[HKNewBi]

Originally Posted by Skindog

Yes mate, tried pretty much everything. Don't wanna go the format route, too much stuff that I need and don't wanna spend a week reinstalling everything..

Can't believe that there is no information on the net about this..

I use Firefox, but the culprit brings up IE and tries to connect to 123sha.com

I was surprised at the lack of stuff on the net. I 'think' it installed itself when I installed some dodgy chinese tv streaming software to watch some of the prem games. That is all I can put it down to.

I went down the reformat route as I was going to do that anyway and this was the straw that broke the camel's back as it were.

[billysastard]

Originally Posted by HKNewBi

I was surprised at the lack of stuff on the net. I 'think' it installed itself when I installed some dodgy chinese tv streaming software to watch some of the prem games. That is all I can put it down to.

I went down the reformat route as I was going to do that anyway and this was the straw that broke the camel's back as it were.

Its definately the streaming program. Its exactly what I had & shows exactly the same symptoms (sp?). Can someone tell me how to delete this stuff from the registry? Its been a while since I've done that, & I'm not sure where to look. No desire to reinstall windows (ARGHHHH!!! it just came up with that site again!) as I can't afford a windows disk. Unfortunately I only have AVG, Zonealarm, adaware & spybot. Just got hijack this, but I dunno what I'm supposed to do with it.

[Oman Mercenary]

Have you tried "restore" in {say} XP to revert your computer back to a time & date BEFORE you added this program + "nasty"??

START + HELP + UNDO CHANGES, and then "wind your clock back" & restart. Then - if it works out - set a restore point when it is "CLEAN" (& never, ever restore back to any date where the nasty is still lurking). Should work - unless it has attacked deep into the Operating System's root. [Like those lousy Music CD's did].

[billysastard]

Originally Posted by Oman Mercenary

Have you tried "restore" in {say} XP to revert your computer back to a time & date BEFORE you added this program + "nasty"??

START + HELP + UNDO CHANGES, and then "wind your clock back" & restart. Then - if it works out - set a restore point when it is "CLEAN" (& never, ever restore back to any date where the nasty is still lurking). Should work - unless it has attacked deep into the Operating System's root. [Like those lousy Music CD's did].

Tried, failed. Installed ad-aware since, so a system restore did nothing. nor did registry booster, Hijack this didn't even see it. Its getting ridiculous now. Has anyone else found a fix that didn't include reinstalling windows/formatting?

[skip]

I had exactly the same problem (different viruses ) it became so frustrating in the end I just reformatted the whole thing and bought a very good anti-virus program.

No probs now.

Hong Kong is probably the one of the worst places in the world to be attacked by computer viruses.

[Expatriate]

You just need more defenses. I didn't have a virus problem for ages; maybe 10 years or so.

[takeanu]

Look at regedt32 under HKEY_LOCAL_MACHINE ---> SOFTWARE ----> MICROSOFT
----> WINDOWS ----> CURRENT VERSION ----> AND LOOK UNDER --->RUN OR RUN
----> ONCE

see if there is anything that is not suppose to be there.
Also there might be something on services.msc.

Use hijack this and scan. Remove anything that is not suppose to be there.

Other than that update virus scan and scan in safe mode. It's hard but reformatting is probably your best option everything else fails.

[HKNewBi]

I checked those registry entries when I had the problem and found nothing suspicious there.

[Skindog]

Originally Posted by billysastard

Its definately the streaming program. Its exactly what I had & shows exactly the same symptoms (sp?). Can someone tell me how to delete this stuff from the registry? Its been a while since I've done that, & I'm not sure where to look. No desire to reinstall windows (ARGHHHH!!! it just came up with that site again!) as I can't afford a windows disk. Unfortunately I only have AVG, Zonealarm, adaware & spybot. Just got hijack this, but I dunno what I'm supposed to do with it.

I used Registry 1st Aid, just typed in 927up and csrss to search for.. Deleted all instances it brought up, make sure you don't delete csrss from the WINDOWS-SYSTEM32 reference.. All others can go..
Again, I did this in safe mode...

[Oman Mercenary]

Try ----> EWIDO.COM's new "Seek & Destroy" ... comes from Grisoft's AVG Anti-Virus stable of products.

You might find that this program will boot it out for you.