topotun.com

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

what a horrible and offensive thing this is! how do i get rid of it? I have tried deleting from the registry but it doesnt make any difference... cant find any othre reference to the problem. Any ideas someone... please!??
 
simon said:
what a horrible and offensive thing this is! how do i get rid of it?
I have tried deleting from the registry but it doesnt make any
difference... cant find any othre reference to the problem. Any ideas
someone... please!??

Please Notice that if you use AOL, you should at least upgrade to 9.0 or
greater before doing any of the fixes. I know you can get AOL 9.0 at almost
any convenience store, gas station, super market or other retail outlet in
the world, so this should not be a problem. Also, if you are using AOL 9.0,
you will not be able to perform the first step in this list. You should
look into another solution, such as ZoneAlarm, for a firewall.


Turn on that firewall...
http://www.microsoft.com/WindowsXP/home/using/howto/homenet/icf.asp


Make sure you have all the updates (critical) installed from:
http://windowsupdate.microsoft.com/
(Scan for updates, Review and Install)


Get rid of the spy/ad/mal-ware..
(Yes - using MORE than one of these..
I recommend at least the first three. Also..
UPDATE the definitions for them before using.)

Spybot Search and Destroy
http://www.safer-networking.net/

Lavasoft AdAware
http://www.lavasoft.de

CWSShredder
http://www.spywareinfo.com/~merijn/downloads.html

Hijack This!
http://mjc1.com/mirror/hjt/

I also like "The Cleaner" and "SpywareBlaster" and "SpywareGuard".
- http://www.moosoft.com/
- http://www.javacoolsoftware.com/

The first is a PAY product, but useable for 30 days - it has found and
eliminated problems in the past the others did not. The latter two are
prevention mechanisms. SpywareBlaster is a FANTASTIC free product, I
suggest getting this after you cleanup and keeping it updated as well.

Bazooka Adware and Spyware Scanner (Free!)
http://kephyr.sureshot.xaviermedia.net/spywarescanner/

ToolbarCop (Free!)
http://www.mvps.org/sramesh2k/toolbarcop.htm

Browser Security Tests
http://www.jasons-toolbox.com/BrowserSecurity/

And Assortment of Others:
http://spywareinfo.com/

ALSO - Be sure to IMMUNIZE after you clean up. SpywareBlaster and Spybot
Search and destroy both have these features - use both!


After you cleanup your PC somewhat of spy/ad/mal-ware, verify your antivirus
software is updated and run a full scan of your computer. If you have no
antivirus software - get one NOW! Grisoft AntiVirus:
http://www.grisoft.com/us/us_dwnl_free.php


Empty your Temporary Internet Files and shrink the size it stores to about
120MB to 240MB (seems to be an optimal size for the normal user)

- Open ONE copy of Internet Explorer.
- Select TOOLS -> Internet Options.
- Under the General tab in the "Temporary Internet Files" section,
do the following:
- Click on "Delete Cookies" (click OK)
- Click on "Settings" and change the
"Amount of disk space to use:" to something between 80MB
and 120MB. (Betting it is MUCH larger right now.)
- Click OK.
- Click on "Delete Files" and select to
"Delete all offline contents" (the checkbox) and click
OK. (If you had a LOT, this could take 2-10 minutes or
more.)
- Once it is done, click OK, close Internet Explorer
- Re-open Internet Explorer.


Uninstall any software you do not use often/ever. (If you have something
installed but never use it, uninstall it.) If you go through Control
Panel -> Add/Remove Programs and see things you seldom if ever use, it is to
your advantage to remove it.


Also, if you are tired of Web Page Pop-Ups/Unders.. You could try the
Google Toolbar.
http://toolbar.google.com/


Stop loading applications at logon.. run MSCONFIG and look under the startup
tab for things you DON'T want to startup! Search the Internet with Google
to discover what things are safe to remove and what things may even be
malware infecting your computer.


Better control your email and lessen the amount of time you spend dealing
with SPAM:
SpamBayes
http://spambayes.sourceforge.net/
or
Spamihilator.
http://www.spamihilator.com
 
Download CWShredder http://www.majorgeeks.com/downloads31.htm

----- simon wrote: ----

what a horrible and offensive thing this is! how do i get rid of it? I have tried deleting from the registry but it doesnt make any difference... cant find any othre reference to the problem. Any ideas someone... please!??
 
(snip)

Folks, before you post info, please clarify if you are guessing, or
you know for sure. TopoTun will NOT go away on a Windows Millenium
machine with either Lavasofts Ad-ware, CWShredder.exe, nor Norton's
Antivirus. I have tried all 3, all with the latest versions and
definition files as of this article on 6/2/2004. I have also applied
all the Windows Service packs and hot fixes and critical updates. I
also removed the MS Java VM, and replaced it with Sun JVM, etc.

To remove it I recommend all the steps above, plus Bitdefender and if
it's still not gone run Hijackthis. However Hijackthis is a
painstaking process not for faint of heart or novice. When deciding
whether to remove something or not, remember which apps you can
reinstall if you break them. Also on another machine search google
for the file in question. If you see a number of google hits, that
talk about spyware/adware/virus most likely its a
spyware/adware/virus. I'm not 100% sure which process was the actual
culprit for topotun, but of note the following:

1)With windows task manager, Kill the task dllhelp.exe (make sure it
dies)

2)Follow the directions letter for letter on hijack this

3)Remove all scan line with TopOtun, (obviously)

4)Remove all scan line with a.exe (and search your hard drive and
delete all instances of a.exe) Norton misses this virus, even when I
scanned the file itself. This is the Trogan.Dropper.Briddge.A Best
to scan your system for free at
http://www.bitdefender.com/scan/licence.php

5)Remove entries to "downloadplus"
http://www.spywareguide.com/product_show.php?id=532
I also noticed "Windows MediaPlayer 9" was "infected". It was linked
to wmplayer.exe with a size of 169,984 bytes. The version was
1.0.6.6, description DownloadPlus, copyright Porn Kings. (Bitdefender
killed it completely)


My friends computer still has a few more "nasties" but topotun is GONE
after a few reboots.

Great info here: http://www.computercops.biz/modules.php?name=Forums&file=viewtopic&p=186015
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top