Computer help thread

[rosh]

yes but stopping the process doesnt help. it will just run again at boot up time. it needs to be removed by uninstall or some other way which i can discuss tomorrow if she has no success. its 1:15am though and my brain is frying


mossopp : dont forget to run adware and spybot again

reboot

then run both progs again

then reboot

then log on and see if youre still having problems


good luck! let me know the progress and ill check in a few hours when im awake

[teeny]

hehe.. sounds like you should have a second look at my tasks too, rosh Then again.. i just reinstalled most last weekend so no need..

edited last post of mine

[forre]

Yep, sure. But it would give an indication. Yep, yep the plan is good rosh.

[Mossopp]

OK, in Windows/system32/drivers/etc there is 'hosts' and 'Imhosts' but I can't open either of them. One is a file and one is a SAM file............whatever that means!

[rosh]

hosts is the one we want ...can you not open it, select a program to open and choose word pad, then edit ?

if no luck, then mail the file to teeny who can upload ... and ill edit it for you

else do the other stuff i suggested.

[teeny]

Originally Posted by rosh

if no luck, then mail the file to teeny who can upload ... and ill edit it for you

sure thing

[Mossopp]

This is what it says when I open 'hosts' :

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost


It means nothing to me. Can you make sense of this?

[Mossopp]

BTW - I've contracted 7 new data-miners in the last 30 minutes.
I'm about ready to smash my head against the wall!!!!!!!

[rosh]

okay thats fine. your host file is perfectly normal.

go ahead and run the spybot and adaware progs again. and reboot, re-run the two progs, also your anti virus. then reboot

then log on and please give me some good news ....

[Mossopp]

OK, I'll get back to you in a few minutes Rosh.

[rosh]

sorry mossopp i really need to sleep tried to wait

if nothing worked, please tell me whats still happening. ill dig more tomorrow.

but in the meantime follow forre's suggestion of killing the omniscient.exe process. BEFORE you log onto the internet though.

this should help in the interim .... *crosses fingers and toes*

[teeny]

I'm heading for bed too.. I'm going to visit my brother tomorrow, so I won't be online most of the day. I'll be home somewhere around midnight I guess. So hosting files, if needed, might be a problem tomorrow at least.

Anyone think we could use the member gallery idea? make a computer trouble gallery or so. Though if deleting files in there is impossible might not be a good idea.

and mossopp if not installed already: install the windows updates. You can also locate them at http://windowsupdate.microsoft.com . In the suggested files section there is a update that includes a simple firewall. I find that one useful

Goodnight everyone and sleep well

[Mossopp]

I did everything you suggested but I'm still having the same problem.
The onnisceint exe. has already vanished so obviously getting rid of that makes no difference.
Thanks again for all your help. I'm off to bed now myself so I'll speak to you tomorrow.
Thanks to everyone who's tried to help me this evening.
Mossopp
x x

[rosh]

mossopp : list the funny processes running again. lets see what else we can find. i want to see if anything new is now running or not.

[teeny]

I'm up too now.. still a little bit tired though

[piojita]

Originally Posted by Mossopp

BTW - I've contracted 7 new data-miners in the last 30 minutes.
I'm about ready to smash my head against the wall!!!!!!!

It only takes a few minutes online to be infected if you don't have a firewall. Install a proper firewall, that is one that allows you to control all traffic (in/out) and doesn't give permission to certain programs atomatically. One example is Zone Alarm.

I noticed in the list of programs you posted a while ago that you have (or had) this one installed: wsem update

It seems to be a spyware (dialer). If you have the file wsem.dll on your computer check this out: spyware

More info: removal

[Mossopp]

Thanks piojita. I have downloaded and am currently running the Spyhunter software. I'm not holding my breath for any great results though cos all the other virus detectors I have used so far have been useless.
I have a firewall up already but I'm not sure how great it is cos it was already on this computer when I got it. I've deleted the wsem thingy from the add/remove programs list but I'm still haveing trouble with pop-ups.
If I have any good news to post on this subject I'll report back later...

[Mossopp]

Grrrrrrr! This Spyhunter thing is showing me all the nasties on my computer but it's telling me I have to pay if I want it to get rid of them for me!!!

[teeny]

sorry to be leaving you with the computer problems, mossopp would much rather be helping you out than installing windows 95 at my brothers computer today.
Would recommend the firewall aswell. Think the url is: www.zonealarm.com

[piojita]

Mossop, I never use these programs because they mess things up, there are free info online if you know what to search for. But, it takes time a lot of time to find the problem and removal instructions to get rid of it, deleting the problem doesn't help because when you reboot they will be back. Often you will need to edit the registry to prevent this and it's better if someone with proper knowledge does it for you. So, if you know you have a have a lot of spyware I would recommend to backup/format/install instead. Do you know how to do this?
Make sure to install a good firewall before you connect to the Internet and you have a clean start. Then make sure to avoid new ones