Saved Bookmarks
| 1. |
Solve : please help me :(? |
|
Answer» Please help me. I have windows ME and i have this magic-ps v1.5 se++ thing on my computer. I can't find it and can't figure out how to get rid of it. I know its a password STEALER. The person that put it on my computer has taken over 7 of my accounts that I will never be able to get back. Can someone PLEASE help me get rid of it?Sounds like you got one nasty trojan. Download, update and run SpyBot (free): How do you know you have this thing? well i noticed that when i'd start up my computer my id for yahoo would be there but my password would be gone and i always have it save my password/id so i thought it was a lil WEIRD but didn't think anything else of it. then when i'd log on, it was like a message was popping up and then disappear immediately. well i was going through my archive one day and found this: This ID Hacked by : Magic-PS v1.5 SE++ ===> USER=sugar_n_spice50144 PASS=***** (only my real password was there) and then he imed me and said he wanted me to "show" for him on cam and i wouldn't do it so he signed on as me on his computer which kicked me off, then changed my password AND the info that is needed to request a new password, so I couldn't get back on. I have lost 7 accounts b/c of this. and i guess he sends messages to the ppl on my list. he sent them a link. like today, i had just gotten an account last night and then he took it today. i didn't even have it 24 hours. i NEED to get rid of this thing.Try this online scanner http://www.pandasoftware.com/activescan/sugar_n_spice19 Here's some info on this trojan ......and where you can look for it ...... A lot, and I mean a lot of people are infected with Magic PS. Especially with Magic PS 1.5 Second Edition. If you don't know what is Magic PS. Magic PS is a trojan, simply a program that steal your Yahoo! Messenger 5 or 6 user name and password to the sender. Magic PS 1.5 SE no longer show itself in the Message Archive, so checking there won't help. If the sender is stupid enough, he/she would sent you the file "sender.exe", DO NOT accept it because it is the default name for a MPS created file. Check your computer for certain files such as these: regsvr.exe in c:\Winnt or c:\Windows ; depends on version of Windows MsAgent32.exe in c:\*Win installed folder*\system 32 Perflib-Perfdata in c:\*Win installed folder*\System32 PIF in c:\*Win installed folder* NTMSJRLN in c:\*Win installed folder*\system32\NtmsData Sender.exe MPSmmtask0.exe in c:\Documents settings\*User Name*\Local settings\Temp The sender.exe (can be any name) file may also contain a text string "UPX-Scrambler RC1.x -> ©OnT®oL". You can see this by using a hex editor, etc. MPS 1.5 SE hides the (sender/hacker) Yahoo! ID in the sender.exe file, it is SCRAMBLED so even with a hex-editor, you still cannot view it. To reveal the (sender/hacker) Y! ID, simply reverse-engineer the sender.exe file. Be warned that Magic PS 1.6 will be release in the near future. Keep an eye out on the file that whoever sent you, you'll probably be safe. Something else we can try ........go to ....... http://www.majorgeeks.com/download3155.html and download HIJACKTHIS V1.99.1 once you have it installed .....run a scan , and save the log file and post it here for us to examine . In the meantime .......stay off messenger as much as possible until we get rid of the trojan .....and most important avoid any online contact .......with your stalker ......... DL65 Well done dl65! *clapping here*Have you notified your ISP? Use their abuse service. |
|