Computing.Net > Forums > Windows Me > a virus maybe?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

a virus maybe?

Reply to Message Icon

Name: sue
Date: November 8, 2003 at 22:55:57 Pacific
OS: windows me
CPU/Ram: toshiba
Comment:

hi, i think i clicked on a friends link in their profile on instant messenger. now everytime i sign on instant messenger a link called "www.talkstocks.net" appears in my profile and comes back everytime i sign on. it also changed my homepage. ive heard about worms or viruses going around like this, but do you know if there's any way to get rid of it? thanks a lot!



Sponsored Link
Ads by Google

Response Number 1
Name: sonnysandiego
Date: November 8, 2003 at 23:21:40 Pacific
Reply:

SUE!!! do you have sound now??


0

Response Number 2
Name: Leroi
Date: November 9, 2003 at 00:42:15 Pacific
Reply:

Check these threads:

http://computing.net/windowsme/wwwboard/forum/39526.html

http://www.computing.net/security/wwwboard/forum/6937.html


0

Response Number 3
Name: Ed in Texas.
Date: November 9, 2003 at 02:47:07 Pacific
Reply:

sue, you've been hijacked! Just one more in a long line of dirty tricks used by underhanded advertisers to make us read their trash. I understand that immunize in Spybot will prevent it and too there are proggies that will prevent hijacking of your homepage. HTH.
Ed in Texas.


Spybot Search & Destroy (read tutorial before running!):
http://security.kolla.de/index.php?

Tutorial:
http://tomcoyote.org/SPYBOT/index1.html

Stop hijacking (simply one of many):http://www.spywareinfo.com/downloads/spg/



0

Response Number 4
Name: AnimatedAntmo
Date: November 12, 2003 at 19:42:57 Pacific
Reply:

go to www.talkstocks.net and they have a thing about removing their spyware. I had it and thats how i got rid of it but my girlfriend seems to be having no luck...but maybe it will work for you


0

Response Number 5
Name: Frost
Date: November 13, 2003 at 15:44:48 Pacific
Reply:

I also have the talkstocks.net virus. I tried the SpyBot and AdAware and neither removed it from my computer. Any other suggestions?


0

Related Posts

See More



Response Number 6
Name: Drew
Date: November 13, 2003 at 19:09:01 Pacific
Reply:

alright, listen everyone, there is actually only one way to get rid of this epidemic going around, your going to have to manually go through your computer and completely delete it off of all ur files, I was lucky because I didn't let it download anything to my computer, some of my other friends had bad luck, and when they did download it, it sent Pornography throughout their entire computer. It made their icons turn into a mans penis and the icon at the same time, so, I say this, send an email and a message to EVERYONE you know via the internet and let them know about this epidemic. Also, if you seem to still be having difficulties with your computers you may need to save all ur MAIN files that you ABSOLUTELY need and completely quick restore, reformat, or something of that sort to your computer.....sorry to say it folks, but, that may be the best bet to stopping this nasty thing.......so, please, keep me informed by emailing me at: dr3w@comcast.net and I will reply asap to let you know of anything that I can help you with..I'm sorry you had to go through this as I and my friends, talk to you all soon....bye...


0

Response Number 7
Name: toddler9
Date: November 13, 2003 at 19:28:23 Pacific
Reply:

http://www.realphx.com/disclaimer.htm


0

Response Number 8
Name: dave
Date: November 13, 2003 at 20:08:36 Pacific
Reply:

quoting myself:

i don't know what method it uses to infect, but i tried as hard as i could to find out, the site's source is too cryptic and full of crap to really be informative, but

1) change your homepage to something else
2) ctrl+alt+delete and end task "b" / "b.exe"
3) go into start>run>"msconfig">startup tab>uncheck "b" / "b.exe"
4) delete the file c:\windows\b.exe

it will be gone

send me an im at 'magisterofmayhem' if you need any more help


0

Response Number 9
Name: Kovac
Date: November 13, 2003 at 20:17:17 Pacific
Reply:

