Technology Zone

[Samurai_Mo]

This virus is the most fcked up thing that will make you crazy for years

Because this virus will not give your program acces to update them self or connect to the internet or even let them crash

I had that virus my self
I could not update my windows
I could not connect to any game server to play games like rakion
and it even stopped program that are anti-virus/malware/spyware all that kinda of stuff
and in IE and Firefox when i searched something with google
and i clicked on it changed the site to go.google.com/dasjdasdnaskweird****urlthatwasaadverthising


But after day's searching and with help of my friends and there PC's
I found a way to let all anti-virus/malware/spyware programs to work to get that little ***** GO.GOOGLE.COM VIRUS



Go to Start > Control Panel(This Computer) > System(Right click on it and choose options) > click on the Hardware tab > click on Device Manager > click on View > click on Show Hidden Devices.

Scroll down to “Non-plug and Play Drivers” and click the plus icon to open those drivers.

Then search for “TDSSserv.sys”

Right click on it, and select “Disable”

Note: If you select Uninstall, it will install itself again when you reboot the system, so DON’T select Uninstall.

Restart your pc.

You can now update your Antirus/Malware/Rootkit softwares and the go.google rubbish will stop.

Its now up to the Anti-Virus/Malware/Spyware companies to make an effort to stop this, and not rely on simple basic home PC user’s like myself to save the world

In simple terms, TDSSserv.sys is a service/server redirecting all software updates to 127.0.0.1 (your own computer) so they won’t update.




oke after this update all your programs
and download spybot search&destroy and scan your pc
and than download on of these

Malwarebytes

OR

XoftspySE


malwarebytes and XoftspySE you need to buy those on but you will get a trail for some days and that is enough to delete the virus/malware/rootkit/spyware sh*t

[cosmeo3000]

Most viruses also use the hosts file to make changes. You can try looking there too.

[Nightmar149]

i've seen one case where one virus redirected software update for a certain antivirus or spyware program to a file infected with even more viruses from a remote ftp.

[Samurai_Mo]

Dude this virus is really annoying almost every 5 star anti-virus/malware/spyware program doesn't detect this on and that is what need to be fixed


XoftSpySE and malwarebytes are the only programs that found this out

and other program do not even find a clue about this
mostly the people that got that virus reformatted there pc
and that sucks

and this virus has some kinda of list of anti-virus sites that so it will block them and if it detected a connection to another server than it will close that server access right away

[asahi123]

hey, 127.0.0.1 ip is an ad(advertise) site. i found this in some article. And they know how to block.

Is that ip is real ad-site(i mean some pop-ups windows) because i want to block it also, any knows?

[ItsGreg]

Originally Posted by asahi123

hey, 127.0.0.1 ip is an ad(advertise) site. i found this in some article. And they know how to block.

Is that ip is real ad-site(i mean some pop-ups windows) because i want to block it also, any knows?

LOL.
127.0.0.1 is your localhost.
if you use WAMP or any other servers, you upload the files on to it, and you can view your site by that IP.
it's not ad site, unless you made it that way.

[Lula]

thanks so much i got this problem, this helped me out

[asahi123]

Originally Posted by ItsGreg

LOL.
127.0.0.1 is your localhost.
if you use WAMP or any other servers, you upload the files on to it, and you can view your site by that IP.
it's not ad site, unless you made it that way.

yah XD, i search and found that it was my localhost hehehe. i was wrong heheh. ok tnx