"Interface not supported"? You have been hacked! Read this!

[gandorf]

Dumb question but if I have a friend log in and change my pw on his pc and save pw would I be ok ?

[Day]

Dumb question but if I have a friend log in and change my pw on his pc and save pw would I be ok ?

Yes, except that it better be a friend that you can physically harm if he takes your shit.

[gandorf]

Don't worry :D. Anyways he saves pw and I don't type it in then I'm ok and don't have to worry right? Losing my account to someone else I don't know will suck.

[Day]

Don't worry :D. Anyways he saves pw and I don't type it in then I'm ok and don't have to worry right? Losing my account to someone else I don't know will suck.

Yeah as long as his PC is clean, this is what you want to do. Everyone with this crap should be trying to get their password changed on a clean machine if they are unable to get this virus cleaned.

Oh and for your issue, did you run in safe mode? Are you on Vista or XP? What's the exact error message?

[gandorf]

I'm on Xp. I don't know how to run safemode >_< I suck with Pc's. Never was my strong point.
Friend changed my password but I gotta type it in on my pc to login.

[Day]

Ok it says this in the OP but I'll forgive you. I'd print out the OP so you can have it by you. You want to reboot and spam F8 while your PC is booting so you get prompted to boot in safe mode.

[Tajin]

I thought you would have realized by now terra is right, Tajie.

With new update I'm nowhere near being ungimp, time to edit signature ;;


Edit: There is a program called Killbox (not sure on name its been a while) that might be useful in removing the file, also hijackthis has an option to delete files on reboot.

[gandorf]

I entered safe mode and went to start>run>cmd>ok. In there i put in regsvr32 /u C:\WINDOWS\SYSTEM32\smart.dll and I'm still getting can not load library.

[Day]

Hmm, well if I were you I would proceed to try the steps that follow that, to see if you can delete it.

Once in safemode run hijackthis, choose perform a system scan.

Look for O20 - Winlogon Notify: Fly - C:\WINDOWS\SYSTEM32\smart.dll

Check it, hit fix checked.

Browse to C:\WINDOWS\SYSTEM32\smart.dll and delete the file. If the file does not delete, try restarting in normal mode and deleting it.

Reboot normally, run HiJackThis for smart.dll, it seemed to not reinstall itself tho.
----

Or as Tajin mentioned Killbox is awesome for deleting files, you can set it to delete on reboot, I think your end result here is getting rid of the Registry entry using hijack this, and deleting the .dll file.

[gandorf]

Yay, I think I got it. Not showing up on Hijackthis anymore. Thank you for all the help

[Kalisa]

For those who are having trouble deleting, I was too (this post was originally an OMGHELP but am editing it now that it worked). Here are my steps. :< Probably not the most efficient way to go about it, but what can you do when you've got a laptop on each knee, cleaning one and changing passwords on the other. >.>

1- Downloaded HijackThis.
2- Rebooted into safe mode.
3- Start/Run/cmd
4- regsvr32 /u C:\WINDOWS\SYSTEM32\smart.dll
5- Got the following error, like many others:

LoadLibrary("C:\WINDOWS\SYSTEM32\smart.dll") failed - A dynamic link library (DLL) initialization failed.

6- Continue with the steps as advised: system scan with HijackThis
7- Located smart.dll in the list, checked the file, it "Fix This"
8- Browsed to C:\WINDOWS\SYSTEM32 and attempted to delete smart.dll. Failed.
9- Failure laptop overheated and rebooted itself into normal mode while I wasn't looking.
10- System scan with HijackThis in normal mode. smart.dll still there.
11- Checked the box, "Fix This" again.
12- Attempted regsvr32 /u again. Same results.
13- Attempted deletion again. Same results.
14- Reboot back into safe mode.
15- System scan with HijackThis. smart.dll not detected this time.
16- Attempted regsvr32 /u again. Different error message:

C:\WINDOWS\SYSTEM32\smart.dll was loaded, but the DllUnregisterServer entry point was not found.

This file can not be registered.

17- Attempted deletion again. Worked.

[Purrrfect]

I thought you would have realized by now terra is right, Tajie.

With new update I'm nowhere near being ungimp, time to edit signature ;;


Edit: There is a program called Killbox (not sure on name its been a while) that might be useful in removing the file, also hijackthis has an option to delete files on reboot.

I was more pointing to the fact that my gimp ass toon is still under lolSE investigation. No one are safe these days... Though, if someone had to get hacked, I guess mine was probably a best case for us; I bet they didn't make shit off my toon.

[masterg]

for those of you who want mre security you could always download The Killbox. its a program that will delete a file at the entered location on your computer and it will delete the file if its there completely. it is quite powerful and quite dangerous if you dont know what your doing. because of that i wont post a url for it. but it is out there for people who want it.

[Maguspk]

I don't even fucking play anymore and I got this the other day when I got on to level SCH because I reactivated to buy lottery marbles. I went to get on tonight to get my numbers and deactivate so I can reactivate if I win, otherwise I won't (no need to pay SE for 2 months just to wait for results).

Anyway, glad I did this in time. Wonder how the hell I got this in the first place though, I run FF with noscript...I did go to somepage recently though, I bet it was that. Fucking somepage.

[Ichthyos]

Otherwiki's ad providers were serving up Flash exploits too... Maybe that's where a lot of people were getting malware.

Source

[Zragnarok]

I found this file on my Dell laptop but not in the system directory, it's in the Dell/support directory ( if I remember well, I'm at work atm ). I didn't log on FFXI last night on my laptop and didn't bother with the file since it's not in the system directory. Should I get rid of it ? I never use the Dell Support Center anyway... lol

[Kedra]

The following actually came from Blizzard, but can be an issue for us all:

A recent vulnerability has been discovered in popular web-content delivery program Adobe Flash, and it could potentially be used to target World of Warcraft players and accounts. The newest available version of Adobe Flash, version 9.0.124.0, does not contain this vulnerability, and we recommend that everyone upgrade their Flash player as soon as possible by visiting the Adobe.com download page at the link below.

http://www.adobe.com/shockwave/...


For more information on this issue, you can read the announcements from the Adobe security team concerning the threat at the links below.

http://blogs.adobe.com/psirt/2008/05/po ... issue.html
http://blogs.adobe.com/psirt/2008/05/po ... e_u_1.html

[Minimaru]

I've been getting a few odd error messages every so often when I'm starting up POL or in it, and while none of them have been "Interface not supported" I wonder if this one is anything to worry about? It's the second one I've gotten and I thought I got a screenshot of the first but it turns out I didn't. I'm kind of leaning toward "No it's nothing to worry about" because my PC has just been screwing up a lot lately, but I'd like to be sure.

http://img145.imageshack.us/img145/5573/wutpolpi7.jpg

[Bitesized]

Can anyone say with much certainty, that smart.dll is the main source of the problem, and that removing it solves the problem? I have reformatted two of my pcs, but fixed smart.dll only on the third. Will it be safe with the removal of smart.dll or is there more I must do to keep this from happening again?

[Mafai]

I've been getting a few odd error messages every so often when I'm starting up POL or in it, and while none of them have been "Interface not supported" I wonder if this one is anything to worry about? It's the second one I've gotten and I thought I got a screenshot of the first but it turns out I didn't. I'm kind of leaning toward "No it's nothing to worry about" because my PC has just been screwing up a lot lately, but I'd like to be sure.

http://img145.imageshack.us/img145/5573/wutpolpi7.jpg

did you happen to install sp3 recently?