Only The Best : Annoying Popups

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Jackson1138, Aug 23, 2004.

  1. Jackson1138

    Jackson1138 Private E-2

    For the past week or so, my computer has been taken over by a new trojan/spyware/BHO or whatever it is. The first indication of a problem is that my homepage keeps getting redirected. As of right now, my address bar in IE says "about:blank" when I click "Home."

    Also, I keep getting annoying popups that say "Only the Best" advertising stupid popup blockers and other such nonsense. As I've been reading on the forums, this is something that's been installed on my computer and really has nothing to do with installing a popup blocker, right? And I've seen a lot of posts that say that only "HiJack This" has the current definitions and can remove it at this time. So, I downloaded "HiJack This," and ran a scan. I have my log, but I don't know how to read it properly.

    I'd love to have some help in removing this from my computer. I can live with it, but as I've said, it's just so incredibly annoying.

    Jackson
     
  2. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Show me the post that says Hijack This has definitions and can remove them. There are no definitions for Hijack This and its not a spyware removal tool, so dont know where you read that, but you should be able to find about 1,000 posts from us banging our heads against the wal explaining this over and over and over again.

    BUT, all this does tell me you did not read this:

    http://forums.majorgeeks.com/showthread.php?t=35407

    About:Buster listed in that thread should help you. Let us know how you make out.
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please follow all the steps in this Sticky thread < READ ME FIRST: Basic Spyware, Trojan And Virus Removal > If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

    NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.

    Pay particular attention to the lines that talk about the HSA, about:blank, HSremove and about:Buster. And also the line mentioning my Generic Solution to resolving "Only the Best" aka HSA hijack problems.

    HijackThis has no definitions and does not detect, remove or repair the Only the Best hijacker. It is used as a tool to aid an experienced user in fixing this problem.

    NOTE: You should read the tutorial in this Sticky thread < Hijack This Tutorial And How To Post Your Log File > Do not post a HijackThis log until we ask you to and when we do it must be text document attachment to your message.

    Update! Due to Hijack This logs destroying search engine and web site searches, we now ask you do not post your Hijack This log file unless requested by us. It is for advanced users, so if you do not understand how to use it, you do not need it....yet. Instead, please tell us in your post what symptoms you are experiencing so we can try and resolve it that way. When, and if, we ask you to post your log file, please attach it as a file. To do this save the log file and select manage attachments in a new thread to upload it. All running programs should be closed, including your web browser, e-mail, items in the tray, anything you can close... Close before running Hijack This!


    Do NOT run Hijack This from the Desktop, a temp folder or choose run from the download. Place it in its own folder, for example C:\Program Files\HJT


    Edit: Hi MA, did not see you in here. I was working on a reply and got side tracked for a while on something at home (the home construction work) and just came back to finish my reply. You beat me in.
     
  4. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Not a problem, hopefully if we repeat it enough, people will notice when reading threads before posting. It helps 90% of the people who read it.
     
  5. Jackson1138

    Jackson1138 Private E-2

    First, Major Attitude, the "definitions" thing I said was a misunderstanding. My mistake.

    Secondly, I followed all the steps you and chaslang posted for me. Or at least I thought I did. It took me about 3 hours to perform all the scans and complete each step, however, when I rebooted my computer this morning, my homepage was hijacked, and 4 minutes later I was visited by my old friend "Only The Best."

    Maybe I missed a step without knowing it, or maybe I just read the HiJack This log incorrectly and didn't fix all the files. I'm gonna try once again to follow the steps you posted. Hopefully I can nip this thing in the bud.

    J
     
  6. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Thanks, please let us know when you return what specific symptoms still exist. We might want to see your log file to determine whats left or to assist you in some final cleaning. If we ask for it, please save the log file as a text file and attach it at that time.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds