Author
|
Topic: flashlightsearch.com has taken over! please help (Read 3333 times)
|
Shirin
Guest
|
i am pretty computer illiterate, so i need help from you smarties out there. almost everytime i try to get to any site on the internet, i am redirected to a 'flashlightsearch.com' page. it's taken over my computer. please help! how can i get rid of this problem once and for all.
it is even doing it while i am trying to send this help message. after i hit post, i was redirected to this site:
http://www.flashlightsearch.com/search.aspx?q=http://www.ausfx.com/index.php?board=11;action=post2
|
|
|
|
|
Logged
|
|
|
|
Millis
n00b
Offline
Gender:
Posts: 12
Burn Down The Sun
|
Try running a program like Adaware. It removes 'Spyware' and similar things. Also try looking in the Add/Remove list in the control panel. It might have it up there, obviously u want to remove it. u can get adaware at www.lavasoft.com or www.downloads.com
|
|
|
|
|
Logged
|
l8r, Millis
AMD 1800 @ 2.1 GHz
512 MB PC2700
Asus A7V333-x
Asus GF 4 Ti4200 128 mb
120 GB WD HDD (7200 RPM)
40 GB Samsung (7200 RPM)
|
|
|
ffiloreg
Guest
|
adaware and spybot do not work. Tried. I have been told in various forums that the following can work, although I haven't tried them yet, due to flashlightsearch I can't actually browse the internet anymore.
first fix
find and delete/rename the file MSMGT.EXE in the windows folder. Some people have reported however, that it isn't there but flashlightsearch still is.
Second fix, mentioned by a few people to work:
if you have spybot search and destroy it doesn't automatically get rid of fl. but if you click on the Tools section ater the search is complete it does find a BHO, called TVMBHO.DLL. Upon futher investigation it was found that it wase in a folder C: program files TV MEDIA. When this file was deleted flashlight was gone, when it was picked up again by going to the flashlight site, the files re-appeared.
Solution is to find the TV MEDIA folder and delete it.
This also deletes other filres:
tvuknwrd.dll, tvmlg.dll, tvcwtd.dll anf TVM.exe.
Other fix: (best if you do this anyway, whatever above method might work) go to run and type regedit and search for the line TVMEDIA.EXE delete it, to stop flashlight starting as windows starts up.
I haven't tried this yet, but I will: and I'm assured that the last method has helped quite a few people defeat flashlight.
Does this make your internet connection run v.slowly too? It's made the computer I'm trying to fix not even able to connect to the network....
|
|
|
|
|
Logged
|
|
|
|
tash
Guest
|
The second method - deleteing the TV MEDIA file - works.
Flashlightsearch.com is gone, no redirection, internet is running fine.
You need to go to start/regedit and search for TVM.EXE, not the file as written above. This stops it re-installing itself.
You might also need to reset your homepage from the internet options dialogue box too, incase it's set as flashlightsearch.com and you download it again as soon as you reconnect.
hope this helps,
tash
|
|
|
|
|
Logged
|
|
|
|
Zyeox
Full Member
Offline
Gender:
Posts: 158
"Say hello!!! To my little friend!!!!"
|
See I think ppl like these should be FUC%(NG SHOT!!! Who in the hell think they can put crap on our pc with out us saying yes. And sometimes when you do get asked they still put it on there. If I could get a hold of these bastards I would give them a piece of my mind. Right along with the damn telemarketers!! "Z"
|
|
|
|
|
Logged
|
|
|
|
halofanman
Full Member
Offline
Posts: 480
|
nicely said! Well if you wanna give em a peace of mind. get some hackers that are in mexico (arent any computer hacking laws there )
|
|
|
|
|
Logged
|
AMD 2200+ @ 1.9GHz (soon to be AMD64 3000+ with Nforce3 mobo)
512MB of DDR PC2700
ATI built Radeon 9600XT
Seagate baracutta 120GB 7200RPM
Current 3Dmark03 results http://www.geocities.com/mjemmi2004/1337.html
|
|
|
Adam Henry
Guest
|
flashlightsearch.com is registered to Central Media, 11301 West Olympic Blvd, #554, Los Angeles, California 90064. If you happen to belong to Al Qaeda and need a target, we'll paint this one for you! P.S. Thanks, kids, for the tips. This one has been a pain for me, too. Zyeox, a special thanks to you. I could sit here and watch you drop your pants all day long!
|
|
|
|
|
Logged
|
|
|
|
|
|
malvado
n00b
Offline
Gender:
Posts: 47
Hanging around!
|
1- Take backup of your personal files and anything valuable.
