Members Login
Username 
 
Password 
    Remember Me  
Post Info TOPIC: Block checker for MSN


Moderator

Status: Offline
Posts: 5154
Date:
Block checker for MSN


It seems to be doing the rounds, but apart from being fairly useless, it is also bad. So don't be tempted:

This was posted by TX_101 on the Weebls' Stuff Forum:

I did a test run of the install program and it attempts to install an Internet Explorer BHO (Browser Helper Object - associated with toolbars and spyware/adware) and also a Startup entry (which could just be for the main program, but also could be dodgy as well). The main block checker program also attempts to open a connection on port 80 with the IP 67.15.38.83. Also the program will not stop running it's process and will instead keep running in the background when you attempt to close it. If you attempt to end the process, or even the process and all it's threads, then it will close but open another instance of itself to run instead. It will also check for the startup entry consistantly, and , if it doesn't find it, then it will create a new one. It makes a file called csrss.exe that also runs in the background and makes another instance of the main blockchecker program if you ever try to close it. The uninstall program, (if you can find it), takes off the actual block checker but leaves the malware part of it.
***************************************************************************
How to Remove the BlockChecker Malware from your system

This thing isn't a work of genius so this shouldn't be that hard.

On the Start Menu of Windows, pick run and type “regedit” and hit enter

navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

Delete the “BlockChecker” entry

Restart your computer

Open Windows Explorer

navigate to:
C:\Program Files\Block Checker

Delete the above directory

Sorted. Now to remove the BHO,

if you do not have Norton, then you can use a program like Spybot or HijackThis to remove the BHO "navshext.dll". If you do have norton then do not do this, as Norton also uses a BHO called "navshext.dll".


Basically, for those who can't be arsed to read, this program contains much badness (i.e. spyware). Follow the instructions from the asterisks downwards.



__________________

- Wibble & Parp -Mailwatch - MySpace


Moderator

Status: Offline
Posts: 5302
Date:

Didn't bother downloading it. No one ever blocks me anyway.

-- Edited by Captain Centipede at 19:52, 2005-08-23

__________________
- All your TURKEY SANDWICH are belong to us!
- Ah canny do it, Sutton! Ah've got noo anthology!
- *Squeaky voice*...I am a class A drug. Snort me!



Moderator

Status: Offline
Posts: 5154
Date:

Just too nice, you are

*makes note to block Ross*

But if anyone was gullible enough to download it, follow the steps above

__________________

- Wibble & Parp -Mailwatch - MySpace
Page 1 of 1  sorted by
 
Quick Reply

Please log in to post quick replies.

Tweet this page Post to Digg Post to Del.icio.us


Create your own FREE Forum
Report Abuse
Powered by ActiveBoard