Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Hijack browser LIP GAME alt settings

Jan 1, 2006 10:09PM PST

Every time I start up my computer the settings in my ADSL connection is altered to nr;
004366098974893

Other settings in my dial up is also altered.

I have run Spybot and Lavasoft Ad-Aware free spyware but they don't solve the problem.

What to do??

I also got icons called Lip Game, PORN DVD and Dating which I removed.

Discussion is locked

- Collapse -
You said that Spybot and
Jan 1, 2006 10:19PM PST

Ad-Aware don't solve the problem. Do they find anything at all? Can you please supply some more information regarding that. You also did not supply your operating system as per the forum note which is above where you typed your subject into. If you are running W2000 or XP, please follow these directions. You may not need the log but save it just in case.


Dowload link http://www.ewido.net/en/


* Install ewido security suite
* When installing, under ''Additional Options'' uncheck ''Install background guard'' and ''Install scan via context menu''.
* Launch ewido, there should be an icon on your desktop double-click it.
* The program will now go to the main screen

You will need to update ewido to the latest definition files.

* On the left hand side of the main screen click Update
* Then click on Start Update

The update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can use this link to manually update ewido.
http://www.ewido.net/en/download/updates/

Once the updates are installed do the following:
* Click on scanner
* Click on Complete System Scan and the scan will begin.
* While the scan is in progress you will be prompted to clean files, click OK
* When it asks if you want to clean the first file, put a check in the lower left corner of the box that says ''Perform action on all infections'' then choose clean and click OK.
* Once the scan has completed, there will be a button located on the bottom of the screen named Save report
* Click Save report.
* Save the report .txt file to your desktop.

Now close ewido security suite.

- Collapse -
Thanks Why uncheck guard?
Jan 2, 2006 1:24PM PST

Thanks Why uncheck guard?

Now I have to log in almost every time I change webpage. ADSL WIN XP IE

And this morning when I started up someone was logged in on my comp.

- Collapse -
That's Why We Need More Info on OS.....
Jan 2, 2006 3:16PM PST

..are you behind a firewall? Router? Which? XP what? Home, Pro, Media? SP1, SP2 + full patching to date? S&D + Adaware with which definition dates? S&D in Advanced mode or basic?
Are you Hardwired or using Wireless for connections, mouse, keyboard ??
Do you have any P2P programs (Kazaa, E-mule Etc.)? An online interactive game program with open access??
If you found someone else logged into your machine (and there isn't supposed to be any other able to access) then you do have serious problems and I'd be making sure you're fully disconnected from net ANYTIME you're not directly in front of your machine. The more you give us, the fewer straight guesses we have to make, the more accurate the fixes & the sooner you'll be clean & safe again!
As Roddy32 suggested run Ewido and the log could be quite usefull to help with follow-up. Happy

- Collapse -
Ware
Jan 2, 2006 3:24PM PST

ADSL, no router, Norton antiv, spybot, Ad-aware updated
XP firewall pro Sp2 not updated

Hardwired
no P2P no games
S&D???

Coffecup for updating a webpage (seldom used)

- Collapse -
But still
Jan 2, 2006 3:17PM PST

But when I posted this reply I had to login again. I was automatically logged out of my ADSL connection.

Still a problem?

- Collapse -
Ewido rules Thanks
Jan 2, 2006 3:16PM PST

Ewido rules Thanks
Ewido found 7 mozillas and 2 hijackers that Ad-aware and spybot didn't

- Collapse -
Ewido problem
Jan 2, 2006 4:03PM PST

Hi, thanks Ewido took a lot more than Ad-aware and Spybot but after posting my latest reply,logged out from internet and disconnected.
Ran updated Ewido full system scan
cleaned went in again on CNET said thanks logged out, disconnected,
Then I did an Ewido smart scan and it found the enclosed problems;
+ Scan result:

[1372] C:\WINDOWS\system32\vbsys2.dll -> Hijacker.Agent.ac : Error during cleaning
C:\WINDOWS\system32\__delete_on_reboot__vbsys2.dll -> Hijacker.Agent.ac : Cleaned with backup
C:\Documents and Settings\Vuxen\Cookies\vuxen@com[2].txt -> Spyware.Cookie.Com : Cleaned with backup
C:\Documents and Settings\Vuxen\Cookies\vuxen@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\Vuxen\Cookies\vuxen@mediaplex[2].txt -> Spyware.Cookie.Mediaplex : Cleaned with backup

- Collapse -
2 Ideas to Help for Future.......
Jan 2, 2006 4:43PM PST

You have Spybot S&D (Search & Destroy). If you are using IE to browse etc., Spybot has a bad download blocker which will block many known cookies. If you set it to, it will let you know it is doing so thereby telling you which site is sending which cookies. It is located on the Immunize Page (Shield) in bottom half of page. Check box for Browser helper and (I like) "display dialog when blocking".
If you're using Mozilla, 1st set general cookies section to "block all 3rd party cookies". I also like to "ask me" when site tries for cookie placement. I always try deny first, session only 2nd. You can also have it remember you order to block (deny) at each site and it will remember and block without asking next time you visit there.
You will be very happy if you download & install CCleaner and run it (4 seconds more or less) before & after each internet session. Cookies are the least it cleans. Here's a post with links included for it:
http://reviews.cnet.com/5208-7813-0.html?forumID=32&threadID=105074&messageID=1263885
Enjoy!! Happy

- Collapse -
One More Thought Re: DSL Settings....I Imagine That......
Jan 4, 2006 1:52PM PST

when you set up your ADSL (with Modem?), you probably created either/or a cookie to identify yourself to server &/or set an auto complete form with your log on name & account number. Either of these may well be removed by cleaners/scanners. Likely you're erasing each time you run cleaner. In CCleaner there is a section to enter cookies you want to keep so they will not be removed. Conversely, you could also uncheck auto form complete history from the IE section (depending on whether its a cookie, auto filling or both. Enjoy. Grin