New Pornstar Interviews - [more]
Audrey Madison Interview

"I really want even more DPs and double anal. And more gangbang stuff."
All Forums > Tech Talk > Tech Talk Forum Page 60 > zolus.org = virus?
AuthorPost
pears
Member


19 Posts
11/03
Posted - Dec 26 2003 : 12:06AM
There is something that changes my home page to http://zolus.org from time to time. And it will also adds some silly links like 'Shopping', 'Travel', 'Car' etc to my Favourites folder.

I don't know if this is all it does and the worst is it may be snooping while I'm shopping online taking my credit card no.

My Norton Anti-virus 2002 did not detect any virus but I think this may be a virus. The Add/Remove Programs now has an error:

An unexpected error occurred.
Wrong number of arguments or invalid property assignment
res://sp3res.dll/default.hta
Line: 84

There are some viruses that disabled the Add/Remove Program with such an error so as to prevent the user from uninstalling certain programs eg. Internet Explorer that are infected.

Is it a virus? How malicious is this virus? How to kill it?

I'm on Win2000. Any advise appreciated. Thks.

PL
Senior Member

God hates us all, you know it's true, God hates this place. - Slayer
1726 Posts
10/03
Posted - Dec 26 2003 : 12:25AM
I had a buddy of mine that had a problem similar to this, I couldnt ficgure it out. Best I could figure was something (Java/ActiveX script) wrote somthing to the registry or to a file and it gets its settings from there. Best advice I can offer: Format and reinstall...

I'l keep monitoring this thread though, I'm curious if some one has a way to fix it!

pears
Member

19 Posts
11/03
Posted - Dec 26 2003 : 12:42AM
Thanks for the info. I guess I have to format/re-install to get rid of that nuisance.

It does make me wonder what are the monetary gains for zolus.org to infect people's computer like that. I will never click any of those links or visit zolus.org so zolus.org's effort to get people to do the things they want people to may be useless.

I notice that some adult sites has the habit of changing the homepage or adding links to favourites folder like how zolus.org did, except that zolus.org is resident in my computer - I wasn't online or surfing any site when it changes my homepage. I wish anti-virus companies would write their software to prevent virus from changing the home page or adding links to the favourite folder. If the anti-virus sounds an alarm, I will know there is definitely a breach in my computer.

Hopefully the anti-spam act will take care of people like zolus.org.

westminster
Member

Canada
38 Posts
8/03
Posted - Dec 26 2003 : 1:23AM
I don't have a solution to this zolus.org virus but it would appear that zolus.org are scamers/cheaters according to these web pages:

http://julia.sitelijst.nl/blacklisted_cheaters.htm

Blacklisted Fucking Cheaters: They are using Dialers / Consoles after submitting a nice gallerie.

I will send this url's to all TGP webmasters
:
Domain http://www.zolus.org
:

http://www.zuludatabase.com/zbanned.html

Banned List
These sites are prohibited from listing their sites on the Zuludatabase and other Buffet Family sites due to their webmasters not adhering to an appropriate code of conduct, including but not limited to: Changing sites after review, adding popups or consoles, etc...
:
zolus.org
:

DenverDon
Benevolent

Firmly Embedded in Depravity
5914 Posts
7/02
Posted - Dec 26 2003 : 1:41AM
Couple of things you might try.

Ad-Ware can remove and block adware programs. Not sure if this is causing your problem but it might help. adware programs usually produce pop-up at sites that don't have pop-ups, or just after a certain amount of time on the net.

You can also try searching in your registry for words like "zolus.org" and see if it pops up. It if pops up in a 'header' section then that is probably what is screwing with things. You can remove it, but in the registry you have to be very careful. Read the manual on registry and making backups before changing things. You screw up the registry and you can trash the computer.

DenverDon

It sounds to me like an adware or spyware program that has unceremoniously loaded itself into your system. I had a similar problem to what you described called 'sobig'. If it is a virus program and your Norton didn't catch it, you might want to check for current virus downloads from Symantec to update yourself.

Edited by - DenverDon on 12/26/2003 1:45:35 AM

 
pears
Member

19 Posts
11/03
Posted - Jan 1 2004 : 9:30PM
DenverDon:

You are right about the adware and spyware infection. My computer was infected by such programs. I don't think Norton can catch them as my Norton engine is up-to-date with the latest virus definitions through the auto live update. A search in the registry through regedit does not return anything on zolus.org.

Ad-Aware from Lavasoft was able to detect some breach in my registry. I took a further step of downloading spy bot from download.com and had similar results. Both Ad-Aware and Spy Bot is able to kill the adware/spyware.

Here are some sympthoms of an infected computer:
- homepage in Internet Explorer changes
- links added to your Favorites folder
- Add/Remove Program returns an error
- Windows Media Player can no longer launch

Thanks for the help.

PL:
As you can see, the cause of this problem is adware/spyware and the solution to this is through Ad-Aware or Spy Bot.

GaySatyr
Senior Member

Half dirty ol' man; half horny ol' goat!
1684 Posts
10/00
Posted - Jan 2 2004 : 7:44PM
I consider Ad-aware and SpyBot Search & Destroy to be essential tools for keeping my computer in top operating order. I've automated them so that they run unassisted on a weekly basis just like I run a system virus scan and hard disk tests & defragmentation weekly. I also use the "immunize" function provided by SBS&D. Plus I have the anti-pop-up toolbar from google.com installed. Finally, since I have an always-on broadband connection, I have a good, inexpensive, hardware-based firewall (built into the US Robotics USR8000A router).

~ GaySatyr

Bedlam
Member

21 Posts
11/03
Posted - Jan 2 2004 : 9:26PM
I'm using BOTH the ones that Gaysatyr recommends, after recently having problems with a Dialer called 'xxxmpeg' which seemed to install itself allover, including its own desktop icon for heavens sake! Norton AntiVirus & Firewall did nothing to to stop it or other adware. But now things are a lot better, although I do run both programs every other day to rid tracking cookies etc.. Both programs are free too :)

Another program to consider is 'Highjack this' I ran the program and posted my log file at this site where posters helped me remove a few other stubborn bits :)

http://forums.spywareinfo.com


Edited by - Bedlam on 1/2/2004 9:33:42 PM

Linus TR fan
Member

318 Posts
11/03
Posted - Jan 4 2004 : 6:08AM
I had a problem very similar to this, and Spybot Search and Destroy took care of it with no problems. Just as a tip, make sure you have the latest version of it, or use the self updater once you install it, because I had an earlier version, that did not detect or fix the problem, but there was a major regirstry update a while back, and then it was able to find it eliminate it and block it from coming back. Good luck.



Jump To: