Re: Antivirus XP 2008

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Quoted text here. Click to load it

I just remembered I had a system snapshot from last week, and ignoring
all legit changes, there was only the folder with the desktop-
hijacking .bmp that System restore skipped, and your application
removed the folder+picture. However, it also did this:

deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\
\IpAutoconfigurationAddress
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\
\IpAutoconfigurationMask
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\
\IpAutoconfigurationSeed
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
\DontAddDefaultGatewayDefault
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
\EnableIcmpRedirect
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
\EnableSecurityFilters
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\SearchList
deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
\UseDomainNameDevolution

Why?

Re: Antivirus XP 2008


| I just remembered I had a system snapshot from last week, and ignoring
| all legit changes, there was only the folder with the desktop-
| hijacking .bmp that System restore skipped, and your application
| removed the folder+picture. However, it also did this:

| deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\
| \IpAutoconfigurationAddress
| deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\
| \IpAutoconfigurationMask
| deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\
| \IpAutoconfigurationSeed
| deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
| \DontAddDefaultGatewayDefault
| deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
| \EnableIcmpRedirect
| deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
| \EnableSecurityFilters
| deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\SearchList
| deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
| \UseDomainNameDevolution

| Why?

He can't explain.  He didn't write it.

Butts plagiarized the code from RogueFix by Stuart Saunders at
http://www.internetinspiration.co.uk/roguefix.htm
and he also plagiarized the MVP Hosts file found at
http://www.mvps.org/winhelp2002/hosts.htm to produce that bastard child called
"Remove-it"
which is a delibarate name modification of the legitaimte tool RemoveIT found at
http://www.incodesolutions.com/index2.html

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Antivirus XP 2008

Everything you just said is a flat out lie.

--
Ignore posts made by the person called Leythos, he is a stalker who's been
obsessed with me for years ever since I spurned his advances towards me.




Quoted text here. Click to load it


Re: Antivirus XP 2008




Quoted text here. Click to load it

Not hardly. Your just a mentally disturbed individual with too much time on
his hands. And things have been done about you, with varying degrees of
success.

 



--
Regards,
Dustin Cook,  Author of BugHunter
BugHunter - http://bughunter.it-mate.co.uk
MalwareBytes - http://www.malwarebytes.org
  


Re: Antivirus XP 2008

Remove-it has built into it the Winsock repair command that MS recommends to
fix internet connection issues and removes altered LSP's. Resetting the
Winsock using the netsh winsock command removes all the third-party LSPs and
restores Winsock to factory default setting. Malware likes to add stuff to
the TCP/IP stack. This fixes it.

--
Ignore posts made by the person called Leythos, he is a stalker who's been
obsessed with me for years ever since I spurned his advances towards me.




Quoted text here. Click to load it


Site Timeline