I somehow got this program on my computer, obviously from the web. It’s questionable because it starts up with windows, and changes it’s name every single time. The program that’s running, comes from the suspicious program. What I mean is, one day the program was called NKDA360, then FBX4033, then STUB191. I used the Process View program it uses a program called DJGRSHST. I don’t know if that’s the actual program generating the other programs, or what.
If I right click on the STUB191 icon, something called Portal pops up. I just looked at it, and it’s defiantly brings up a porn sight. It also puts icons on my desktop. They link to www.wfix.com.
If anybody’s heard of this, please let me know how to kill it. I’ll try destroying DJGRHST and rebooting. According to Process View, it’s startup code is:
-F:C:\WINDOWS\TEMP\stvB192.TMP -BxPxF: -MxRxE:C:\WINDOWS\APPLICATION DATA\DJGRSHST.EXE -QuieT
First, pick up a freeware copy of AdAware, which will identify and get rid of spyware (what you’ve got isn’t spyware, strictly speaking, but I believe AdAware will still get it).
Of course, you can also hunt down the offending executable and delete it. Finding the calls to it can be trickier, since it might be launching from the Startup group, from the autoexec, from the registry, etc. I’d tell you how to go after those, but from the folder names you’re giving, you’re not running the same version of Windows I am, and my memory of older versions is getting hazy!
While you’re at it, you can kill all the files in c:\windows emp. As the name of the folder implies, there are no files in there that can’t be deleted (though if a currently running program is accessing one of them, it won’t let you delete the temp file until after that program has been terminated).
Ouch, you’ve somehow stumbled upon lop.com. Were you trying to get an MP3 or porn searching program? Lop’s version of these have heinous license agreements which basically allow them to sell your soul, and name your firstborn.
You can find out about them here. As Early Out stated, AdAware should remove the problem, but make sure you get the latest version of the reference files. There are several other programs that also remove it, linked from the link I gave you.
More like, “eat your firstborn!”
Yeah, I have AdAware but it must not be recent enough. I deleted the DJGRSHST program and that seems to have solved the problem.
I think I’ll see about updateing AdAware. Thanks.
Howdy dudes,
I am running adaware .84 and have always been a hugr fan of it.
Unfortunatly i have a nasty start/404 page thing going on
It is called “browsewise” and i can not for the life of me get rid of it.
It may be kaaza doing it … but i cna not be sure… everytime i kill the xupiture and do the reg hack it goes for a boot …and then on reboot there it bloody is again.
Thoughts ?
Over in this thread, tomndebb refers to encountering “browserwise,” and has a link to some software that cleaned it up for him. Probably worth a look.
Using a more secure browser such as Opera might prevent such problems. As an added bonus for you pornophiles, Opera has a nifty magnification function.
I will second the Opera recomendation, (built in pop up blocker )
Basically, by avoiding the mainstream products (I.E., Outlook) you can avoid many computer problems.