Re: Browser takeover
From: Tom B. (TomB_at_discussions.microsoft.com)
Date: 11/29/04
- Previous message: Avril H: "Re: Infected!"
- In reply to: Tom B.: "Re: Browser takeover"
- Next in thread: Br0wnbear: "Re: Browser takeover"
- Reply: Br0wnbear: "Re: Browser takeover"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 29 Nov 2004 00:23:02 -0800
By the way, it's HotWebSearch.com and it will not go away. It keeps coming
back after I delete the entries in Hijackfix.
Please tell me what I'm doing wrong in the last step in Safe Mode based on
this recommendation you made. Thanks.
"Tom B." wrote:
> David,
> OK, here are the results of your treatment. I uninstalled AdAware 6.0 and
> intalled SE. I created a new folder in C drive called Software Help and
> downloaded Sysclean.com and Trend Pattern File and unzipped in the same
> folder. I have sysclean. com and lpt.265 unzipped in this new folder. I went
> to Safe Mode and attempted to run sysclean.com and keep getting this Error
> message:
> It's a Trend Microsysclean Package error message stating:
> Pattern file "LPT$VPN" is missing. Please download a copy.
> What am I missing here? I place both downloads in the same folder. Please
> respond. Thanks. Tom
>
> "David H. Lipman" wrote:
>
> > I look forward to your results Tom.
> >
> > Dave
> >
> >
> >
> > "Tom B." <TomB@discussions.microsoft.com> wrote in message
> > news:346E9048-CE74-4CD7-9D79-C4C0DA63C74A@microsoft.com...
> > | David,
> > | Thanks. I'll try that. I'm not sure how comfortable I am in Safe Mode, but
> > | there's someone who I can call to help. I'll let you know. Tom
> > |
> > | "David H. Lipman" wrote:
> > |
> > | > That's your problem.
> > | > Adaware 6 has been discontinued, it won't get new updates and is no longer supported by
> > | > Lavasoft.
> > | >
> > | > Please perform the following set of instructions...
> > | >
> > | > 1) Download the following three items...
> > | >
> > | > Trend Sysclean Package
> > | > http://www.trendmicro.com/download/dcs.asp
> > | >
> > | > Latest Trend signature files.
> > | > http://www.trendmicro.com/download/pattern.asp
> > | >
> > | > Adaware SE (free personal version v1.05)
> > | > http://www.lavasoftusa.com/
> > | >
> > | > Create a directory.
> > | > On drive "C:\"
> > | > (e.g., "c:\New Folder")
> > | > or the desktop
> > | > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
> > | >
> > | > Download SYSCLEAN.COM and place it in that directory.
> > | > Download the Trend Pattern File by obtaining the ZIP file.
> > | > For example; lpt265.zip
> > | >
> > | > Extract the contents of the ZIP file and place the contents in the same directory as
> > | > SYSCLEAN.COM.
> > | >
> > | > 2) Remove Adaware6
> > | > 3) Install Adaware SE
> > | > 4) Update Adaware SE with the latest definitions.
> > | > 5) If you are using WinME or WinXP, disable System Restore
> > | > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
> > | > 6) Reboot your PC into Safe Mode
> > | > 7) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
> > | > platform and clean/delete any infectors/parasites found.
> > | > (a few cycles may be needed)
> > | > 8) Restart your PC and perform a "final" Full Scan of your platform using both the
> > | > Trend Sysclean utility and Adaware
> > | > 9) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
> > | > System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
> > | > 10) Reboot your PC.
> > | > 11) If you are using WinME or WinXP, create a new Restore point
> > | >
> > | > * * * Please report back your results * * *
> > | >
> > | > Dave
> > | >
> > | >
> > | >
> > | >
> > | > "Tom B." <TomB@discussions.microsoft.com> wrote in message
> > | > news:8B7F7113-F52A-44EC-8E11-F85DC78E8B83@microsoft.com...
> > | > | I run AdAware 6.0.
> > | > |
> > | > | "David H. Lipman" wrote:
> > | > |
> > | > | > What version of Adaware ?
> > | > | >
> > | > | > Dave
> > | > | >
> > | > | >
> > | > | >
> > | > | > "Hypnotised" <Hypnotised@discussions.microsoft.com> wrote in message
> > | > | > news:5BFCCEE1-1280-4C12-BBFC-710E48169059@microsoft.com...
> > | > | > | I pride myself on keeping abreast of all spyware and viruses. I run Panda
> > | > | > | virus scan, AdAware, Spybot and HijackThis once a week and never have any
> > | > | > | problems, UNTIL A WEEK AGO! I have this nasty spyware that takes over my
> > | > | > | browser. I have to run Hijackthis 3 or 4 times a day to remove this spyware
> > | > | > | called HotWebSearch.com and there are always the same 6 entries every time.
> > | > | > | It either opens a new browser windwow in FRONT of my msn homepage which i
> > | > | > | quickly delete, or it then hijacks the homepage. This occurs numerous times
> > | > | > | all day! How do I get rid of this nasty new spyware. I've run everything, and
> > | > | > | it won't go away. Thanks.
> > | > | >
> > | > | >
> > | > | >
> > | >
> > | >
> > | >
> >
> >
> >
- Previous message: Avril H: "Re: Infected!"
- In reply to: Tom B.: "Re: Browser takeover"
- Next in thread: Br0wnbear: "Re: Browser takeover"
- Reply: Br0wnbear: "Re: Browser takeover"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
