most of the sites!!
I got rid of it by formatting the computer, GL with it

Report, edit, etc...Posted by LegacyWeapon on 2005-04-04 at 21:14:47

I'd rather download it from the official site rather than that place

http://g.msn.com/mh_mshp/98765?http://www....CE=popDownloads

The HijackThis download link seems to have expired:
http://majorgeeks.com/download3155.html

Report, edit, etc...Posted by RexyRex on 2005-04-04 at 21:16:48

Why doesn't ad-aware work...
Did you get the most recent patchy thing?

Report, edit, etc...Posted by PwnPirate on 2005-04-04 at 21:23:34

QUOTE

Microsoft AntiSpyware Beta.

It's actually pretty nice and can restore your browser settings (mostly for IE users but helps a lot )

It probably wouldn't work because adaware/spyware that is currently running can't be shut off by normal anti-spyware programs.

QUOTE

Hi MrrLL

...

Report, edit, etc...Posted by wesmic da pimp on 2005-04-04 at 21:25:30

Hi MrrLL

Report, edit, etc...Posted by Tarh on 2005-04-05 at 19:16:27

Your log file appears to be clean

You say that you can't even reset your home page? It sounds like an IERESET.INF problem, but you appear to be clean. I'll have to do more research on this one . . .

Report, edit, etc...Posted by n2o-SiMpSoNs on 2005-04-05 at 19:20:44

Well my internet explorer is all

with ad ware that reinstalls itself and changes the homepage and wont go away. SO I DOWNLOADED firefox and now im a lot happier and faster

Report, edit, etc...Posted by RexyRex on 2005-04-05 at 21:18:17

Oh, yes, I forgot.
Firefox is the solution.
Don't you see the Op Staredit.net section?

Report, edit, etc...Posted by Merrell on 2005-04-06 at 19:07:43

"Don't you see" this comp only has .5 of a gig left..

(I would play on my new comp but i cant connect to b.net, bah, go to battle.net support forums and look for mine..)

Report, edit, etc...Posted by LegacyWeapon on 2005-04-06 at 19:10:57

QUOTE(Jet_Blast54 @ Apr 4 2005, 09:23 PM)

It probably wouldn't work because adaware/spyware that is currently running can't be shut off by normal anti-spyware programs.
[right][snapback]180587[/snapback][/right]

You should see it, it is like the god of all Anti Spyware. It automatically detects the process and end tasks it for you so you don't need to restart your computer. This was made by Microsoft for Microsoft. They should know their capabilities better than anyone else. I know many of you hate Microsoft but I'm telling you I don't like IE much either but this program is seriously helpful.

Report, edit, etc...Posted by RexyRex on 2005-04-06 at 19:25:12

QUOTE

QUOTE(MrrLL's sig)

APRIL 2ND- More about my avatar. Me and Deathknight did it again apr2 =D We discovered a way on accident to invert colors in a certain part of a map.. no joke.. well, we aren't going to release any info yet.. because some people will submit it to battle.net again and patch it.. not mentioning any names *COUGH REXY COUGH* huh.. anyway.. fear..

What the fiddles do you have against me?
I'm sick of it...

I go in a game and get a long paragraph of "Rexy is such a whore she types all perfect to seem smart but really she's a bitch." or something along those lines. That's happened twice.

Then remember the time I acted like squelched you to see what you would REALLY say about me?

QUOTE(...)

RexyRex: Haha, what's he saying Dk?
MrrLL: rexy is a lesbian
RexyRex: Oh, and I'm not a lesbian.
MrrLL: ...
Deathknight2004: lol

Submit it to blizzard huh?
The only time I TALKED on the rarely used Battle.net forums was asking if they had the slightest clue about all the mapping sites and 3rd party editors etc..
Didn't mention a glitch or anything.

Wanna know what they said?
Not a damn thing.

So, what I get is that you don't like me becuase I use grammar.
Big ... ... ... deal.

I'm pissed, don't talk to me.

...

Report, edit, etc...Posted by Yoshi da Sniper on 2005-04-06 at 19:56:56

Please, chill out. Keep this to PM or something, the forum is not for this. If you have a problem with each other, theres an awesome "ignore user" option.

Report, edit, etc...Posted by Mini Moose 2707 on 2005-04-06 at 21:59:37

http://forums.majorgeeks.com/showthread.php?t=35407

Report, edit, etc...Posted by PodFedJay on 2005-04-07 at 17:21:28

WOw, that site helped me a lot.... thanks a lot moose.

LoL, MajorGeeks Support

Report, edit, etc...Posted by Merrell on 2005-04-08 at 16:04:38

I would click the links they give me, yes I would, if I could... daosearch takes over the word Virus and Scan and Check, Online, Spyware, Adware, Spyware, download..

so that site has no affect on me at all..

BTW rexy, take a joke, Deathknight calls me fat all the time. I cry a little inside, but I think its funny after =)

I never said anything about your grammar. I only said something when you went Laughing out loud. That is just annoying.. but anyway, man, calm down, I think I got my sig mixed up with another shemale.. I'll change it.

Report, edit, etc...Posted by Deathknight on 2005-04-08 at 16:15:11

Copy >> Paste in address bar.

Report, edit, etc...Posted by Merrell on 2005-04-08 at 19:49:22

if the link is typed out yes, if not, nope.............

Next Page (1)