PDA

View Full Version : yahoo helpcentral redirects



venus_n
2010-09-11, 12:39
I don't know yahoo helpcentral pages are getting redirected or someone is getting the info about what i am mailing to yahoo helpcentral. I am always getting replies to my queries sent on yahoo helpcentral but the replies are not from yahoo support. They claim to be from yahoo support though, but the purple Y sign doesn't exist in front of the emails.

tashi
2010-09-11, 16:49
Hello venus_n,

Please see the forum FAQ which also includes instructions on posting a preliminary DDS log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

If the computer is infected start a new topic, copy paste the DDS log into it and a volunteer analyst will advise you when available. :)

Best regards.

venus_n
2010-09-11, 18:11
i just read through the the instructions before posting.

It says to download ERUNT before and gives a link. When i clicked on the link to ERUNT, the page which came up was a peach colour page (cant give link, im not sure if its malware site). Well there were links to download from there, when i saved from one of the links, the file was digital signature not valid unknown publisher.

Now can i run DDS before running ERUNT?

tashi
2010-09-11, 19:04
Hello venus_n,

When i clicked on the link to ERUNT, the page which came up was a peach colour page (cant give link, im not sure if its malware site).

We don't link to malware sites. :fear:

http://www.larshederer.homepage.t-online.de/erunt/index.htm

Best regards.

venus_n
2010-09-11, 19:09
Im sure you wont. But it could be a virus which redirected me. May i take the risk of giving the link of the page of ERUNT for your check.

venus_n
2010-09-11, 19:17
Yes thats the page.

http://www.larshederer.homepage.t-online.de/erunt/index.htm

It says www.derfisch.de being a server for hosting their ERUNT. Thats the one giving unknown publisher digital signature non valid

tashi
2010-09-11, 19:17
Hello venus_n,

The site to download ERUNT has not proven an issue for anyone that we are aware of.

Best regards. :)

venus_n
2010-09-11, 19:51
its the same page im getting but on the page, to download there are 3 servers. The first one www.derfisch.de being a server for hosting their ERUNT. Thats the one giving unknown publisher digital signature non valid

tashi
2010-09-11, 20:11
Hello venus_n,


its the same page im getting but on the page, to download there are 3 servers. The first one www.derfisch.de (http://www.derfisch.de) being a server for hosting their ERUNT. Thats the one giving unknown publisher digital signature non valid

If you feel uncomfortable with that link please use the one from Server 2 www.aumha.org :)

Digital signatures or the lack thereof are not absolute surety of a site's validity or not. Signatures and trust certificates have been handed out to known malware vendors.

If you do not wish to use ERUNT please start a new topic providing the DDS log and a link back to this thread.

Best regards. :)

venus_n
2010-09-11, 20:45
Ok i downloaded ERUNT. I unchecked NTREGOPT but it has still installed NTREGOPT

tashi
2010-09-11, 20:56
Hello venus_n,

Ok i downloaded ERUNT. I unchecked NTREGOPT but it has still installed NTREGOPT
As noted via PM.

From "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

NOTE: Installing ERUNT may also install the "registry optimization tool" "NTREGOPT" by default. Please do NOT run NTREGOPT.

venus_n
2010-09-11, 21:31
In the "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) , it was written black screan will open on double click on dds. But to me, its asking to run it or cancel.

tashi
2010-09-11, 22:09
Hello venus_n,

But to me, its asking to run it or cancel.

DDS. Choose to "run it". :)

Best regards.

venus_n
2010-09-12, 06:19
File type it says screen saver. Still may i run it?

tashi
2010-09-12, 22:01
New topic providing DDS log: http://forums.spybot.info/showthread.php?t=59414 :)

This thread is now closed.