IP address change

  • Thread starter Thread starter TC1
  • Start date Start date

TC1

TC1

TC1

Permabanned
Joined
10 Jan 2007
Posts
828
My mate keeps getting this pop up / message page coming up from some MBS website saying that he has to pay £40 for being a member of some lurid website! He has done a spybot, adaware, AVG scan and got rid of lots of Trojens etc etc but this thing still pops up! It says that it will keep doing so until he settles his account. He has not opened any such accounts!!

How come he is getting this? Is there a way to get shot of it for good?

Does it mean that the only way past this is to get his ISP to change his IP address?
 
some extra spyware/malware needs to be removed me thinks, if hes very badly infected a rebuild may be the only way, Hijack this is a prog that can fish out nasties also. Nod32 may be worth a look also for Virus removal :)
 
killer_uk said:
Does the message just pop up when he is doing nothing or when he is in Internet Explorer?
Click to expand...

It pops up when he is doing nothing! He is on BT broadband.
 
TC1 said:
It pops up when he is doing nothing! He is on BT broadband.
Click to expand...

It's a long shot, but does he have all the latest updates? There was a service that was used to spam computers with messages called the 'Messenger' service. If you go to Administrator Tools -> Services -> and then stop the messenger service in there and set to disable. If he has XP Service Pack 2 then you can probably ignore this as I believe this was disabled in that pack.
 
TC1 said:
He has SP2.
Click to expand...

Then it most likely won't be that then! As said, I would install a trial version of NOD32 and do a full scan using that. Also use Adaware SE, SpybotSE, Spywareblaster if you haven't already done so. Could you also get him to run HijackThis as already said by mike1210 and post the log here. You can get the program by going to:

http://www.spywareinfo.com/~merijn/programs.php#hijackthis
 
Thanks. Tried all those except Hijack This. Would a full format get rid of it for good or would it still come back because of his IP address?
 
TC1 said:
Thanks. Tried all those except Hijack This. Would a full format get rid of it for good or would it still come back because of his IP address?
Click to expand...

A format would get rid of this, all it will be is a piece of spyware that is connecting him to the site in question asking him to pay for something. As long as he gets proper protection (and is sensible when viewing the net) he will be fine.
 
Cheers. Looks like a format may solve it then. I was just wondering if they had his IP address and even with a format they could still send him the rubbish?
 
My friend had this exact problem aswell.

Downloaded something called Prevx which is antispyware.

Leave it on there for about a day on the trial and it will get rid of it. It runs 2 exes which are a pain in the... to get rid of.
 
Yeah a format would solve the problem but run HijackThis first. There could be something lurking on the PC somewhere and it'd be a shame to spend the time doing a format and re-install of XP when a simple HijackThis scan and log could fix the problem.
 
TC1 said:
Cheers. Looks like a format may solve it then. I was just wondering if they had his IP address and even with a format they could still send him the rubbish?
Click to expand...

It's nothing to do with his IP address. Whenever you visit a webpage or do anything on the internet, your IP address is made public, and pretty much anyone who wanted to could record IP addresses. They can only be used to cause any harm if there's a security problem in an application and you're not protected by a firewall. The sort of problem you're talking about will be caused by malware on your computer. (Plus with pretty much any commercial ISP, your IP address changes each time you connect to the internet)
 
PinkPig said:
It's nothing to do with his IP address. Whenever you visit a webpage or do anything on the internet, your IP address is made public, and pretty much anyone who wanted to could record IP addresses. They can only be used to cause any harm if there's a security problem in an application and you're not protected by a firewall. The sort of problem you're talking about will be caused by malware on your computer. (Plus with pretty much any commercial ISP, your IP address changes each time you connect to the internet)
Click to expand...

I thought that the IP address stayed the same when on Broadband.
 
TC1 said:
I thought that the IP address stayed the same when on Broadband.
Click to expand...
Thats a static IP. Most ISPs either don't let you have one or charge you for the optional facility to have a static IP address, say for gaming.

Most, if not all, ISPs assign IPs to their customers randomly.
 
You must log in or register to reply here.
Back
Top Bottom