DIGIT-ARC read-only archive · snapshot: July 23, 2026

Suddenly my xplorer starts..???

14 posts · originally from https://geek.digit.in/community/threads/suddenly-my-xplorer-starts.2189/

saROMan
saROMan Original post #1
Oct 22, 2004 at 7:59 PM
when ever i connect to INET .......after some time....suddenly my xplorer starts n take me to this page......its for Kaaza d/l
Code:
*www.kpremium.com/?aid=cy&lid=pp

i donno waz happned....is it some kinda Spywere????
ShekharPalash
Oct 22, 2004 at 8:11 PM
SPYWARE!! remove spyware by SpyBot...

do u hv kazaa installed... ?
B
Oct 22, 2004 at 9:38 PM
Hey i dun think so tat>spybot wud help u coz it dint help me.
Wat i did wuz d/c from the net scan with Ad-Aware.Still if tat site pops up u can list this site in Ad-aware block list or the spybot tea timer block list.
I have edonkey and this ie window with tat page pops up.I stops for some days but turns up later.
If u hate to compromise with ur p2p clint u gotta love this popup.
U
ujjwal #4
Oct 22, 2004 at 10:43 PM
Well installing kazaa is a big mistake ... anyway run both spybot & adaware, after that try removing kazaa and get kazaa lite from somewhere, I can't give you the link, as its an illegal piece of software, but use google and www.filemirrors.com *forums.tech-arena.com/images/smilies/wink.gif
cooljeba
Oct 22, 2004 at 11:05 PM
dat's spyware for sure!!!

just do what other frinends told u above :)

..:: peace ::..
Jeba
it_waaznt_me
Oct 22, 2004 at 11:38 PM
Please post your HijackThis Logfile for better assesment of your problem.
xenkatesh
Oct 23, 2004 at 11:32 AM
Do It fast As he says (it wasnt me)
B
Oct 23, 2004 at 3:59 PM
Hey there is nothing usual found with hijack this
As i said this problem has started for me too ,again
It starts onlu when edonkey is running.
Any ways this is the log file
Taken at the time the popup came.
Logfile of HijackThis v1.98.2
Scan saved at 3:51:47 PM, on 10/23/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\In2Cable\CMAAClient.exe
C:\WINDOWS\System32\cisvc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\a.e\LOCALS~1\Temp\Rar$EX00.906\HijackThis.exe
J:\Program Files\eDonkey2000\edonkey2000.exe

O2 - BHO: Google Desktop Search Capture - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Program Files\Google\Google Desktop Search\GoogleDesktopIE.dll
O4 - Startup: In2Cable Login.lnk = C:\Program Files\In2Cable\CMAAClient.exe
O10 - Unknown file in Winsock LSP: c:\program files\google\google desktop search\googledesktopnetwork1.dll
O10 - Unknown file in Winsock LSP: c:\program files\google\google desktop search\googledesktopnetwork1.dll
O10 - Unknown file in Winsock LSP: c:\program files\google\google desktop search\googledesktopnetwork1.dll
O10 - Unknown file in Winsock LSP: c:\program files\google\google desktop search\googledesktopnetwork1.dll
O17 -
The way i block it is using adaware site blocker.
As soon as the xplore starts with this site adaware closes it.
I have tried things like addind this site to nontusted site in internet options and reinstalling ie .even when ie was uninstalled this thing used to popup?!!!?!!!
If u can give me a better option i wud b gr8.
it_waaznt_me
Oct 24, 2004 at 12:09 AM
First the log is incomplete ..
Second eDonkey invites lotta spywares.. Try using other p2p like Shareza ...
saROMan
saROMan #10
Oct 24, 2004 at 1:36 AM
ppl i donn have kazaa ......coz i am on dile up...2 nd Spy bot shows 6/7 diff threts..but none related to this.......3rd whats hijackthis LOG?????
ShekharPalash
Oct 24, 2004 at 2:27 AM
u hv flash get ???

same page

*www.kpremium.com/?aid=cy&lid=pp

opens frequentlyin my friend's computer, he says it's due to flash get (unregistered) version installed.
R
rohit #12
Oct 24, 2004 at 1:40 PM
my explorer takes me to foll site

*www.sexplorer.it/bora.htm
saROMan
saROMan #13
Oct 24, 2004 at 3:42 PM
yah i hav flash get......v 1.65 .....:p
so if its flash get how can i rem it?????
saROMan
saROMan #14
Oct 24, 2004 at 3:44 PM
ok...got it.......thx Google .........BTW if any 1 wanna remove this plz PM me........