Jump to content
Can't remember your login details? Read more... ×

CokeMan

Atømican
  • Content Count

    109
  • Joined

  • Last visited

Community Reputation

0 Serf

About CokeMan

  • Rank
    Apprentice
  • Birthday 22/07/1979
  1. CokeMan

    BASTARD CHILD Member Since 10 Sep 2008

    Damn. Rest in peace Bastard Child.
  2. CokeMan

    Carmageddon: Reincarnation

    Only $115,000 left to raise and 17 days to do it in. If you haven't yet, pledge now! $15 or more will get you a copy of the finished game!
  3. We have a winner! A hidden DLL in C:\WINDOWS\system32 called msls31o.dll appears to have been the cause. There is very little about it in Google because it thinks you mean mss31.dll and msls31.dll (without the o) is a legit Windows file. One page I did find is http://www.prevx.com/filenames/X8968950672...SLS31O.DLL.html I found it with a bit of trial an error along the lines of: Doesn't happen in Safe Mode, must be computer specific, left the router alone. Use msconfig to turn off all startup items and all non-Microsoft services, still happens. Start killing random processes in Task Manager that have generic names eg. svchost and testing after each one. Redirections stopped after I killed rundll32. Used Process Explorer to identify the DLL file that was running. Renamed the file to .old. Reboot and check that it hasn't come back. It's been about 24 hours since I did that and there have been no more redirections. :D
  4. I'll do a factory reset on Monday but I'm not sure if it'll make a difference. The problem is specific to this one computer and the password on the router has been changed.
  5. *insert boring story about not currently being able to upload to my webspace* Here are the tracert results. First using the ISP DNS via the router: www.apple.com pccasegear.com subaru.com.au Here are the same tracerts after switching to Google's DNS and rebooting: www.apple.com pccasegear.com subaru.com.au I picked these sites because search results pointing to them were being redirected at the time. Sites were still being redirected with Google's DNS servers. Once I have the files on my webspace I'll come back and clean up this post.
  6. I'll try tracing before and after changing his DNS settings and post the results. Unfortunately this will have to wait until Monday.
  7. I ran a full scan with Malwarebytes' Anti-Malware. It found and deleted 4 registry keys. Here is the log file from that run. I rebooted as instructed and ran a second full scan. Nothing was found during the second scan but the problem still exists. I ran Hijack This after the second scan. Here is the log file.
  8. mattym: I'll give Malware Bytes Anti Malware a spin this arvo. Master_Scythe: And when I do the above I'll grab a Hijack This log. The current hosts file should be fine. I deleted the original hosts file and it was recreated by Spybot when it added it's immunisation entries. The only thing in there that's not from Spybot is the line for localhost that I added back in.
  9. Yes, using search engine web pages. I tried Google, Bing, Yahoo and Altavista. You type something in the search box, click search and click on the results displayed. Instead of going to the address it goes to biwlly.net.
  10. Well, this one's got me stumped. Here's a run down: Dad's having trouble with his search results being redirected to http://www.biwlly.net/?search=<<original search term goes here>>. The domain biwlly.net is not currently registered. It happens on most search results but not all of them. This is not browser or search engine specific. Have tried Spybot, AVG, and Hijack This. The worst thing I've been able to find on his computer are tracking cookies. It doesn't happen to other computers on the network. His hosts file is clean. DNS is pointing to the router, which then points to the ISP DNS servers. The computer is WinXP SP3 with the latest updates. Any suggestions on how to fix this that don't involve a reformat and reinstall?
  11. CokeMan

    M33t X - The Shotglass.

    I'll take 6. :)
  12. DEADLINE: FRIDAY 19 MARCH 2010 Week 44 of our weekly event. These fine folk posted in previous weeks: - 12345 - Antraman - Athiril - Caelum - CokeMan - eat_the_flag - gabber - Genisis X - h3viw8 - hectorbustnuts - Hoonbernator - index680i - jake.f - JediKnight - Mac Dude - Malkieri - mecon2 - michael.jenkin - motiv - Oomph - orinjuse - Red_Knight - seehund - segger - simpletest/MandoTiM - slimdog360 - sora3 - SquallStrife - stadl - stash - Takoma - The Tick - thesorehead - TinBane - unclebigdave - .:Cyb3rGlitch:. - _sentinel * = This week's submission posted! New posters this week: The idea is to get us to get out there and take photos, so nothing from your archive.
  13. CokeMan

    Atomic M33t X! - 21st August 2010

    *tap* *tap* Is this thing on? Ahem. I will make every effort to be there.
  14. DEADLINE: FRIDAY 12 MARCH 2010 Week 43 of our weekly event. These fine folk posted in previous weeks: - 12345 - Antraman - Athiril - Caelum - CokeMan - eat_the_flag - gabber * - Genisis X - h3viw8 - hectorbustnuts - Hoonbernator - index680i - jake.f - JediKnight - Mac Dude - Malkieri - mecon2 - michael.jenkin * - motiv - Oomph - orinjuse - Red_Knight - seehund - segger - simpletest/MandoTiM - slimdog360 - sora3 - SquallStrife - stadl - stash - Takoma - The Tick - thesorehead - TinBane - unclebigdave - .:Cyb3rGlitch:. - _sentinel * = This week's submission posted! New posters this week: The idea is to get us to get out there and take photos, so nothing from your archive.
  15. CokeMan

    [ACT] Morris' Meandering March Madness

    Fuck Yeah!!! I'm a current Labor Club member. I can sign all you bums in. I had more than enough flaccid morris last night. :(
×