immaculata Posted April 13, 2004 Author Share Posted April 13, 2004 [quote name='MagiDragon' date='Apr 13 2004, 11:50 AM'] careful with those adds. they're prolly decoys to trick you into giving the permission to install something on your computer. (aka trojans) *never* give permission to anything you didn't specifically ask for. [/quote] Yes, I've learned that lesson quite well.. Link to comment Share on other sites More sharing options...
MagiDragon Posted April 13, 2004 Share Posted April 13, 2004 hijackthis is a great program to kill stuff that accesses your browser, but you've gotta be really careful with it. it tells you *everything* that will try to access the browser. you need some of that stuff! if you know what you need on your computer and what you don't need, you'll prolly do fine with hijackthis though. if you give a list of what you comes up in the hijackthis window, you can prolly just give us the list and we can sort out most of what needs to be deleted. we'll need full pathnames though Link to comment Share on other sites More sharing options...
MagiDragon Posted April 13, 2004 Share Posted April 13, 2004 isn't it interesting how much traffic a call for 'computer geek help' gets? i'm a CS major, so naturally i responded, what caused everyone else to respond? Link to comment Share on other sites More sharing options...
immaculata Posted April 13, 2004 Author Share Posted April 13, 2004 [quote name='MagiDragon' date='Apr 13 2004, 11:57 AM'] hijackthis is a great program to kill stuff that accesses your browser, but you've gotta be really careful with it. it tells you *everything* that will try to access the browser. you need some of that stuff! if you know what you need on your computer and what you don't need, you'll prolly do fine with hijackthis though. if you give a list of what you comes up in the hijackthis window, you can prolly just give us the list and we can sort out most of what needs to be deleted. we'll need full pathnames though [/quote] See if you can make any sense of this... Feel free to email me at immaculata86@yahoo.com Link to comment Share on other sites More sharing options...
MagiDragon Posted April 13, 2004 Share Posted April 13, 2004 (edited) [quote name='immaculata' date='Apr 13 2004, 01:12 PM'] See if you can make any sense of this... [/quote] do you know what amazingautossearch.com is? it looks a bit suspicious to me. unfortunately, it's not easy to tell what's in a list when you aren't at the actual computer. try to go through the list. mark everything that you *know* you want These two seem suspicious at best, but may not be a problem: O2 - BHO: (no name) - {7371F073-AC0F-4b80-BB2F-96A488CEFB32} - (no file) O2 - BHO: (no name) - {63CF97E8-4133-438a-A831-CC9C6D47D673} - (no file) These seem very suspicious: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [url="http://amazingautossearch.com/searchbar.html"]http://amazingautossearch.com/searchbar.html[/url] R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [url="http://amazingautossearch.com/passthrough/index.html?http://www.yahoo.com/"]http://amazingautossearch.com/passthrough/.../www.yahoo.com/[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = [url="http://amazingautossearch.com/searchbar.html"]http://amazingautossearch.com/searchbar.html[/url] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = [url="http://amazingautossearch.com/searchbar.html"]http://amazingautossearch.com/searchbar.html[/url] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [url="http://amazingautossearch.com/searchbar.html"]http://amazingautossearch.com/searchbar.html[/url] R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = [url="http://amazingautossearch.com/searchbar.html"]http://amazingautossearch.com/searchbar.html[/url] The fact that there's so much from that amazingautosearch thing, i'm guessing that's your problem. unless you specifically installed that program I would use hijackthis to kill off all of this stuff. that could be all that you need to do. (and I doubt you meant to install it. It has links to: Online Gambling Adult Entertainment Viagra Diet Pills E-mail Weight Loss Inkjet Cartridge Home Business Money Business Opportunity Domain Names Credit Cards Advertising Home Improvement Dedicated Servers Long Distance Skin Care Web hosting Home Loan Gambling Home Shopping cart Consulting Computers Home Finance Business Cards Adult MP3/Music Music Travel Auction House Monitor DVD Fitness) Edited April 13, 2004 by MagiDragon Link to comment Share on other sites More sharing options...
immaculata Posted April 13, 2004 Author Share Posted April 13, 2004 No, I didn't intentionally install that the autosearch one.. I'll delete it and see if that helps. I'm currently in the process of backing up everything just in case I have to do a total clean-up job. Link to comment Share on other sites More sharing options...