Hmm, I'm rather puzzled as to why everyone is having such a problem with this so called virus. I think it's rather simple to remove so I will try to explain in my best efforts in removing it.
=============SOLUTION===================
1. Change your profile to something random (doesn't matter what just get rid of that link in there)
2. Close AIM completely ( Don't just log off, make sure you actually exit it)
3. Press CTRL + ALT + DEL, then click on the Processes tag.
4. Search for a process called "b.exe" and it should be running under your username at approximently 1200 k.
5. Click on the b.exe file and end process.
6. From here rush on over to your search widnow (Start menu > search >) and make SURE you search in "Files and folders"
7. Search for b.exe, a few programs should come up but only one actually labeled b.exe.
8. Hold shift and hit delete to remove it for good. ( or delete, go to recycle bin, and delete it from there )
9. Once those tasks are completed, simply rev your AIM back up and check your profile.

If you followed ALL of the following steps exactly, you should have no problem removing this silly bug. Happy profiling!

Any additional questions can be emailed to stellar1274@hotmail.com or IM me (screenname: JustinKovac) via AIM.


0

Response Number 10
Name: ktfshzy12
Date: November 14, 2003 at 01:27:50 Pacific
Reply:

Ok so i clicked on my friend's info and it said "Whoaaa...look what I found,click here" Now everytime I sign on my name on my pc..my info says that. How do I get it to go away? I tried some of the above methods, but I couldn't find anything that said b.exe. Is it a virus or what? Please help...thanks!!


0

Response Number 11
Name: Peri116
Date: November 14, 2003 at 09:33:39 Pacific
Reply:

So i did what magisterofmayhem said to do but once i actually found it it wouldnt delete? How do i delete this crazy thing?


0

Response Number 12
Name: nbest88
Date: November 15, 2003 at 20:24:05 Pacific
Reply:

i'm having the same problem as ktfshzy12. i clicked on this link in my friends profile that said "Whoaaa...look what I found,click here". now its in stuck in my profile. i deleted it, but when i sign off and bak on, its still there. can ne one help me?


0

Response Number 13
Name: robbie4850
Date: November 16, 2003 at 19:40:17 Pacific
Reply:

Try downloading the batch file program from this site. This should work for removing the talkstocks and realphx viruses.

http://www.jwdom.com/blog/attach/2003/11/15/0120/realphx.htm

Download and run this program then follow its directions.


0

Response Number 14
Name: Brian
Date: November 16, 2003 at 21:25:19 Pacific
Reply:

**This is not REALPHX**

This is a relatively new worm called the AXOuch worm. It acts a lot like realphx but it is different.

The best course of action is to follow the steps outlined in Response Number 9.

AdAware 6 will not help you at this time.

Thanks and good luck!


0

Response Number 15
Name: nbest88
Date: November 17, 2003 at 12:47:24 Pacific
Reply:

i tried to follow the directions in response 9, but it didn't work for me becuz i have Windows 2000 Professional, and when i do Ctrl + Alt + Delete, it goes to a 'Windows Security' screen, and i don't see any tab to end processes. i found the "b.exe" file but it wouldn't let me delete becuz it said it had an error and it was in use. so, if anyone has an idea on how to get rid of this worm thing, and could tell me, i would be so thankful.


0

Response Number 16
Name: nbest88
Date: November 17, 2003 at 17:39:06 Pacific
Reply:

nevermind anyone responding, lol, i figured out how to get to the processes tag, and i was sucessfully able to delete the "b.exe" file, and now my aim profile is just fine. but thanks anyway. byez


0

Response Number 17
Name: Amanda
Date: November 17, 2003 at 18:47:26 Pacific
Reply:

Okay, I had the same problem, but I got rid of the thing in my profile easily. However, it downloaded 2 programs on to my computer, one called Common Name and another called Win Favorites. Every time I try to delete them it comes up access denied. How do I get rid of these files??? Please help!


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Me Forum Home


Sponsored links

Ads by Google


Results for: a virus maybe?

Do i have a virus?? www.computing.net/answers/windows-me/do-i-have-a-virus/38017.html

kernal32 has a virus www.computing.net/answers/windows-me/kernal32-has-a-virus/29464.html

I have a virus that wont go away www.computing.net/answers/windows-me/i-have-a-virus-that-wont-go-away/40228.html