Forum Home
Press F1
 
Thread ID: 72357 2006-09-10 01:36:00 Is this possible kjaada (253) Press F1
Post ID Timestamp Content User
483639 2006-09-10 05:43:00 My best guess, The nasties were located in your page file, so while they get flagged, they don't show up for deletion.

I only say this as I had a real head-bender that sounds similar to your situation a couple of weeks ago.
Metla (12)
483640 2006-09-10 06:42:00 wild tangent isn't that big a deal. it just reports back info which may be a big deal for privacy buffs. afaik its not evasive or malicious (eg doesn't hijack or any thing nasty)

quoting sir speedy: O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaE ngineMain this is also spyware. See if Wildtangent is in Add/remove program, if it is uninstall it, then under start / run type regsvr32 / u cdaEngine0400.dll



But...I also know it was carrying another biggie on it's coattail that for some reaon has eluded my memory right now.....it caused a lot of broken HDDs and sucked up a lot of RAM whilst it was doing it's "thing" a while back; W/T was just the way it entered your system.

Whatever, it's never nice or benign to have in your system....on dial-up it hogs the bandwidth amd makes up- or downloads longer than you want.
SurferJoe46 (51)
483641 2006-09-10 06:53:00 Further research:

quoting old posts here:

Speedy Gonzales

Also, Wildtangent is some kind of spyware . Follow the steps I gave previously to remove it . CDA / Wildtangent may also be under the following registry entries . Highlight it then delete it, then reboot .

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

and here

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run


and another:

pheonix

Do as Speedy recommends, then try another Hijackthis log .

Wild Tanget will try to introduce more spyware, so get rid of it .

It would pay to also download , UPDATE and use Spybot S&D, . majorgeeks . com/download2471 . html" target="_blank">www . majorgeeks . com

one of my rants here:

Wow! You guys in the southern hemisphere got the same problems we have here up north . The WILDTANGENT thing is a replicator virus . It is capable of totally filling your hard drives with garbage that won't let you clean/scandisk/defrag or anything but fdisk . It has been running wild here, especially on dial-up isp's . DSL's seem to not be so adversely affected, but you have to run GOOD anti-spy killers .
I had to drill down in HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>Curr entVersion>Run and then look for things like this:

WildTangent CDA

RUNDLL32 . exe"C\ProgramFiles\WildTangent\Apps\CDA\c daEngine0400 . dll",cdaEngineMain

It MAY not be in the programs add/delete area . It might be there, but in stealth as "white-on-white" . exe or . cmd prompts that generate the replication into the hard drives .

These "white-on-white" codes are left over from the days of SHIFT/F1 control devices in the 6-level keyboard accesses in the old PET 40-40 opsys . They were insidious in their day, but I thought that this would be so old fashioned, that it would not be used in modern times . Ah! Not so! Here it comes like deja vu all over again! lol!

and finally Safari's post (the one I jumped all over!):

WildTangent is an online video game software company with partnerships with many companies like HP, Dell, Compaq, Logitech, AOL, and others . We package our games with their products such as computers and computer peripherals . We do not install our software onto your computer without your knowledge and consent . *

If you have found WildTangent software on your computer, but didn’t install it, it was installed onto your computer in the following ways:

Your computer manufacturer, such as HP, Dell, Compaq, or Gateway, preinstalled the software and games on your computer .

Playing any of our games, like Polar Bowler, Blasterball or Tradewinds, or any AIM Games, like Lexibox and WildCards, will install WildTangent on your computer . *In conjunction with AOL, we supply our games as a part of AIM Games .

Trying one of our games from our website partners like MSN Gaming Zone, Yahoo and Shockwave . *To view all our games, please go to our WildGames website .

Someone in your household has played or downloaded any one of our games .

The rest is history . . . ahem!
SurferJoe46 (51)
483642 2006-09-10 07:19:00 Did the Ccleaner thing and it only found 10 entries.I had allready cleaned out a lot of rubbish.The only possible problem now is after running a registry clean all problems were fixed except 2 which will not delete they are both "Inproc server W32 entries". kjaada (253)
483643 2006-09-10 09:11:00 soz SurferJoe46 but i've never seen it replicate or seen (or heard of) any damge done by wildtangent. i came across it before spyware was even a term ! mayby they made something more nasty since then. wildtangent had several winamp plugins which is where i mainly know it from. it has always been simply enough to block with a firewall. tweak'e (69)
483644 2006-09-10 10:06:00 This is a very good opportunity to gloat about how your Linux box never gets these nasties :) TGoddard (7263)
483645 2006-09-10 17:51:00 This is a very good opportunity to gloat about how your Linux box never gets these nasties :)

While that may be so, reality check time here: SOME people are not on the wagon to run Linux-based anything!

The learning curve is steep and full of chuckholes and code that the average person chooses to NOT try now .

Please be a little considerate and let's help those (of us too) that stay with Mr . Bill$ system and try to gently steer all those who are receptive and able to use it, to L-based things, keeping in mind that a little Linux goes a long way .

For myself, I am trying the L-based Kubuntu and Meppis . . . but they are not for the weak of heart or uninitiated . I suggest if someone wants to gloat a little, that it be done in the company of other L users and not be used as a club or the non-user as a whipping boy . .
SurferJoe46 (51)
483646 2006-09-10 17:56:00 soz SurferJoe46 but i've never seen it replicate or seen (or heard of) any damge done by wildtangent. i came across it before spyware was even a term ! mayby they made something more nasty since then. wildtangent had several winamp plugins which is where i mainly know it from. it has always been simply enough to block with a firewall.

Good point!..What I SUGGEST is that somehow W/T got out of control and had some hacks applied to it and then it got nasty.

I actually felt that Safari was a double agent for the W/T company! Telling us that it was innocent and all the while W/T was screwing up HDDs and phoning home all the time, he weathered my lambasting really well and I apologized to him in posting so on this site a full year or so ago.

I still think W/T was safe at first and originally.... .but later on got nasty. That is my concern and the center of my gripe about it.
SurferJoe46 (51)
1 2