FAO IT folks

peter k · Nov 12, 2003

Imported post

I've just been told I need to do this!

Description
Comload is an ActiveX control placed on web sites to load and run executable files, notably premium-rate diallers.

Distribution
One of the types of dialler installation used by Coulomb, through ActiveX drive-by-download on porn-related pages.

What it does
Advertising
No.

Privacy violation
No.

Security issues
Yes, critical. After the control is installed, any web page has the ability to run any executable file on the local machine.

Stability problems
No.

Removal
There is no uninstall option, but Spybot S&D update 2-2-03 can remove it automatically.

Manual removal
Open a DOS command prompt window (Start->Programs->Accessories) and enter the following commands:

cd "%WinDir%\System"
regsvr32 /u comload.dll

Then open the System folder (inside the Windows folder, named 'System32' under Windows XP/2000/NT or just 'System' under Windows Me/98/95), and delete the file 'comload.dll'.

Ta,
Peter

Druid · Nov 12, 2003

Imported post

Unless you want to download porn using a premium rate number, delete the file using either Spybot or the manual method described.

How did it get installed in the first place

peter k · Nov 12, 2003

Imported post

I genuinly don't know. There was a thing a couple of months ago I fu**ed around trying to get off but it ended up costing me 20 odd quid on my bill.

Manual removal
Open a DOS command prompt window (Start->Programs->Accessories) and enter the following commands

WHERE DO I ENTER THESE?)

cd "%WinDir%\System"
regsvr32 /u comload.dll

Then open the System folder (inside the Windows folder, named 'System32' under Windows XP/2000/NT or just 'System' under Windows Me/98/95), and delete the file 'comload.dll'.

I've really not got a clue what to do here!!!

Peter

Dr Stevil · Nov 12, 2003

Imported post

As Druid says, use Spybot S&D, if you don't have it, get it from www.lurkhere.com look under "nice files to download" however, this evening that site seems to be temporarily unavailable but I'm sure it'll be back online soon

GarethB · Nov 13, 2003

Imported post

I have to second the question of how it arrived on your machine. If you genuinely do not know, then you need to have a word with whomever else uses your machine. Comload is a porn dialler, pure and simple, and worse than that it works as a trojan and allows exe and bat files to be run remotely. Bad news. Get rid of it.

In the future, to avoid things such as this you have a few options. The primary preventative measure has to be "user training". When certificate messages pop up with "do you want to install and run blah blah blah" just click no.

Make sure your internet options are set to PROMPT for activeX controls, rather than just install them automatically. You can do this by opening internet explorer, going to TOOLS, INTERNET OPTIONS , clicking the SECURITY tab and just make sure the internet option is set to MEDIUM and not low.

Oh, and try to avoid www.donkeylovers.com in the future

Gareth

peter k · Nov 13, 2003

Imported post

Hi Troops,
Right OK, I've got the wee Spybot picture thingy on my front page(The bit with IE, OE, etc). When I try to get into it I get this message in a wee box with an OK button beneath;

A required .DLLfile,WS2_32.DLL, was not found.

Basically, it'll no let me open it. WTF do I do now?
Thanks Guys! I gather these a bad for my computers health and it ain't done my bank balance much good either.

Peter

Mr T. · Nov 13, 2003

Imported post

[b said:
Quote[/b] (peter k @ Nov. 12 2003,19:39)]Manual removal......

.....and Porn!!

Love it!

Jay · Nov 13, 2003

Imported post

Perhaps we should change his name to "Peter 2 Tugs"

peter k · Nov 13, 2003

Imported post

Look lads, this is serious. Stop taking the piss.

Peter

Driftwood · Nov 13, 2003

Imported post

[b said:
Quote[/b] (peter k @ Nov. 12 2003,19:39)]a couple of months ago I fu**ed around trying to get off

<font color='#0000FF'>I still prefer that one....

Weren't trying to download Jordan's "home movie" for the Sport website were you?

Jay · Nov 13, 2003

Imported post

What operating system are you using (win 98, win2000, winME, win XP)?

Jay · Nov 13, 2003

Imported post

PEST PATROL is an automatic detection / removal program. Download it and then install it. Close all windows instances (browser windows etc) then run it. That should cleanse your system. If it doesn't then as again.

Jay · Nov 13, 2003

Imported post

Just noticed that PEST CONTROL ain't free so will keep on looking

peter k · Nov 13, 2003

Imported post

[b said:
Quote[/b] (Heads Up @ Nov. 13 2003,15:04)]What operating system are you using (win 98, win2000, winME, win XP)?

95

Peter

Jay · Nov 13, 2003

Imported post

Ok - not being sarcastic but which bits of the following can't you do?

Open a DOS command prompt window (Start->Programs->Accessories) and enter the following commands:

cd "%WinDir%\System"
regsvr32 /u comload.dll
Then open the System folder (inside the Windows folder, named 'System32' under Windows XP/2000/NT or just 'System' under Windows Me/98/95), and delete the file 'comload.dll'.

peter k · Nov 13, 2003

Imported post

[b said:
Quote[/b] (Heads Up @ Nov. 13 2003,15:17)]Ok - not being sarcastic but which bits of the following can't you do?

Open a DOS command prompt window (Start->Programs->Accessories) and enter the following commands:

cd "%WinDir%\System"
regsvr32 /u comload.dll
Then open the System folder (inside the Windows folder, named 'System32' under Windows XP/2000/NT or just 'System' under Windows Me/98/95), and delete the file 'comload.dll'.

Hi Jay,
When I do the Start>Programmes>Accesories There isn't anywhere to type the stuff in. It's just a big list thingy with Communications at the top and a weird Uninstall Getsmilie thing at the bottom. Nowhere to actually type.

Peter

RobK · Nov 13, 2003

Imported post

[b said:
Quote[/b] (peter k @ Nov. 13 2003,15:21)]

[b said:

Quote[/b] (Heads Up @ Nov. 13 2003,15:17)]Ok - not being sarcastic but which bits of the following can't you do?

Open a DOS command prompt window (Start->Programs->Accessories) and enter the following commands:

cd "%WinDir%\System"
regsvr32 /u comload.dll
Then open the System folder (inside the Windows folder, named 'System32' under Windows XP/2000/NT or just 'System' under Windows Me/98/95), and delete the file 'comload.dll'.

Click to expand...

Hi Jay,
When I do the Start>Programmes>Accesories There isn't anywhere to type the stuff in. It's just a big list thingy with Communications at the top and a weird Uninstall Getsmilie thing at the bottom. Nowhere to actually type.

Peter

Peter,

Try Start->Run

This should open a run program dialog.

Type 'command' (Without the quotes) this should open a dos window.

HTH
Rob.

Jay · Nov 13, 2003

Imported post

You are looking for a program in the list called MSPROMPT or COMMAND PROMPT - can you see that? If so, click on it and a box should appear SIMILAR to that below. Can you get this?

Jay · Nov 13, 2003

Imported post

Ad-aware is worth downloading as it checks for spyware etc and removes most of it first time.

abucksdiver · Nov 13, 2003

Imported post

<font color='#000080'>Peter,
Once you get the Command window open, type the drive and name of your windows directory in place of %WinDir% (possibly "C:/Windows" ... I can't remember Win95 too clearly now...)

abucks

FAO IT folks

Top Contributors this Month