Poopack causing Black screen with cursor on startup.

By +Warwagon
in Smart Home, Network & Security

 Share

Recommended Posts

Grand Master

+Warwagon MVC

Posted
  • MVC
Posted

Just wanted to let everyone know that within the past 2 weeks I've gotten calls from people who have installed a poopack (aka ###### pack of adware) that will break the explorer shell and cause a black screen and cursor on startup.

 

The good news is if you want to remotely connect to them, their internet is fully functional. In my case to get connected to them I have them do a control alt delete. Then have them start the Task Manger.Then have them go to file / New task, and have them type in the web address of my remote assistance software (example www.fastsupport.com) ... this allows them to still download the software and get me connected to their PC even if they can't get the explorer shell.

 

Once connected, in the Task Manager there are 2 processes, both called runonce.exe . Once you kill those the explorer shell auto launches and you get the desktop back. In one case they weren't there, and you just had to kill explorer.exe and manually launch explorer.exe again.

 

After the normal adware cleanup the computer would boot normal.

 

Just a heads up on how to get connected to clean it up.

Grand Master

sc302 Veteran

Posted
  • Veteran
Posted

easier 3 key salute to enter task manager (easier that ctrl alt del) as it brings you directly to the task manager, not an option screen that has a point and click option to enter the task manager.

 

ctrl shift esc

 

and that key combination is all on the left hand side of the keyboard...works on win 2000 to current.

  • +Warwagon and Aergan
  • Like 2
Grand Master

+Warwagon MVC

Posted
  • Author
  • MVC
Posted

easier 3 key salute to enter task manager (easier than ctrl alt del)

 

ctrl shift esc

 

and that key combination is all on the left hand side of the keyboard...works on win 2000 to current.

 

Good to know!

Grand Master

+Warwagon MVC

Posted
  • Author
  • MVC
Posted

There is some more info about it here. Mostly this link talks about how sourceforge is now bundling crapware on their installers. But in the post also explains the issue of this thread.

 

We all know that Sourceforge started wrapping all its hosted projects in an installer that put shovelware toolbars and the like on unsuspecting users' computers a while back.

 

I'm here to tell you it's gotten really, really bad. Today I got called into a client office with a completely unusable machine - it hung on a blank desktop, not even the wallpaper rendering, forever on user login.

 

The culprit was WSE_Taplika, installed by the SourceForge wrapper when the user downloaded and installed the Filezilla FTP client yesterday. Confirmed through logs and browser history. I took a look at this thing and it is AWFUL.

 

The process hanging the user login was a W32script in a temp folder under the user's Roaming appdata folder, by way of the user's RunOnce regkey. The actual script being run was obfuscated with octal encoding like a php script dropped on a compromised webserver, and the regkey would restore itself automatically if you deleted it, thanks to a watchdog process.

 

http://www.reddit.com/r/sysadmin/comments/2ux2uy/sourceforge_has_gotten_really_really_bad/

Grand Master

Sikh

Posted
Posted

There is some more info about it here. Mostly this link talks about how sourceforge is now bundling crapware on their installers. But in the post also explains the issue of this thread.

 

http://www.reddit.com/r/sysadmin/comments/2ux2uy/sourceforge_has_gotten_really_really_bad/

 

Every major software distributer like source forge is bundling crap. Its sad but its true. 

Grand Master

TAZMINATOR

Posted
Posted

There is some more info about it here. Mostly this link talks about how sourceforge is now bundling crapware on their installers. But in the post also explains the issue of this thread.

 

 

http://www.reddit.com/r/sysadmin/comments/2ux2uy/sourceforge_has_gotten_really_really_bad/

 

FileZilla customers complained to FileZilla creator about it and the forum kept going about it:

 

https://forum.filezilla-project.org/viewtopic.php?f=1&t=31967 

 

I checked the download links on their website by hovering the links and noticed the files are being hosted by Sourceforge.

 

There is no direct links that are hosted by FileZilla.. (not on my end, at least, because I can't find the clean installer.)

 

I guess I will uninstall it and find alternative FTP client.

