Go Back   EQEmulator Home > EQEmulator Forums > Misc > Misc::Off Topic

Misc::Off Topic Want to talk about something that has nothing to do with EverQuest or the emulator? Post here.

Reply
 
Thread Tools Display Modes
  #1  
Old 12-20-2006, 02:13 AM
John Adams
Demi-God
 
Join Date: Jul 2006
Posts: 1,552
Default

Teppen, glad to see your issues are worked out. Your problem is a very scarey one, though. Sounds like you had all the technical savvy to attempt to troubleshoot, yet something still was clinging in there. Welcome back!
Reply With Quote
  #2  
Old 12-20-2006, 03:23 AM
GeorgeS
Forum Guide
 
Join Date: Sep 2003
Location: California
Posts: 1,474
Default

Acronis True Image backup is very valuable. I bought my copy a few months ago, and is leagues better than norton ghost.

GeorgeS
__________________
Your source for EQ database tools
Toolshop is open for business


http://www.georgestools.chrsschb.com//
Reply With Quote
  #3  
Old 12-20-2006, 08:54 AM
Teppen
Banned
 
Join Date: Jan 2002
Posts: 80
Default ... it came back

after i used the Acronis True Image backup and reverted to factory install, patched to current windows updates, patched up to current norton av version, ran full norton av check which came back nothing wrong, I installed and ran the three programs listed by Angelox, all came back nothing wrong. also ran latest spybot s&d, nothing returned.

if i type in 66.28.184.13 page loads. but if i try to login takes to same error page i was getting and doesnt log me in. also if i try googling projecteq and clicking or www.projecteq.net in address bar returns with same error.

also if i try 66.28.184.13/quests
or 66.28.184.13/edit
or 66.28.184.13/quests/submit
or 66.28.184.13/quick_recipe.php

all redirect to www.projecteq.net and then loads same error page i was getting. so im still stuck.

only sites i visited was:

updates for windows
updates for norton av
those 3 sites listed by Angelox
google search for projecteq

so i didnt wander far but still got hit by this nasty thing again. any ideas?
Reply With Quote
  #4  
Old 12-20-2006, 09:51 AM
cavedude's Avatar
cavedude
The PEQ Dude
 
Join Date: Apr 2003
Location: -
Posts: 1,988
Default

You may have an infection. More than likely spyware, and the thing you need to know about spyware is one program is NEVER enough. Spybot, like all other anti-spyware programs on its on SUCKS. But, if you use spybot, ad-aware, ewido, M$ defender, etc all together than you have quite the defense. Also, you'll need to make use of tools such as hijackthis, autoruns, and Winsock XP Fix to fully get rid of most infections. The other thing you need to know is there isn't a single anti-virus program on the market that effectively fights spyware. Sure, they can detect a couple of variants here and there but they can't completely remove them.

So, I recommend grabbing as many anti-spyware tools as you can (starting with the ones I mentioned above) install them, boot into safe mode, and do full scans with all of them (let your machine scan over night) When they are finished cleaning, run hijackthis and autoruns, remove any suspicious entries either finds. Hell, if you don't mind reinstalling a couple of programs, remove everything both find EXCEPT Microsoft entries and your device drivers (though keep an eye out for any odd ones). Run Winsock XP Fix to repair your winsock, and reboot into safe mode again. Run hijack and autoruns again. If any of the entries are back (and they aren't obvious ones that aren't malicious) track down the file, remove it if you can, remove the entry and reboot again.

In most cases that should clean your machine. Many exceptions apply, but the scanners will tell you everything you need to know. If something lingers, do a search on the web for manual removal directions.

If it still doesn't work, then I would recommend backing up any user data, formatting and starting fresh. A backup image is useless if it too, is infected or has the problem.

Last edited by cavedude; 12-20-2006 at 05:56 PM..
Reply With Quote
  #5  
Old 12-20-2006, 10:27 AM
eq4me
Hill Giant
 
Join Date: Jul 2006
Posts: 166
Default

I was just browsing through this thread so dont beat me if I am way of.

I recon you have an Internet Router/Firewall. Maybe with an dhcp server.
If you have it might be a good idea to boot from some Linux Life CD like Knoppix and try if you can reproduce the behavior. If yes you most probably have an wonky/hacked Router/Firewall Setup.
Reply With Quote
  #6  
Old 12-20-2006, 02:14 PM
rojadruid
Discordant
 
Join Date: May 2005
Location: Smith Falls, Ontario, Canada
Posts: 283
Default

Quote:
Originally Posted by eq4me
I was just browsing through this thread so dont beat me if I am way of.

I recon you have an Internet Router/Firewall. Maybe with an dhcp server.
If you have it might be a good idea to boot from some Linux Life CD like Knoppix and try if you can reproduce the behavior. If yes you most probably have an wonky/hacked Router/Firewall Setup.
Or bypass the router and connect directly to the modem and then try the website.
__________________
Rojadruid

Innoruuk Server [legit]
Server Admin.
Server Status: UP
Reply With Quote
  #7  
Old 12-20-2006, 02:34 PM
Angelox
AX Classic Developer
 
Join Date: May 2006
Location: filler
Posts: 2,049
Default

Here's more possibilties;

Make sure you don't have any hidden partitions - PC's like Dell, Compaq, like to make partitions that are "hidden" - I've had situations where the malware would come back from places like that.
What brand router do you have? look it up on the net make sure there's no bugs with it - Routers can be hacked too. If you can, Flash- upgrade your router to whats newest.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

   

All times are GMT -4. The time now is 12:46 PM.


 

Everquest is a registered trademark of Daybreak Game Company LLC.
EQEmulator is not associated or affiliated in any way with Daybreak Game Company LLC.
Except where otherwise noted, this site is licensed under a Creative Commons License.
       
Powered by vBulletin®, Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
Template by Bluepearl Design and vBulletin Templates - Ver3.3