How to remove Search200 page ?

Re: My next log---still the same search200.com page

You did not run ALL of the steps in the READ ME FIRST. Also please read the announcement and sticky threads. HJT logs should only be posted when requested and then they must be attachments to your message.

You have a LOP infection and some other problems due to install MessengerPlus3 . You need to goto Add/Remove programs and uninstall this.

Please run the steps below.

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


After doing ALL of the above you still have a problem, boot into normal mode and make sure you follow these directions:


- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

 

Look in Add/Remove programs for iMesh and uninstall if found.

If you are using WinXP or WinMe, make sure you have system restore disabled (per the tutorial).
For all OS types, make sure viewing of hidden files is enabled (per the tutorial).

Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
O2 - BHO: DownloadRedirect Class - {00000000-6CB0-410C-8C3D-8FA8D2011D0A} - C:\Program Files\iMesh\iMesh5\
O2 - BHO: (no name) - {1A264909-41A3-8ADF-070C-19BCB113952C} - C:\DOCUME~1\ADMINI~1\APPLIC~1\STUPID~1\Drive bolt.exe (file missing)
O2 - BHO: (no name) - {51B0182D-D561-2736-F65F-9EFA38C21DF6} - C:\PROGRA~1\STUPID~1\Drive bolt.exe (file missing)
O2 - BHO: Loud Boob Ref - {5727843F-6D2C-B59A-2D5D-33EACDFF068B} - C:\PROGRA~1\STUPID~1\Real noun.dll (file missing)
O2 - BHO: (no name) - {72D80918-5035-94D2-CC92-EBE14B60CE9F} - C:\DOCUME~1\ADMINI~1\APPLIC~1\STUPID~1\Mpeg Sign.exe
O2 - BHO: AutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - (no file)
O4 - HKLM\..\Run: [poll seek stop soft] C:\Documents and Settings\All Users.WINDOWS\Application Data\sixth glue poll seek\Aim chic.exe
O4 - HKCU\..\Run: [warn logo] C:\DOCUME~1\ADMINI~1\APPLIC~1\AIMKNO~1\doestray.exe
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/197d9b5a762ae4241822/netzip/RdxIE601.cab

After clicking Fix, exit HJT.
Boot into safe mode and use Windows Explorer to delete:
C:\Program Files\iMesh <--- the whole folder
C:\Program Files\STUPID~1 <--- the whole folder
C:\Documents and Settings\Administrator\Application Data\STUPID~1 <--- the whole folder
C:\Documents and Settings\Administrator\Application Data\AIMKNO~1 <--- the whole folder
C:\Documents and Settings\All Users.WINDOWS\Application Data\sixth glue poll seek <--- the whole folder
C:\Documents and Settings\All Users.WINDOWS\Application Data\does glue close default <--- the whole folder

Now run Ccleaner (installed while running the READ ME FIRST). Now if running Win XP goto c:\windows\Prefetch and delete all files in this folder.

Now reboot in normal mode and post a new HJT log. And tell us how things are working.

 

Re: After removing all virus -I find My pc SloW??

I'm not sure what you are talking about. I'm still waiting for the results from running the steps in message # 5.

 

You did not attach your log. Also how did those steps go? Any problems? Are you still having problmes?

 

Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.qovkptaymaufglrd.net/fgXGZydt3OrV7K2FzNGEd/r_E2m/h2r29_IC/JxawJP6EctogO/OJGUFIk2LIjIA.cgi

Now exit HJT.

Now we need to Reset Web Settings. Please use the www.majorgeeks.comsetting at least temporarily while we are fixing your PC.
1) If you have an Internet Explorer icon on your Desktop, goto step 2. If not, skip to step 3.
2) Now right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK. Then skip step 3.
3) If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

Now reboot in normal mode!

Now proceed to this thread and complete ALL steps: How to Protect yourself from malware!
You do not need the firewall or antivirus since you already have one. But you must do the others, especially step 1.

Then post a new HJT log. And tell us how things are working.

 

The log is okay! But you did not do:

 

Re: How to remove Unknown somethin?

Sorry but this is not a malware issue. Try the Software Forum.

But note, you never did what I asked you to do last September, and that is complete the rest of the below:

How to Protect yourself from malware!

You OS and IE versions are way out of date and you are a sitting duck for malware issues.