MagiDragon Posted April 13, 2004 Share Posted April 13, 2004 [quote name='immaculata' date='Apr 13 2004, 02:25 PM'] No, I didn't intentionally install that the autosearch one.. I'll delete it and see if that helps. I'm currently in the process of backing up everything just in case I have to do a total clean-up job. [/quote] good plan. Link to comment Share on other sites More sharing options...
littleflower+JMJ Posted April 13, 2004 Share Posted April 13, 2004 [quote name='MagiDragon' date='Apr 13 2004, 11:59 AM'] isn't it interesting how much traffic a call for 'computer geek help' gets? i'm a CS major, so naturally i responded, what caused everyone else to respond? [/quote] im in networking and have a router to worry about :ph34r: Link to comment Share on other sites More sharing options...
Theologian in Training Posted April 13, 2004 Share Posted April 13, 2004 I find this site helpful at times, especially when I want to know what is running and whether or not it should be running on my computer. [url="http://www.liutilities.com/products/wintaskspro/processlibrary/allprocesses/"]Liutilities[/url] God Bless Alelluia!!! Link to comment Share on other sites More sharing options...
MagiDragon Posted April 13, 2004 Share Posted April 13, 2004 [quote name='Theologian in Training' date='Apr 13 2004, 03:04 PM'] [url="http://www.liutilities.com/products/wintaskspro/processlibrary/allprocesses/"]Liutilities[/url] [/quote] nice! i've never seen that one before. handy lil site. Link to comment Share on other sites More sharing options...
immaculata Posted April 13, 2004 Author Share Posted April 13, 2004 Alright.. deleted all the amazingautosearch- but whatever it is is still there. There's a search bar that won't go away on IE. It's called "Peak Lite Media," and whenever I try to change it back to my normal Yahoo Companion bar, it switches it back right away. I'm still getting pop-under ads too. Daddy'll be home soon- he can wipe off the whole hard drive if we have to. Link to comment Share on other sites More sharing options...
Iacobus Posted April 13, 2004 Share Posted April 13, 2004 Search and find all files installed and modified on the day you got it. Delete them, and delete anything on the regs from that day and beyond. That should kill it without a clean restore. Link to comment Share on other sites More sharing options...
MagiDragon Posted April 13, 2004 Share Posted April 13, 2004 [quote name='immaculata' date='Apr 13 2004, 03:22 PM'] Daddy'll be home soon- he can wipe off the whole hard drive if we have to. [/quote] i seriously doubt that will be necessary you've just hit on another set of files i was curious about: O2 - BHO: (no name) - {D5D6A3CE-2903-E916-9260-0887911222E6} - C:\PROGRAM FILES\HEARTREMOTE\DENT FREE.DLL Peak Lite Media - {0F3A3EB1-6821-DA8E-AF34-07193133BF13} - C:\PROGRAM FILES\HEARTREMOTE\DENT FREE.DLL who's David Crone? if it's not someone you know, you may want to delete the stuff that has that name in it: un: [HXIUL.EXE] C:\Program Files\Alset\HelpExpress\David Crone\HXIUL.EXE O4 - HKCU\..\Run: [HELPEXP.EXE] C:\Program Files\Alset\HelpExpress\David Crone\Client\HelpExp.exe you may get better results if you delete everything that has yahoo in the name. you can then reinstall your companion bar later on.. I would do this if i were there, but i can't really recommend that you do it. it could have a few side effects that you might not expect. (if i were there, i could prolly fix them anything right away, but it's a lot more difficult doing this remotely.) another thing you can try: go to run and type in 'msconfig' and hit enter. go to the startup tab. uncheck everything *except* your virus protection (vptray if using norton) and ctfmon. apply and restart your computer. the next time your computer starts up, you'll get a message about msconfig having been run and modified. click the little checkmark that says 'don't tell me again' this will stop windows from automatically loading all of those programs that you just unchecked. it won't keep them from running when you want to run them. (coincidentally, it's the first thing that a computer nerd will tend to do to speed up your computer.) Link to comment Share on other sites More sharing options...
immaculata Posted April 13, 2004 Author Share Posted April 13, 2004 David Crone is my dad Link to comment Share on other sites More sharing options...
immaculata Posted April 13, 2004 Author Share Posted April 13, 2004 MAGI DRAGON!! You are my hero!!! Thank you SO much- it finally worked!! I'll be offering up a rosary for you tonight- it's the least I can do Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now