Jump to content


Photo

Block-checker.exe


  • Please log in to reply
20 replies to this topic

#1 TMA_Cool

TMA_Cool

    Member

  • Full Member
  • Pip
  • 68 posts

Posted 18 August 2005 - 02:13 PM

Well, i installedx that program, to see if it worked, and now, when im on MSN it sometimes autosends a message "go here, and download block-checker". Also, i unisntalled it, but the folder, and 2 files are still there, which i cannto delte because it says its beingf used by another program.
Any tohughts?

#2 WinHelp2002

WinHelp2002

    Taking back the Internet

  • Retired Staff
  • PipPipPipPipPip
  • 5,365 posts

Posted 19 August 2005 - 05:59 AM

Hi,
Did you reboot after uninstalling the program from Add Remove?
Note: most of these type program are highly questionable! Especially when you are reveling someone's email address to a 3rd party. Make sure you have permission to do so first.
Mike
Former Microsoft MVP Posted Image 1999-2012
"There's no place like 127.0.0.1"
Posted Image
Blocking Malware, Parasites, Hijackers, Trojans, http://www.mvps.org/...p2002/hosts.htm with a HOSTS file

#3 TMA_Cool

TMA_Cool

    Member

  • Full Member
  • Pip
  • 68 posts

Posted 19 August 2005 - 11:39 AM

i was able to delete the folder, and no more messages appeared :D

#4 WinHelp2002

WinHelp2002

    Taking back the Internet

  • Retired Staff
  • PipPipPipPipPip
  • 5,365 posts

Posted 19 August 2005 - 01:19 PM

Hi,
Glad to see you have resolved your problem ...
Mike
Former Microsoft MVP Posted Image 1999-2012
"There's no place like 127.0.0.1"
Posted Image
Blocking Malware, Parasites, Hijackers, Trojans, http://www.mvps.org/...p2002/hosts.htm with a HOSTS file

#5 puner

puner

    Member

  • New Member
  • Pip
  • 1 posts

Posted 19 August 2005 - 03:29 PM

i was able to delete the folder, and no more messages appeared  :D

View Post


I have the exact same problem as you. I downloaded msn block checker, and now everytime i want to talk to someone it tells them to download blockchecker, and i cant stop it. I removed the program but the folder still remains in "program files" inside are two files, just like you, and when i try to deleat the folder the error tells me i can because block-checker.exe is in use.

How did you solve the problem, and help me to deleat the beast!!!!

#6 Swandog46

Swandog46

    Forum Deity

  • Retired Staff
  • PipPipPipPipPip
  • 10,190 posts

Posted 20 August 2005 - 08:16 AM

Please read the FAQ and post a thread in the Malware forum with your HijackThis log and someone will take a look at it. :)

#7 quasi

quasi

    Member

  • Full Member
  • Pip
  • 4 posts

Posted 21 August 2005 - 08:25 AM

Removing Block Checker
The reason why you can't remove the program is becuase its being used by a process. To remove it rename the 2 files under block checker folder to some junk.
Reboot.
Then delete those files after the reboot.
That should work.
To completly get rid of it (optional)
Use hijack this to remove the block-checker.exe reg entry.

#8 Swandog46

Swandog46

    Forum Deity

  • Retired Staff
  • PipPipPipPipPip
  • 10,190 posts

Posted 21 August 2005 - 09:22 PM

Atribune has released a tool to fix the BlockChecker infection; it may be downloaded from:

http://www.atribune....ds/blockrem.zip

The tool must be run in Safe Mode. But like I said, I strongly recommend posting a HijackThis log in the Malware forum and a helper will help you with this...

#9 dwayne12

dwayne12

    Member

  • New Member
  • Pip
  • 1 posts

Posted 24 August 2005 - 12:28 AM

Well i downloaded block checker to and it started sending messages as you all know it does. So what i did was go snooping around the site www.block-checker.com which is where you get it. And something that clearly shows that it is a scam is in the sites source code it uses random number javascript code to make it look like it has been downloaded like 20 million times or sumthing.

<script language="JavaScript">
<!--
function RandomNumber(upper_limit)
{
return Math.round(upper_limit * Math.random());
}
//-->
</script>

<script language="JavaScript">
<!--
var upper_limit = 1000000;
document.write(RandomNumber(upper_limit) + ' Downloads');
//-->
</script>

To further more prove my point. Reload the page a few times and the number of downloads will magically change very quickly sometimes higher or lower.

#10 Stigmata

Stigmata

    Member

  • New Member
  • Pip
  • 1 posts

Posted 24 August 2005 - 12:08 PM

Removing Block Checker
The reason why you can't remove the program is becuase its being used by a process. To remove it rename the 2 files under block checker folder to some junk.
Reboot.
Then delete those files after the reboot.
That should work.
To completly get rid of it (optional)
Use hijack this to remove the block-checker.exe reg entry.

View Post

Actually, it's quicker just to:
rename the files
move them
delete what was originally "cssrs.exe" (possibly the wrong filename, but close enough)
open up the Windows Task Manager
close any processes called "cssrs.exe" or "block-checker.exe"
delete what was originally "block-checker.exe"

As far as I can tell, it's gone for good.

