PDA

View Full Version : Mother****ing NSIS POPUPS!!!!


zolrak
09-12-2006, 07:56 AM
hello everybody
recently I´ve notice that some popups reading: ''advertising NSIS media''

they appear any time, even in firefox!

recently I've found its directory: c:/program files/common files/NSIS
and deleted everything..but appear again, when i click unninstall.exe evertithing is ok until reboot and appears again, and if you delete the dlls, they appear again. and nothing detecs that malware, I´ve used everithing I know, NOD, BITDEFENDER , MC CAFFEE, KEPERSKY, ADAWARE ETC. and it is undetected.

please: HEEEEEEEEELP!!!!!!!!!!!!!!!!

DarthBrady
09-12-2006, 09:20 AM
Calm down dude. You gotta research this stuff, before you freak out! :p
THis is not an adware or a worm, it's actually a vaild program used for online games from Nick jr. and others

TO REMOVE NSIS MEDIA FROM YOUR COMPUTER, SIMPLY GO TO CONTROL PANEL AND REMOVE NSIS MEDIA EXTENTION USING WINDOWS ADD/REMOVE PROGRAMS FEATURE

Read this:
http://www.zeropaid.com/bbs/spyware-adware/t-nsis-media-popups-page6-38259.html

FERGUS_MANERGUS
09-12-2006, 09:48 PM
u tried norton yet?

DarthBrady
09-13-2006, 12:10 AM
u tried norton yet?

Dude, Read my above post. I have seen this before, and posted the answer. Norton is the last thing that will help. ;)

zolrak
09-13-2006, 07:15 AM
no matter what you can saY: that thing is malware!
it installs in your pc without permission and if you uninstall it and erase it, and even the registry keys.....it appears again!
am desperate! I´ve uninstalled it an appears again!! DAMN!!! if this continues I will have no choice but to format the pc!

demon
09-13-2006, 07:40 AM
You could try hijack this (http://www.download.com/HijackThis/3000-8022_4-10227353.html?tag=txt) it may pick up something that has been missed.

DarthBrady
09-13-2006, 10:20 AM
no matter what you can saY: that thing is malware!
it installs in your pc without permission and if you uninstall it and erase it, and even the registry keys.....it appears again!
am desperate! I´ve uninstalled it an appears again!! DAMN!!! if this continues I will have no choice but to format the pc!

Well, If you tried the steps from the forum in the above link from my previous post, and you made sure to try to do run all your scan and uninstall software in safe mode (dont forget safe mode, very important), well then you could be correct and may very well have something infecting your PC. Spyware/Adware/Malware/Trojans - are often made to mimick or appear as legit software that it is not, it happens.

In this case, my first suspicion after googling for a bit would be that this is maybe a fake nullsoft installer or something. I am googling it now, so far, I have found these, they are names of adware that carry this exact problem:

-Adware.TrusInBar
-TrustIn
-trustin bar
-Adware.Win32.Azesearch.h
-Trustincash


*Check for this registry key in the Registry Editor:

HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\run trustin popups

The Earliest recorded knowing of this adware's existence, is April 2006. So its very new.


Now, please consider taking my advice:
Dont just go and format your PC to fix the problem, and if you feel that you just simply must do it; then hold off as long as possible, and try to beat the thing without formatting. Formatting is letting them win!
Besides one of the best ways to becoming skilled at computer problem solving is to make it a rule to yourself that you will NEVER resort to formatting or reinstalling your OS, to fix a problem unless its the most urgent emergency ever. Doing this will make your skill on a PC increase better, and it will make you feel ten times better when you solve somthing knowing that you didnt have to resort to some lame format&reinstall method anybody can do -Ha! You can fix it dude, anybody can. Just look inside and use the force...:)

godgryphon
09-13-2006, 12:31 PM
im pretty good at removing spyware and stuff, because ive had the worst spyware, called spyware quake. Darthbrady is 100% correct, safe mode is extremely important.try getting a registry cleaner or something and follow darthbrady's steps. I could try to make a registry key that removes it, but try darthbrady's steps first.






(P.S) a spyware that installs by itself is called a rogue spyware, and is usually installed by going to malicious websites.

FERGUS_MANERGUS
09-13-2006, 05:32 PM
Dude, Read my above post. I have seen this before, and posted the answer. Norton is the last thing that will help. ;)


we have the Corporate Version of Norton

Fierce Deity
09-13-2006, 09:29 PM
we have the Corporate Version of Norton

I have Norton too, and Norton sucks. I paid 60 dollars for that thing. Anyhow, Try using PCTools Antivirus, or Spyware Doctor from http://www.pctools.com/ . They have some pretty good stuff, and it was actually DB who recommended them, an dI love them. they found like 54 infections I didn't even know I had! My PC is faster now though. Registry Mechanic helps too, gets rid of orphan files and such.

zolrak
09-14-2006, 03:02 PM
thanks god I´ve solved the probem!
as the tutorial I read, thanks to darthbrady, before rebooting you have to
unplug your pc from power...if not, it will appear again lie if was not unninstalled...thanks darth...that popups were really annoying!

CASE SOLVED!!!

DarthBrady
09-14-2006, 07:40 PM
thanks god I´ve solved the probem!
as the tutorial I read, thanks to darthbrady, before rebooting you have to
unplug your pc from power...if not, it will appear again lie if was not unninstalled...thanks darth...that popups were really annoying!

CASE SOLVED!!!

YEAH! You did it! No problem dude, I knew you had it in ya'!

Pat yourself on the back, you fried that spam ! :D

FERGUS_MANERGUS
09-14-2006, 08:45 PM
I have Norton too, and Norton sucks. I paid 60 dollars for that thing. Anyhow, Try using PCTools Antivirus, or Spyware Doctor from http://www.pctools.com/ . They have some pretty good stuff, and it was actually DB who recommended them, an dI love them. they found like 54 infections I didn't even know I had! My PC is faster now though. Registry Mechanic helps too, gets rid of orphan files and such.


i said Corporate version

zolrak
09-15-2006, 07:22 AM
any way it wont solve anything
try bitdefender or nod

DarthBrady
09-15-2006, 08:55 PM
thanks god I´ve solved the probem!
as the tutorial I read, thanks to darthbrady, before rebooting you have to
unplug your pc from power...if not, it will appear again lie if was not unninstalled...thanks darth...that popups were really annoying!

CASE SOLVED!!!


Just so I and other know,
could you maybe put a brief explanation Here on how you ended up fixing the problem?

DarthBrady
09-15-2006, 08:55 PM
Just so I and other know,
could you maybe put a brief explanation Here on how you ended up fixing the problem?

There are many other IT groups and forums trying to fix this same problem, I'd like to share the info with them ;)