2- Format the drive.
3- Reinstall Windows xp.
4- Update windows xp and all drivers.
If u don't know how to do step 2 and don't wan't to fuzz too much, you should bring the computer to a repair center.
If you want do this yourself, just tell us (or do a google on the subject format) and some1 will probably lend u a hand.
|
|
|
|
|
Logged
|
NF7-S V 2.0 , Barton2500 @ 2,1Ghz , 256*2 Corsair 500 Mhz, Audigy 2 zs, and lots of more stuff.
|
|
|
Zyeox
Full Member
Offline
Gender:
Posts: 158
"Say hello!!! To my little friend!!!!"
|
#1 Sign up to this great forum!!
And maybe we might help ya!!!
LOL j/k but you should sign up it is a great resource!!
Anywho IM me and I will walk you through the process!! "Z"
|
|
|
|
|
Logged
|
|
|
|
Village Idiot
n00b
Offline
Posts: 0
I'm a llama!
|
>:(Got nailed by this miscreant on the system at home that the kids use. Have been trying for the better part of four days to get rid of it. Think it may be gone now. Here is a list of what I had to do.
1 Ran Norton AV. Detected 7 infected files, fixed 2 and
nothing on the other 5.
2 Did a Google on web browser hijacks and discovered CWS was one possibility. Ran CWS Shredder and found instances of CWS but problems persisted. CWS kept coming back.
3 Note that TVM was listed in the MSCONFIG user interface. Did not recognize it and so unchecked it in the "Startup" list.
4 Searched the registry for TVM and found about half a dozen keys for TVM.EXE TVMedia etc.
5 There were also TVM strings in the registry entry for the ATI graphics display card so I deleted the ATI graphics drivers in the "Control Panel" and removed all entries for ATI and TVM in the registry.
6 A second search of the registry found TvmBho.dll under C:\ProgramFiles\TVMedida\TVMBho.dll. Deleted this entry from the registry.
7 Deleted a folder (forget were in the directory structure now) called TVM and another called TV MEdia. The TV Media folder was under the ProgramFiles folder and contained a copy of TvmBho.dll file.
8 In the C:\ProgramFiles\TV Media\ found three files. TVMCORE.DLL, TVMBHO.DLL and TVMCORE.EXE.
9 Found TVMUpdater in the C:\Temp folder
10 Other files produced which need to be deleted are:
tvmknwrd.dll
tvmcwrd.dll
tvmuknwrd.dll
There was one copy of each dll shown above for each user identified on the system. Since the kids use various permutaions of their user id on the system there were multiple copies of the above files.
I had to shut the system down and restart it to delete the TVMBHO.DLL as it was in use at the time I discovered it.
I am keeping my fingers crossed that this gets rid of this malware. Thanks to all here for help in identifying this crap.
|
|
|
|
|
Logged
|
|
|
|
Guest
Guest
|
Luckily I had Netscape Navigator installed on my pc. I was able to browse the Internet for help while IE was totally hijacked by this montrosity flashlightsearch.
What a headache. I removed the tv media folder in the Program
Manager folder and the STC folder that was located in the PM also. I removed everything in C:\Temp.
I did not do anything to the registry. I restarted and so far all
is back to normal.
|
|
|
|
|
Logged
|
|
|
|
guest
Guest
|
It seems works now, thanks
|
|
|
|
|
Logged
|
|
|
|
JayrodTremonki
Full Member
Offline
Posts: 146
I'm a llama!
|
Honestly, I don't know why you people put up with it. I can really see NO reason to still be using IE. Please, please, pleeeeeeeeeease do yourself a favor, all of you, and get another browser with decent features, built in pop-up blocking, and security. I'm not someone who just uses stuff to be different...or else I'd be using Linux to begin with, but use a browser like mozilla or firefox or at least a new version of netscape. I used IE for a very very long time...and the only reason I could think of to still use it was habit.
|
|
|
|
|
Logged
|
|
|
|
|
|
|
|
AusFX.com | Powered by SMF 1.0 Beta 5 Public.
© 2001-2004, Lewis Media. All Rights Reserved.
|
| |