#11 diado

diado

    Member

  • New Member
  • Pip
  • 1 posts

Posted 28 August 2005 - 11:59 AM

Thanks to this forum and to Google for getting me here and showing me how to remove this pest. :D The only difference to me is that it was passed to my wife's id via Yahoo. The effect to my PC was that she was blocked on Yahoo and whenever I started Yahoo on my id, it terminated immediately. Checking the block-checker software, it also appears to target AIM users.

My environment is Windows/XP SP2 with Norton Internet Security 2005. I also use Spyware Doctor, and am currently looking at Microsoft Antispyware.

#12 Jaded_Kitty

Jaded_Kitty

    Member

  • New Member
  • Pip
  • 1 posts

Posted 31 August 2005 - 01:35 PM

Ive been trying to get rid of this program from my computer before I saw this site. I uninstalled and deleted all the files I could find and now I have no files to rename and delete. It still is working on my computer and I have no idea how to get rid of it. I know a lot of people have already asked but I really need some help guys :S

#13 Swandog46

Swandog46

    Forum Deity

  • Retired Staff
  • PipPipPipPipPip
  • 10,190 posts

Posted 31 August 2005 - 03:09 PM

Like I said above,

Please read the FAQ and post a thread in the Malware forum with your HijackThis log and someone will take a look at it.


:)

#14 chris5959

chris5959

    Member

  • New Member
  • Pip
  • 1 posts

Posted 28 September 2005 - 10:45 AM

I found this post on Google (searching: removing block checker) and I noticed that the actual way to get rid of block checker was not posted.

So, I shall tell you how to do it :)

1) Reboot your computer
2) Go into Safe Mode (if you don't know how.. search Google :p)
3) Delete the entire file located C:/Program Files/Block Checker or wherever you installed it to.
4) Delete from recycle bin
5) Reboot pc as normal (not in safe mode)
6) Voila! It's gone!

You can only delete the file blockchecker in safe mode because it is not running. In normal mode, it is running and therefore you cant get rid of it (also you can make it so its not running :-\)

Hope that helps,
Chris
email: chris4 [(at)] hotmail.co.uk

#15 i play runescape

i play runescape

    Member

  • New Member
  • Pip
  • 1 posts

Posted 12 October 2005 - 12:09 PM

Well, i installedx that program, to see if it worked, and now, when  im on MSN it sometimes autosends a message "go here, and download block-checker". Also, i unisntalled it, but the folder, and 2 files are still there, which i cannto delte because it says its beingf used by another program.
Any tohughts?

View Post

yes i have help
try to change the name and then delete it
it happened to me with a porn program... :lol:

#16 blockcheckerhelp

blockcheckerhelp

    Member

  • New Member
  • Pip
  • 1 posts

Posted 14 June 2006 - 11:12 AM

@ chris5959 : actually there's no need to reboot in safe mode.

just open the win task manager ( ctrl + alt + del)

go to proccesses

and end proccess titled 'blockchecker.exe'

then delete the folder without any hassles

#17 Jordan Pardy

Jordan Pardy

    Member

  • Full Member
  • Pip
  • 2 posts

Posted 10 July 2006 - 12:14 PM

I found something on a site once that could remove the program. Actually I think it was hidden somewhere on the block checker homepage in the faq or something. But I just checked and it has been removed, unfortunately.

#18 Celtam_Stillead

Celtam_Stillead

    Member

  • Full Member
  • Pip
  • 1 posts

Posted 13 September 2006 - 12:46 PM

no need to reboot
heres a guide:

1: go to program files.
2: Rename folder and all programs inside it
3: delete ccrsse.exe or whatever it is.
4: Delete Block checker folder.
5: Go to Windows task manager.
6: processes.
7: delete block checker.exe.

DIE BLOCK CHECKER!!! I SHALL KILL YE!!!

#19 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,814 posts

Posted 13 September 2006 - 07:07 PM

As Swandog46 has said a couple times now,

Please read the FAQ and post a thread in the Malware forum with your HijackThis log and someone will take a look at it.


It is quite possible that you may be infected with something even more dangerous OTHER than block-checker.

It would DEFINITELY be worth your while to post a log in the Malware Removal forum.

Edited by screen317, 13 September 2006 - 07:08 PM.

Please consider donating to help support the continued prompt and excellent services of this site.


#20 den123

den123

    Member

  • New Member
  • Pip
  • 1 posts

Posted 07 March 2007 - 06:16 AM

I have found at myself. Has found the information on it on Link Removed and their antivirus all has cured!

Edited by Indrid_Cold, 07 March 2007 - 07:10 AM.


#21 Budfred

Budfred

    Malware Hound

  • Administrators
  • PipPipPipPipPip
  • 21,466 posts

Posted 07 March 2007 - 06:55 AM

That link is to WinantivirusPro which is a Vundo infection... If anyone downloaded and installed that program before I munged the link, please post a HJT log in Malware Removal since you are now infected...
Budfred

Helpful link: SpywareBlaster...

MS MVP 2006 and ASAP Member since 2004

Please read the Instructions for posting requested logs and the article "So how did I get infected in the first place?"




Member of UNITE
Support SpywareInfo Forum - click the button