Re: Browser takeover
From: Br0wnbear (brownbearat_at_canadadotcom.com)
Date: 11/29/04
- Next message: Br0wnbear: "Re: Zango Hijacker"
- Previous message: MAP: "RE: Hackdefender clb.exe"
- In reply to: Tom B.: "Re: Browser takeover"
- Next in thread: David H. Lipman: "Re: Browser takeover"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 29 Nov 2004 10:26:11 -0500
On Mon, 29 Nov 2004 00:23:02 -0800, Tom B.
<TomB@discussions.microsoft.com> wrote:
>By the way, it's HotWebSearch.com and it will not go away. It keeps coming
>back after I delete the entries in Hijackfix.
>Please tell me what I'm doing wrong in the last step in Safe Mode based on
>this recommendation you made. Thanks.
>
>"Tom B." wrote:
>
>> David,
>> OK, here are the results of your treatment. I uninstalled AdAware 6.0 and
>> intalled SE. I created a new folder in C drive called Software Help and
>> downloaded Sysclean.com and Trend Pattern File and unzipped in the same
>> folder. I have sysclean. com and lpt.265 unzipped in this new folder. I went
>> to Safe Mode and attempted to run sysclean.com and keep getting this Error
>> message:
>> It's a Trend Microsysclean Package error message stating:
>> Pattern file "LPT$VPN" is missing. Please download a copy.
>> What am I missing here? I place both downloads in the same folder. Please
>> respond. Thanks. Tom
>>
>> "David H. Lipman" wrote:
>>
>> > I look forward to your results Tom.
>> >
>> > Dave
>> >
>> >
>> >
>> > "Tom B." <TomB@discussions.microsoft.com> wrote in message
>> > news:346E9048-CE74-4CD7-9D79-C4C0DA63C74A@microsoft.com...
>> > | David,
>> > | Thanks. I'll try that. I'm not sure how comfortable I am in Safe Mode, but
>> > | there's someone who I can call to help. I'll let you know. Tom
>> > |
>> > | "David H. Lipman" wrote:
>> > |
>> > | > That's your problem.
>> > | > Adaware 6 has been discontinued, it won't get new updates and is no longer supported by
>> > | > Lavasoft.
>> > | >
>> > | > Please perform the following set of instructions...
>> > | >
>> > | > 1) Download the following three items...
>> > | >
>> > | > Trend Sysclean Package
>> > | > http://www.trendmicro.com/download/dcs.asp
>> > | >
>> > | > Latest Trend signature files.
>> > | > http://www.trendmicro.com/download/pattern.asp
>> > | >
>> > | > Adaware SE (free personal version v1.05)
>> > | > http://www.lavasoftusa.com/
>> > | >
>> > | > Create a directory.
>> > | > On drive "C:\"
>> > | > (e.g., "c:\New Folder")
>> > | > or the desktop
>> > | > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
>> > | >
>> > | > Download SYSCLEAN.COM and place it in that directory.
>> > | > Download the Trend Pattern File by obtaining the ZIP file.
>> > | > For example; lpt265.zip
>> > | >
>> > | > Extract the contents of the ZIP file and place the contents in the same directory as
>> > | > SYSCLEAN.COM.
>> > | >
>> > | > 2) Remove Adaware6
>> > | > 3) Install Adaware SE
>> > | > 4) Update Adaware SE with the latest definitions.
>> > | > 5) If you are using WinME or WinXP, disable System Restore
>> > | > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
>> > | > 6) Reboot your PC into Safe Mode
>> > | > 7) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
>> > | > platform and clean/delete any infectors/parasites found.
>> > | > (a few cycles may be needed)
>> > | > 8) Restart your PC and perform a "final" Full Scan of your platform using both the
>> > | > Trend Sysclean utility and Adaware
>> > | > 9) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
>> > | > System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
>> > | > 10) Reboot your PC.
>> > | > 11) If you are using WinME or WinXP, create a new Restore point
>> > | >
>> > | > * * * Please report back your results * * *
>> > | >
>> > | > Dave
>> > | >
>> > | >
>> > | >
>> > | >
>> > | > "Tom B." <TomB@discussions.microsoft.com> wrote in message
>> > | > news:8B7F7113-F52A-44EC-8E11-F85DC78E8B83@microsoft.com...
>> > | > | I run AdAware 6.0.
>> > | > |
>> > | > | "David H. Lipman" wrote:
>> > | > |
>> > | > | > What version of Adaware ?
>> > | > | >
>> > | > | > Dave
>> > | > | >
>> > | > | >
>> > | > | >
>> > | > | > "Hypnotised" <Hypnotised@discussions.microsoft.com> wrote in message
>> > | > | > news:5BFCCEE1-1280-4C12-BBFC-710E48169059@microsoft.com...
>> > | > | > | I pride myself on keeping abreast of all spyware and viruses. I run Panda
>> > | > | > | virus scan, AdAware, Spybot and HijackThis once a week and never have any
>> > | > | > | problems, UNTIL A WEEK AGO! I have this nasty spyware that takes over my
>> > | > | > | browser. I have to run Hijackthis 3 or 4 times a day to remove this spyware
>> > | > | > | called HotWebSearch.com and there are always the same 6 entries every time.
>> > | > | > | It either opens a new browser windwow in FRONT of my msn homepage which i
>> > | > | > | quickly delete, or it then hijacks the homepage. This occurs numerous times
>> > | > | > | all day! How do I get rid of this nasty new spyware. I've run everything, and
>> > | > | > | it won't go away. Thanks.
Tom
Try these.
For version 1, use the following link:
http://www.hotwebsearch.com/uninstall.zip
If you have version 2 installed, use the following link instead:
http://www.hotwebsearch.com/newuninstall/uninstall.zip
I am not sure which version you would have.
hth
John Brown
Bears are always happy, we get to hibern8 and
now I am going back to sleep
- Next message: Br0wnbear: "Re: Zango Hijacker"
- Previous message: MAP: "RE: Hackdefender clb.exe"
- In reply to: Tom B.: "Re: Browser takeover"
- Next in thread: David H. Lipman: "Re: Browser takeover"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
