Fuckin' Real Media ( RM)

Fucknugget · #1 07-08-2007, 09:38 AM

Hey Dr PC..

I already hate .rm ( RealMedia ) but am forced to use it when my other players won't open the .rm files..

But this just happened today with 3 or 4 .rm vids...

when i opened them in RM, it hijacked my browser and tried to open :

Code:

http://www.jimmy87.com/bt/cf.aspx?58&zjh326
http://www.8pines.com/bbs/thread-8314-1-1.html

( fuckin' hijackers....

)

it never did that before and i went in search of the solution..

here's what i came across... :

http://real.lithium.com/real/board/m...ssage.id=13198

i tried the " fix " but it didn't work.... it still hijacks the browser....

i ran a scan and everything came back clean...

no spyware, or crap detected...

and it only happens with those 3 or 4 .rm vids... the other .rm vids have no problems....

you once before showed me how to stop my browser from being hijacked but i forgot how it was done...

can you help with this..??

and can you help me to stop my browser from getting hijacked once again....??

thanks...

crux · #2 07-08-2007, 12:00 PM

CD...I would also like to know how to clean up RM vids that have this code imbedded that hijacks the browser causing it to automatically open and head for a preprogramed site like A says...domo

Fucknugget · #3 07-08-2007, 12:49 PM

i also noticed that the .rm/.rmvb vids will play normally, but when you advance it ( fast forward ) that's what seems to launch the hijack...??

when this happens, you can hover your cursor on the screen and it will reveal the link... makes me wonder if the embedded link is hidden/encoded in the video itself..??

also... i just grabbed Real Alternative and will try and install it soon.. bye bye RM...

Fucknugget · #4 07-08-2007, 01:25 PM

Yay...

installed Real Alternative and got rid of that Real Media Player crap....

and now when i click on those vids, it doesn't hijack my browser anymore....

Yay....

but would still like to find out the cause of the hijack..

crazydutch · #5 07-09-2007, 05:26 AM

The hijack comes from a code which is embedded in the vid. There is a simple solution for this by using the MVPS hostfile. This will block all referrals to these sorts of hijacks. The best course of action though is whenever you downloaded a file from an unknown source is to have it scanned by an online scanner.

You can either scan an individual file or your whole computer.

BitDefender
Computer Associates Online Virus Scan
Panda's ActiveScan
Trend Micro Housecall
Windows Live Safety Center Free Online Scan
This scanner from Trend does not require an Active X to run.

1. Detects and removes malware ( viruses, worms, trojans, etc. )
2. Detects and removes grayware and spyware
3. Restores damage caused by malware to your system.
4. Notifies about vulnerabilities in installed programs and connected network services.
5. Multi-platform support for: Windows, Linux, Solaris.
6. Easy-to-use with the Microsoft Internet Explorer and Mozilla Firefox.

Fucknugget · #6 07-09-2007, 05:35 AM

Quote:

Originally Posted by crazydutch

The hijack comes from a code which is embedded in the vid. There is a simple solution for this by using the MVPS hostfile. This will block all referrals to these sorts of hijacks. The best course of action though is whenever you downloaded a file from an unknown source is to have it scanned by an online scanner.

You can either scan an individual file or your whole computer.

BitDefender
Computer Associates Online Virus Scan
Panda's ActiveScan
Trend Micro Housecall
Windows Live Safety Center Free Online Scan
This scanner from Trend does not require an Active X to run.

1. Detects and removes malware ( viruses, worms, trojans, etc. )
2. Detects and removes grayware and spyware
3. Restores damage caused by malware to your system.
4. Notifies about vulnerabilities in installed programs and connected network services.
5. Multi-platform support for: Windows, Linux, Solaris.
6. Easy-to-use with the Microsoft Internet Explorer and Mozilla Firefox.

is Windows Defender similiar to Bit Defender..??

and i did a panda scan and it didn't detect the embedded crap in the vids...

and what is this MVPS hostfile..??

sounds like something i may want....

crazydutch · #7 07-09-2007, 05:53 AM

http://www.mvps.org/winhelp2002/hosts.htm

Special instructions for Vista http://www.mvps.org/winhelp2002/hostsvista.htm

This will tell you everything.. I have it and it works great. This will aso be incorporated i the tutorial section,

Fucknugget · #8 07-09-2007, 05:54 AM

i started reading up on MVSP hostfile and God-Damn Vista is a problem.. of course....

fuckin'...

this sounds like it might be a good thing... and maybe you can include it in one of you future tutorials about this kind of crap....

Fucknugget · #9 07-09-2007, 05:55 AM

hahahaha..

you posted as i was writing...

crazydutch · #10 07-09-2007, 05:59 AM

I was realising as I wrote .... Dammm I'm good...

Fucknugget · #11 07-09-2007, 06:12 AM

fuckin' comps... :roflmao;

*whoosh*

i've followed the steps as they are laid out.. and now i'm at the part where it says to right click " hosts " and send to ***

but the window pops up and says you need Admin permissions to proceed...

i am the Admin and click " continue" but it re-opens a window saying it is unable to proceed with that request because i need Admin permissions... i try again.,.. same results...

fuckin' Vista... piece of shit....

crazydutch · #12 07-09-2007, 06:48 AM

Control Panel > Administrative Tools
Select: Local Security Policy (when prompted, click Continue)

In the left pane, expand Local Policies and click Security Options.
In the right pane, scroll down to User Account Control:
Double-click on: "Behavior Of The Elevation Prompt For Administrators In Admin Approval Mode"

In the drop-down box on the Local Security Settings tab
Select Elevate Without Prompting, Click Apply/OK.

Note: run Windows Vista with UAC turned off as this also turns off the "Protected Mode" in Internet Explorer.

Fucknugget · #13 07-09-2007, 01:16 PM

there is no Local Security Policy...

crazydutch · #14 07-10-2007, 04:12 AM

Some reading material

http://blogs.msdn.com/uac/archive/20...22/516066.aspx

http://technet2.microsoft.com/Window....mspx?mfr=true

http://www.lockergnome.com/nexus/win...ings-in-vista/

Fucknugget · #15 07-10-2007, 06:37 AM

when i go into Admin Tools..

this is what i get...

nothing about Local Security Policy...

crazydutch · #16 07-10-2007, 06:46 AM

Alternatively, you can also use the Group Policy Editor by typing gpedit.msc in the search field on the Start Menu. This opens the Group Policy console from which you can navigate to the security settings.

Fucknugget · #17 07-10-2007, 06:47 AM

Quote:

Originally Posted by crazydutch

Control Panel > Administrative Tools
Select: Local Security Policy (when prompted, click Continue)

In the left pane, expand Local Policies and click Security Options.
In the right pane, scroll down to User Account Control:
Double-click on: "Behavior Of The Elevation Prompt For Administrators In Admin Approval Mode"

In the drop-down box on the Local Security Settings tab
Select Elevate Without Prompting, Click Apply/OK.

Note: run Windows Vista with UAC turned off as this also turns off the "Protected Mode" in Internet Explorer.

ok..

i followed the steps but didn't find Local Security Policy...

so i could not do anything else except to turn off UAC...

but that didn't seem to help anything at all...

but that's ok cuz i don't really use IE anyways...

i use Opera and the Fox....

Fucknugget · #18 07-10-2007, 06:50 AM

Quote:

Originally Posted by crazydutch

Alternatively, you can also use the Group Policy Editor by typing gpedit.msc in the search field on the Start Menu. This opens the Group Policy console from which you can navigate to the security settings.

nope..

typed in : gpedit.msc

says " no items match your search "...