|
Posted by The Real Truth MVP on July 30, 2008, 7:14 pm
If you were Registered and logged in, you could reply and use other advanced thread options
--
Ignore posts made by the person called Leythos, he is a stalker who's been
obsessed with me for years ever since I spurned his advances towards me.
>
> | I just remembered I had a system snapshot from last week, and ignoring
> | all legit changes, there was only the folder with the desktop-
> | hijacking .bmp that System restore skipped, and your application
> | removed the folder+picture. However, it also did this:
>
> | deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\
> | \IpAutoconfigurationAddress
> | deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\
> | \IpAutoconfigurationMask
> | deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\
> | \IpAutoconfigurationSeed
> | deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
> | \DontAddDefaultGatewayDefault
> | deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
> | \EnableIcmpRedirect
> | deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
> | \EnableSecurityFilters
> | deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\SearchList
> | deleted SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
> | \UseDomainNameDevolution
>
> | Why?
>
> He can't explain. He didn't write it.
>
> Butts plagiarized the code from RogueFix by Stuart Saunders at
> http://www.internetinspiration.co.uk/roguefix.htm
> and he also plagiarized the MVP Hosts file found at
> http://www.mvps.org/winhelp2002/hosts.htm to produce that bastard child
> called "Remove-it"
> which is a delibarate name modification of the legitaimte tool RemoveIT
> found at
> http://www.incodesolutions.com/index2.html
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>
| 
XML site map