Spyware el. virus gjør så jeg ikke kan spille BF2

[XanderX]

søk litt på google og fant dett

 

I keep getting kicked by PunkBuster for "Blocked O/S Privileges"?

 

Please temporarily disable other security type programs you have running such as anti-virus, process guard, SDProtector, etc. to find out which of them is blocking PB's access to resources on your computer. You either need to run PB without the blocking program(s) or play on non-PB servers. Also make sure you run the game under an Administrator or equivalent account under Windows. If you do have access an admin account, you can right click on the application you want to run and select "Run As". This will allow you to give admin access to that program and should allow you to play with a limited user.

 

I keep getting kicked by PunkBuster for "Insufficient O/S Privileges"?

 

Download and run this file from any location, it will check for adware that stops you from being able to play on PB servers. The VX2 adware edits your user rights when it infects your computer, and many programs do not repair this when they remove it.

 

http://www.greyknight17.com/spy/VX2Finder(126).exe

 

Click the "Find VX2.betterinternet info" button to make sure that you don't have this adware. If there are no files listed, go on to the last step. If you find the adware files, (it is usually 3 random named dll files) Select all the files found.

 

Press 'Delete These Files'. The program will delete all files but one that will be deleted on reboot. Allow program to reboot. Once Restarted:

 

    * Press 'Guardian.reg'.

    * Press 'User Agent'.

    * Press 'Restore Policy'.

 

Clicking on "find vx2.BetterInternet info" again should show all fields blank.

If you have no adware files, just click on the "Restore Policy" Button

[zjulik]

Øh...hehe...XanderX var før meg

Endret 13. juni 2006 av zjulik

[Plecto]

Har lest det før... Virker ikke som om det er noen programmer som forårsaker dette (lukket alt som var) og denne VX2finder saken fant ingenting

 

Her er forresten loggen fra Fixwareout:

 

 

Fixwareout ver 1.003

Last edited 04/26/2006

Post this report in the forums please

 

Reg Entries that were deleted

...

 

Random Runs removed from HKLM

...

 

PLEASE NOTE, There WILL be LEGIT FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

Example ipsec6.exe is lagitamate

 

»»»»» Search by size and names...

C:\WINDOWS\SYSTEM32\FTP.EXE

 

»»»»» Misc files

 

»»»»» Checking for older varients covered by the Rem3 tool

 

»»»»»

Search five digit cs, dm and jb files

This WILL/CAN also list Legit Files, Submit them at Virustotal

 

 

Panda:

 

 

Incident Status Location

 

Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Torri\Cookies\[email protected][1].txt

Spyware:Cookie/Hbmediapro Not disinfected C:\Documents and Settings\Torri\Cookies\[email protected][2].txt

Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Torri\Cookies\[email protected][1].txt

Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Torri\Cookies\torri@atdmt[2].txt

Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Torri\Cookies\torri@com[1].txt

Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Torri\Cookies\torri@mediaplex[2].txt

Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Torri\Cookies\torri@tradedoubler[1].txt

Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Torri\Cookies\torri@tribalfusion[1].txt

Adware:Adware/DollarRevenue Not disinfected C:\RECYCLER\S-1-5-21-1957994488-1659004503-725345543-500\Dc1.exe

Endret 13. juni 2006 av Hektor123

[berxter]

Velvel; kjør ccleaner, evt tøm raskbøtta, så sier Panda at du er rein. Fixwareout synes dermed å ha tatt småbitene i registeret.

Dersom du har samme problemet med bf2 fortsatt er jeg så godt som tom for forslag. Det finnes jo et par program som finner rootkits, men jeg har liten erfaring med den biten. Silent runners og f-secure blacklight rinner meg i hu; tviler dog sterkt på om det er noe i den gata.

EDIT: Jeg ser at Silent Runners gir en logg som er lesbar for mennesker i de nyere versjonene, så det er kanskje verd å prøve...

 

Bernt K

Endret 13. juni 2006 av berxter

[XanderX]

Har nemmelig samme problem, tok og laget meg en ny bruker:P så gikk det en gang, men så fikk jeg samme mld igjen:@

Endret 14. juni 2006 av XanderX

[berxter]

Det var noe småtteri her, men start din egen tråd, vær så snill.... Bare kopier HJTloggen til den nye tråden...

 

 

Bernt K