Post Hack Problem

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Wannabe

Thread Starter
Joined
Feb 19, 2001
Messages
37
Hi, I play a computer game called counterstrike and i installed a wallhack on it. I soon learned that it was not good and that I would get banned for using it so I deleted it and the file. I also re-downloaded Counterstrike and I am still being banned from servers for having Flauntz wallhacks installed on my CS. I have searched my registry and my C drive to no avail. I don't want to reformat. Do I have any other option?? Thanks,

Wannabe
 
Joined
Dec 9, 2000
Messages
45,855
Not really a "security" problem Wannabe. I think perhaps the "all other software" forum might be better. Maybe someone there would be familiar with the "hack".
 

eddie5659

Moderator
Malware Specialist
Joined
Mar 19, 2001
Messages
37,298
Hiya

Interesting program. Just had a look at what it does:

http://www.tarbard.co.uk/content/cheating.shtml

Looks like its for your Video card.

Lets have a look in your MSCONFIG. Go to Run and type MSINFO32. On the left choose Software Enviroment, then Startup Programs. Cop/paste the list here.

Looks a tricky one to remove.

Regards

eddie
 
Joined
Dec 2, 1999
Messages
12,041
When you uninstalled how did you do it.

The hack could have written several different files to different locations.

As counterstrike resides within the halflife directory I believe it could have installed a file anywhere.

You may have to completely uninstall counterstrike and halflife. Delete the old directory, then reinstall all.

I doubt it is a registry file, most hacks add pak files or wads whatever in halflife. The server scans your halflife directory and it's finding a file that is not allowed.
 
Joined
May 18, 2001
Messages
1,199
Hi wannabe,seems like Eddie isnt online right now,so i'll tell you,you have some spyware on your computer and both are real nasty.Go to Start>Run>type in msconfig click ok.Click on startup tab,remove the check marks for

newdotnet
webhancer

Remove them one at a time,then click apply then ok,reboot after each one.Now go to the control panel and remove them from there.You will find them in add and remove programs.

Now download this free program called Ad-aware5.6.This program will scan your computer for some of the other spyware componnets that dont show up in msconfig.

http://www.lavasoftusa.net

Once you download this program,also download the lastest signature file and unpack it to the Ad-aware folder.Now run the scan,making sure all the boxs on the left side of the pane are checked

Am sure Eddie or BrianF can shed some light on why there are ini files in your startup.I never seen that before.
 
Joined
Dec 2, 1999
Messages
12,041
Customizing Folders with Desktop.ini
File system folders are commonly displayed with a standard icon and set of properties, which specify, for instance, whether or not the folder is shared. You can customize the appearance and behavior of an individual folder in two ways:

Create a Desktop.ini file for the folder
Create a Folder.htt template for the folder
Folders can be displayed in either Classic or Web style. For a detailed discussion of these styles, see Web View. The Desktop.ini file, discussed here, applies to both styles. It allows you to assign a custom icon to a folder and control its behavior in a limited way.
http://msdn.microsoft.com/library/d...hellcc/platform/Shell/Shell_basics/Custom.asp
 
Joined
Oct 14, 2001
Messages
2,218
To uninstall the new.net application, please follow the steps below:

New.net needs to be UNchecked in msconfig/startup first.
then
Click on Start.
Select Settings.
Click on Control Panel.
Double-click on the Add/Remove Programs icon.
Select the New.net Application.
Click on the Add/Remove button.
Once the program has uninstalled, click on the OK button.

After completing all of these steps, please reboot the computer. This will have removed the New.net application from your system.
The above steps will fully remove the New.net plug-in. However, the Windows operating system will retain a record that the New.net plug-in previously had been installed on your computer in "C:\Windows\Downloaded Program Files." This file is harmless, but can be removed by following the steps below:


Click on Tools.
Click on Internet Options.
Under the General tab, click on the Settings button.
Within the Settings window, click on the View Objects button.
Within the Downloaded Program Files window, locate and delete Tldctl2c Class.
Close the Downloaded Program Files window.
Click on the OK button within the Settings window.
Click on the OK button within the Internet Options window.
Close Internet Explorer.

run ad-aware nightly w/ your updated virus scanner
 

Wannabe

Thread Starter
Joined
Feb 19, 2001
Messages
37
Thanks everyone so much for all of your help. I think that I finally got all of these steps done, but I did not find a webhancer box. I found a whAgent box. Should I uncheck that. Other than that I followed all of the steps. I will go now to see if it worked. Thanks again so much. I will let you know what happens,

Wannabe
 

Wannabe

Thread Starter
Joined
Feb 19, 2001
Messages
37
Well, I am glad to get rid of those programs, but I am still being banned for having hacks on my computer on some servers. Other servers that run anti-hack software didn't show anything. I don't understand. Many still say I have Hacks and ban me?? I am also getting a new one besides Flauntz, I am also getting XQZ2 hack as well.

Wannabe

P.S. the whAgent file is gone but the New Dot thing is still in my msconfig it is just unchecked. I deleted it from my add/remove programs. Thanks!
 
Joined
May 18, 2001
Messages
1,199
Hi wannabe,glad you got the spyware off the computer.As for the wallhack problem i cant find anything on how to remove it.Did you follow BrianF suggestions about competely removeing it?Maybe someone else will have the fix you need.
 

Wannabe

Thread Starter
Joined
Feb 19, 2001
Messages
37
Yes, I did delete my counterstrike file and re-download it. Thanks for the suggestion though. And thanks again for all of your help,

Wannabe
 

eddie5659

Moderator
Malware Specialist
Joined
Mar 19, 2001
Messages
37,298
Hiya

You said that you deleted the files. I assumed that you fully uninstalled it first. Also, this XQZ2 hack: this is the name of the hacker XQZ2, but do you know the name of the hack that you installed?

Regards

eddie
 

Wannabe

Thread Starter
Joined
Feb 19, 2001
Messages
37
Well, I guess I didn't fully uninstall before I deleted, and I think the name of the hack was Hell, but i am not sure. I recently ran that software and found a few more things so maybe that will fix it. We will see. Thanks,

Wannabe
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top