Re: Browser takeover

From: Tom B. (TomB_at_discussions.microsoft.com)
Date: 11/29/04


Date: Sun, 28 Nov 2004 16:43:03 -0800

David,
Thanks. I'll try that. I'm not sure how comfortable I am in Safe Mode, but
there's someone who I can call to help. I'll let you know. Tom

"David H. Lipman" wrote:

> That's your problem.
> Adaware 6 has been discontinued, it won't get new updates and is no longer supported by
> Lavasoft.
>
> Please perform the following set of instructions...
>
> 1) Download the following three items...
>
> Trend Sysclean Package
> http://www.trendmicro.com/download/dcs.asp
>
> Latest Trend signature files.
> http://www.trendmicro.com/download/pattern.asp
>
> Adaware SE (free personal version v1.05)
> http://www.lavasoftusa.com/
>
> Create a directory.
> On drive "C:\"
> (e.g., "c:\New Folder")
> or the desktop
> (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
>
> Download SYSCLEAN.COM and place it in that directory.
> Download the Trend Pattern File by obtaining the ZIP file.
> For example; lpt265.zip
>
> Extract the contents of the ZIP file and place the contents in the same directory as
> SYSCLEAN.COM.
>
> 2) Remove Adaware6
> 3) Install Adaware SE
> 4) Update Adaware SE with the latest definitions.
> 5) If you are using WinME or WinXP, disable System Restore
> http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
> 6) Reboot your PC into Safe Mode
> 7) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
> platform and clean/delete any infectors/parasites found.
> (a few cycles may be needed)
> 8) Restart your PC and perform a "final" Full Scan of your platform using both the
> Trend Sysclean utility and Adaware
> 9) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
> System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
> 10) Reboot your PC.
> 11) If you are using WinME or WinXP, create a new Restore point
>
> * * * Please report back your results * * *
>
> Dave
>
>
>
>
> "Tom B." <TomB@discussions.microsoft.com> wrote in message
> news:8B7F7113-F52A-44EC-8E11-F85DC78E8B83@microsoft.com...
> | I run AdAware 6.0.
> |
> | "David H. Lipman" wrote:
> |
> | > What version of Adaware ?
> | >
> | > Dave
> | >
> | >
> | >
> | > "Hypnotised" <Hypnotised@discussions.microsoft.com> wrote in message
> | > news:5BFCCEE1-1280-4C12-BBFC-710E48169059@microsoft.com...
> | > | I pride myself on keeping abreast of all spyware and viruses. I run Panda
> | > | virus scan, AdAware, Spybot and HijackThis once a week and never have any
> | > | problems, UNTIL A WEEK AGO! I have this nasty spyware that takes over my
> | > | browser. I have to run Hijackthis 3 or 4 times a day to remove this spyware
> | > | called HotWebSearch.com and there are always the same 6 entries every time.
> | > | It either opens a new browser windwow in FRONT of my msn homepage which i
> | > | quickly delete, or it then hijacks the homepage. This occurs numerous times
> | > | all day! How do I get rid of this nasty new spyware. I've run everything, and
> | > | it won't go away. Thanks.
> | >
> | >
> | >
>
>
>



Relevant Pages

  • Re: nt authority system
    ... How do you reboot the computer into safe mode. ... > When you execute Adaware and you get the shutdown message, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Elitum DyFuca n-Case
    ... > 2) Disable System Restore ... > 3) Reboot your PC into Safe Mode ... > 4) Using Adaware SE, perform a Full Scan of your platform and ...
    (microsoft.public.windowsxp.security_admin)
  • Re: TIBS dialer and DSO exploit
    ... >You tried Sysclean in Safe mode and you updated Adaware ... SE then ran it also in Safe Mode? ... >|>3) Reboot your PC into Safe Mode ...
    (microsoft.public.security.virus)
  • Re: Nasty Virus
    ... Have Adaware remove the parasites in Safe Mode and delete the hosts file. ... | Restore and re-apply any ...
    (microsoft.public.security.virus)
  • Re: Offeroptimizer wont go away...ever
    ... >>3) Disable System Restore ... >>4) Reboot your PC into Safe Mode ... >>5) Using both the Trend Sysclean utility and Adaware, ...
    (microsoft.public.windowsxp.general)