Forum Moderators: phranque
spybot is another good one.
Very first go in regedit and create a reg backup
You need to use a combo of
hijackthis, spyware search and destroy and
AdAware
Start by AdAware and first be sure to look for updates
Then we are going to boost it
On its top find the gear config icon
Under scanning make sure that “scan with archives” is checked
As well as “all installed dirves”
Next:
Under “memory and registry”
Select all options
Under” advanced button”
Click “log file details” and check all options
Next go to the tweak button
And then to “scanning engine” be sure that both
“Include additional AdAware settings in logfile”
and “unload recognized processes during scanning” are checked
next for the cleaning engine setting be sure that both
“automatically try to unregister objects prior to deletion”
and “let windows remove files in use after reboot”
are selected
then hit proceed
From there reboot in SAFE MODE and proceed to the following
be sure that under select scan mode:
“Use custom scanning options” is selected
last move:
“activate in depth scan” and verify that all other programs are closed
hit next (or scan now)and go...
then reboot
if you know what you are doing let the machine del the unwanted files and altered DLL
next do a HJT and if you are not sure about the reading post the log
before dealing with your reg
good luck
Henry
Hi henry0 thanks for your detailed explanation, I am not a techie guy however I will try to following what you are saying. I hope you are mentioning the use of freeware and not the priced version. And will uninstalling and reinstalling IE work? Thanks for you all.
And will uninstalling and reinstalling IE work?
These days, no way. IE is so deeply integrated into the OS that uninstalling will most likely result in utter chaos. I would suspect you have some sort of virus at work now.
I pushed Ctrl+Alt+Delete to view the task manager. Check the processes to see if there are any odd-looking files running. If you don't know what something is, Google it. If it is spyware/virus/adware you will usually find the file name on a page in Google that tells you what has infected your computer. I run down the processes list and Google them until I find out what the problem is. Most of the time you will find a page in Google telling you how to remove it manually. If you have trouble with too many results try searching for "spyware insert_filename.exe" or "virus insert_filename.exe". Follow the manual removal instructions. Most involve editing the registry, so you should back it up first.
Some things to try:
Symantec's free antivirus scan. (http://security.symantec.com/default.asp?productid=symhome&langid=ie&venid=sym)
Firefox browser. (mozilla.org). They have awesome plugins that allow you to block ads (using regular expressions) and flash (so that you only play what you wish to see).
If you are able to find out which file is infected boot into DOS and rename the file to .BAK or ._EXE (or ._COM for com files) and then reboot. Barring any oddball registry calls you shouldn't see any of this behaviour and will be able to safely delete the offending file. If you do get oddball actions try renaming the file until you can find a removal tool for the virus.
And as an aside to all; should you ever have to use regedit and a virus has rerouted the path of all exe's to itself before running the actual application (and you've deleted the virus rerouter) you can rename regedit.exe to regedit.com and it will work the same. The person at MS that came up with that was no doubt fired for being smart. ;[smilestopper])
Do a google search for the word "sandboxer" The first link (PestPatrol) will give you an overview on what it is and how to remove.
A monumental ball ache, I wont happen again.
Then get security overload:
[webmasterworld.com...]
Windows reinstalls all the primary gubbins for you, just go to Control panel, add/remove programs and try uninstalling Internet Explorer.
Like I say, it wont off a full uninstall option but a repair option - you may well need your Windows disk though.
Likewise, if running XP, have you tried re-setting to a save point? Developed from video games, it allows you to go back to how your machine was last time you did a "system restore save point". You don't lose any data from documents.
People slag off Windows and IE but I've been running Windows XP pro for a year or so now and never had a glitch apart from spyware, which was removed by Spybot.
If the machine is behaving but Spybot keeps complaining about finding a particular file, like the chap said earlier, Google that file name. I had that problem and it turned out it was a glitch with spybot, it had solved the problem but didn't report solving it, so kept thinking it had found it again.
Finally, wind up the security settings, people moan "IE is pants" but then surf the net with the security settings on low or medium! Crank em up - everything on prompt or disable.
Pibs
regards,
Mark