Grand Master

+Warwagon MVC

Posted
  • Author
  • MVC
Posted

FileZilla customers complained to FileZilla creator about it and the forum kept going about it:

 

https://forum.filezilla-project.org/viewtopic.php?f=1&t=31967 

 

I checked the download links on their website by hovering the links and noticed the files are being hosted by Sourceforge.

 

There is no direct links that are hosted by FileZilla.. (not on my end, at least, because I can't find the clean installer.)

 

I guess I will uninstall it and find alternative FTP client.

 

The worst are those "uninstallers" which try to install about 5 different apps. I had one yesterday and I had to decline about 5 offers just to get the "Uninstaller" to finish.

 

A woman called me on the phone this morning and I could have finished the sentience for her. She said ...

 

"My daughters computer came with a 30 day trial of mcafee, I uninstalled it and installed that one you put on your systems, avast." ...

 

What I wanted to tell her is "And now your system has a bunch of popups" ..

 

She said ... "Now my system has a bunch of stuff popping up all over the place"

 

... Yep, she googled for it... and hit a poo pack.

Grand Master

TAZMINATOR

Posted
Posted

The worst are those "uninstallers" which try to install about 5 different apps. I had one yesterday and I had to decline about 5 offers just to get the "Uninstaller" to finish.

 

 

Creator should have added donate button on their software.. Pretty simple.  And remove sourceforge hosting links from their website. So creator can gain the trust back.

 

It's very lame to add options to the installer and decline apps during the installation...  It's so 90's.

 

I have seen other softwares that have donate buttons these days now. Which is good. Paint.net, for example.

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • EA launches in-game advertising platform for brands to "connect with audiences"

      By Big John Studd · Posted

      Yeah, this is absolutely nothing new and EA have done it before. Burnout Paradise, released in 2008, had dynamic advertising billboards that were updated via the internet and targeted people based on location and what EA knew about them from their profile. It was particularly notable for the fact that the Obama presidential campaign ran ads in the game, in an attempt to reach a younger audience who didn't watch broadcast TV any more. It was by no means the first though. Battlefield 2142 from 2006 had the same thing. In fact, Neowin wrote a story about it back then. https://www.neowin.net/news/ba...-in-game-ads-clarification/
    • Apple MacBook Neo is a blessing for Windows users, here's why

      By Kravex · Posted

      This is obviously aimed at the education where Apple has lost so much ground to Chromebooks in the last few years, but unless they come up with a comparable management system for education why would anyone switch back?
    • Samsung is shutting down yet another app used by millions

      By David Uzondu · Posted

      Here's how we arrived at that claim: Note that this is just Play Store downloads. The app is also available on the Galaxy App Store
    • Samsung is shutting down yet another app used by millions

      By +Edouard · Posted

      Google Play states the app had more than 50 million downloads. What other metric do you suggest should be used?
    • what other retro software do yall use

      By +InsaneNutter · Posted

      MSN defined our generation in some ways, kind of like Snapchat and TikTok have done for future generations. I have great memories of the MSN era in the late 90s / early 2000s. In the UK everyone seemed to come home from School and go on MSN for the evening. We didn't really have mobile phones then, so other than going and knocking on your friends door it was a totally new way of interacting with people. I also loved how I could talk to people I’d met playing online games from around the world. Inviting people to NetMeeting and messing about with the shared white board and webcams was pretty fun, even if webcams only ran at a couple of fps over dial-up. All the random things you could do with MsgPlus! were really fun - I suspect that made a few people jump with /shello randomly blasting Mr Hankey out their speakers! Maybe I’m just nostalgic, however I do feel the internet and computers were more fun back then.

  • Recent Achievements

    • One Year In
      Console General earned a badge
      One Year In
    • One Year In
      Twozo Technologies earned a badge
      One Year In
    • One Month Later
      Twozo Technologies earned a badge
      One Month Later
    • Week One Done
      Twozo Technologies earned a badge
      Week One Done
    • Veteran
      branfont went up a rank
      Veteran

  • Popular Contributors

    1. 1
      +primortal
      529
    2. 2
      +Edouard
      205
    3. 3
      PsYcHoKiLLa
      131
    4. 4
      Steven P.
      90
    5. 5
      neufuse
      75
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!