1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Hello Geeks

Discussion in 'Malware Removal' started by newmant, Mar 15, 2005.

  1. newmant

    newmant Private E-2

    I hope I am doing this right. I needdddddddd Help. I have a ie hijacker, on may start page comes up-http://www.hotoffers.info/a0002/. I have went into the registry in hkey local machine and hkey users and I will delete it and it just comes right back. Then I have a microsoft security warning about port 8080 and I forget the other one. I have my microsoft internet explorer page just opens on its own and my computer tries to connect on its own. I am running Norton System Works, AVG Free Antivirus, Ad-Aware SE Personal Addition and Microsoft Antispy Ware. I dont know what else to do except maybe throw my computer away. Can you help.
    Thanks Tammy
  2. newmant

    newmant Private E-2

    If I am not doing this right please let me know. Tammy
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I cannot vouch for the authenticity of this but did you see the thread a couple links down:


    This user said it fixed his problem. If you feel comfortable with trying this at your own risk, do so. Otherwise see my next message.
    Last edited: Mar 15, 2005
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If that does not help you, follow the steps below.

    To help us to best help you, please follow the steps below closely and in the order given and do not skip anything. If you have any difficulty, please post back letting us know what steps you have completed, what you found while doing the scans if anything along with details about any problems you may have encountered in completing the steps. The more details you can provide the better. Don't be afraid to ask for additional help if you don't understand something!

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus RemovalMake sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

    After doing ALL of the above you still have a problem:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENTto your next message. (Do NOT copy/paste the log into your post).
  5. newmant

    newmant Private E-2


    Helppppppppppppp............................ I have even tried spy killer 2005 and this ie highjacker just keep coming back and my computer is trying to connect all by itself, almost like its possessed.
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: newmant

    Why are you posting a new thread for this? We already gave a procedure to follow. You need to follow it if you want help.

    I'm merging you back to your other thread!

    Did you purchase SpyKiller?
  7. newmant

    newmant Private E-2

    Re: newmant

    Sorry I am finding out how to work sending messages, I hope this is the right way to reply. I found it know and will follow all steps. I did purchase the spykiller. But no luck yet. But I am going to follow the steps and see if it will help. Thank You So Much I was about to pull my hair out or maybe sling my computer.
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: newmant

    Okay just follow the cleanup procedures I gave to you and if you still have a problem when finished with them, post the HijackThis log as requested (make sure you follow the steps correctly to avoid an additional delay).

    The reason I asked about SpyKiller is that it used to be on a list of rogue/suspect spyware removal tools. It recently was taken off the list, but I don't believe anyone thinks to highly of it. What we have here for free will work just as well.
  9. newmant

    newmant Private E-2

    Re: chaslang

    Okay I will remove the spy killer, I am not able to down load fast we only have dial up here I live so all my downloads are slow, I have a couple done. And am on the spybot now. I will probly be tommorrow with my reply. Thank You So Much newmant
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: chaslang

    Okay! I know it can be time consuming but it will be worth it when you are done. You will have a lot of useful tools and will learn something. You do not need to uninstall SpyKiller if you like it. That is your decision. I just don't think it is worth the money. Perhaps you can get a refund!

    Note you will not be able to run the online scans in safe mode since you are on dial-up. So try running them in normal boot mode. This can take quite awhile. He it becomes a problem. Just skip the two online scanners and continue.
  11. newmant

    newmant Private E-2

    Okay I will follow step by step and if I have any questions when I get to the remove microsoft java part can I post reply's with my questions to you? I will just tell everybody that normally calls to call my cell all day Ha Ha Cause it will probly take this dial up that long.. Thanks again
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Don't worry about doing the removal of MS Java and install of Sun Java right now. Just do the 4 steps of the Getting Prepare section and the first 4 steps of the clean up. The next step would be to post the HijackThis log as I requested (that is if you still have a problem).
  13. newmant

    newmant Private E-2

    okay will do.
  14. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I know this will take a while to do an while running these scans you will be offline (in safe mode). So just complete everything as best as you can and note what you find and clean and do not clean. Tell us the results when you come back.
  15. newmant

    newmant Private E-2

    Re: Hello Chaslang

    I am clean of all...... Thanks to you. I dont need the hijack this file. I only had trouble running the online virus and security scans it came up that my active x was not ready and it just kept saying that? But, the downloads and the other items took care of my problems. Below I will list what they showed.
    Double Click 1 entry; Avenue A,Inc 1 entry; Dso Exploit 5 entries; MediaPlex 1 entry

    Number of cleaned files 54757

    Kill2me: look to me I think was the name it removed

    CCcleaner: 27.6 mb removed

    Ad Aware vx2 cleaner: system clean

    Ad Aware SE: 2 registry keys cleaned and corrected.

    HS Remove: 8 items removed

    and the other thread with hotoffers worked to fix my reappearing ie highjacker.

    I had one question though I am running Avg free addition and Norton System Works that I bought a month and 1/2 ago. Should I have both or would you go with just one of them. I think they maybe a conflict between the 2???

    Thank You Again
  16. TheOldThug

    TheOldThug First Sergeant


    Chas will probably want you to submit a HJT log anyway. He will want to make sure you are clean.

    Please try to turn OFF any applications that are not needed It makes it much easier to look at the HJT log.
    Make sure you have HijackThis 1.99.1 and follow the guidelines on where to install it and how to post a log as an attachment. This is all covered in the sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

    Now post a HijackThis log as an attachment to your message (Do not post the log inline). All running programs should be closed, INCLUDING YOUR WEB BROWSER, e-mail. Close before running Hijack This!

    To repeat: Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder for example C:\Program Files\HJT

    Good Luck :)
  17. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Yes! I would still like to see the HJT log! And only one AV should be installed. Take your pick!
  18. newmant

    newmant Private E-2

    I dont see where to go advanced, I want to make sure I send the log file the right way... can you help me find the go advanced
  19. newmant

    newmant Private E-2

    okay found it, I am sending the log file as a word file, is that ok?? I dont want mess anything up.

    Attached Files:

  20. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You should just be attaching the .log file that HJT creates. You should not be creating a Word Document. Log files are easier for us to deal with and smaller in size.

Share This Page

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds