Results 1 to 10 of 10
  1. #1
    More Cheesier Than Ever Cheesehead's Avatar
    Join Date
    January 18th, 2005
    Location
    Land of The NFL Champs!
    Posts
    2,942
    I really do believe an exorcist would have been the better choice for my Father-in-Law's computer. Using LavaSoft Ad-aware I removed numerous "objectionable" pop-up scumware programs and had to manually remove 3500+ files out of the temporary internet files as well as edit the Favorites and clear the History.

    Here is the problem that remains: The computer will not do a Yahoo, Google, MSN, or Lycos search. In fact, it will not even let me get to google's home page. I can do Alexa, ExactSeek, and Excite searches however. (BTW, Ad-aware did detect an Alexa tool bar and I removed it).

    Anybody have experience with this? Please help!

    ****************************
    Always Keep The Legs Moving!
    ****************************

  2. #2
    Newbie
    Join Date
    January 18th, 2005
    Posts
    5
    Is ICQ loaded on the machine? There are some really really nasty new ICQ trojans going around that AdAware doesnt even touch.

    Advertising Revenue Service
    Paying more, and more often, than anyone else.

  3. #3
    Full Member ellen-s4y's Avatar
    Join Date
    January 18th, 2005
    Posts
    489
    I would also download and run "Spybot S&D". From personal experience, it's found things Ad-aware didn't.

    If that doesn't help, the next thing I would probably look for is a file called "hosts". It may be in the Windows directory. I'ts possible that the sites you can't access are in there.

    Entries would look something like:
    127.0.0.1 www.google.com
    127.0.0.1 www.yahoo.com

  4. #4
    Super Sh!t Stirrer SSanf's Avatar
    Join Date
    January 18th, 2005
    Posts
    9,944
    Do a banishing spell. Remember to dress the candle away from yourself and your computer.

    Mr.Merchant, if you do business in any way what-so-ever with parasites, your products will not be sold on my sites!!

    Farewell, CJ! I loved you when you were young and pure. I will try to remember you that way. Disclaimer: Comments are to be interpreted as opinion unless otherwise noted.

  5. #5
    Web Ho - Design B!tch ~Michelle's Avatar
    Join Date
    January 18th, 2005
    Location
    Michigan
    Posts
    2,040
    The browser has been hijacked


    Go the site below, it will help you out.

    http://www.dslreports.com/forum/rema...7328~mode=flat


    It is called CWS hijack.
    Please download CWShredder:

    http://www.spywareinfo.com/~merijn/files/cwshredder.zip

    Unzip, run and hit the ->next tab to fix all found problems
    Reboot.

    Go to Add/remove programs and remove
    BookedSpace
    And
    MessengerPlus2

    ~Michelle

    ****************************
    "All I ask is a chance to prove that money can't make me happy."

    "Work to become, not to acquire." -- Confucius

  6. #6
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    1,356
    Just re-format the C drive.

    In another month or two he'll call you to come back and do it again.

    And again, and again.

    ------------------------------
    "It be's dat way sumtimes." ~ Coco B. Ware

  7. #7
    Newbie
    Join Date
    January 18th, 2005
    Posts
    21
    Hey CheeseHead,

    We've seen a steady increase in the number of our clients machines almost completely disabled by spyware/adware. We usually use a combination of Spybot and a awesome little program called hijackthis. You can find hijackthis over at tomcoyote.org and some forums setup for the sole purpose in helping you use the free software. Hijackthis doesn't tell you what's bad, it just shows you all the things that POTENTIALLY be bad, so use care when removing things.

    Also, note that there are quite a few particularly naughty spyware apps that monitor the registry and reinsert themselves if they see you delete registry keys.

    Hope this helps,

    B

  8. #8
    Full Member
    Join Date
    January 18th, 2005
    Posts
    245
    Like Ellen says...and

    You should also check the "Add/Remove Programs" in the control panel for programs that shouldn't be there. You may have some naughty programs running that'll undo any changes you might make every time you reboot. I removed two off one of my client's computers yesterday. They jack'd him big time.

    Good luck!

    BradleyB

  9. #9
    More Cheesier Than Ever Cheesehead's Avatar
    Join Date
    January 18th, 2005
    Location
    Land of The NFL Champs!
    Posts
    2,942
    Thanks for the help! I tried the SpyBot S&D with no luck and will try the other measures. This is a 99-era machine so I told my Father-in-law it might be a good time to upgrade, especially since he is now getting into Aff Mktg as a retirement income with a site I designed for him.

    ****************************
    Always Keep The Legs Moving!
    ****************************

  10. #10
    Member
    Join Date
    January 18th, 2005
    Posts
    84
    sounds like the host file is altered..

    go to c:\winnt\system32\drivers\etc and edit HOSTS file with notepad

    make sure it looks like this:

    # Copyright (c) 1993-1999 Microsoft Corp.
    #
    # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
    #
    # This file contains the mappings of IP addresses to host names. Each
    # entry should be kept on an individual line. The IP address should
    # be placed in the first column followed by the corresponding host name.
    # The IP address and the host name should be separated by at least one
    # space.
    #
    # Additionally, comments (such as these) may be inserted on individual
    # lines or following the machine name denoted by a '#' symbol.
    #
    # For example:
    #
    # 102.54.94.97 rhino.acme.com # source server
    # 38.25.63.10 x.acme.com # x client host

    127.0.0.1 localhost



    remove all other entries there and save it. You can make the file read-only to avoid future problems.

    --------------------
    Tell Mama don't cry. Even when they kill me, They can never take the game from a young G. I'm str8 ballin'

  11. Newsletter Signup

+ Reply to Thread

Similar Threads

  1. Replies: 1
    Last Post: August 27th, 2004, 06:12 AM
  2. My Dog is Possessed
    By Kellie aka Ms. B in forum Midnight Cafe'
    Replies: 18
    Last Post: November 4th, 2003, 05:29 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •