yupsearch

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by jtsquare, Sep 10, 2005.

  1. jtsquare

    jtsquare Private E-2

    I have found a new toolbar on my IE. Clicking on the toolbar sends me to yupsearch.com which I now understand to be malware. I have tried to remove this using all the Major Geeks suggestions (all the suggested spyware removal installs and updates-except that Spybot could not be updated due to checksum? problems) and it still appears. Here is the Hijackthis readout:

    Edit by chaslang: Unrequested inline log attached. Please do not post logs inline and only post them when requested.

    I have already tried to delet the pokapoka several times and it keeps returning. Any help and ideas will be appreciated. Thanks in advance.
     

    Attached Files:

    Last edited by a moderator: Sep 11, 2005
    jtsquare, Sep 10, 2005
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please only post HJT logs when requested and then make sure you attach them to your message. You must install HJT properly per the below instructions at the end of this message. You are running it incorrectly. But first let's do a couple other steps.

    Download and run the following:

    EliteToolbar Remover


    Also download HOSTER and then follow the below steps.
    • Unzip Hoster to a convenient folder such as C:\Hoster
    • Run Hoster.exe, click Restore Original Hosts and then click OK.
    • Click the X to exit the program

    Now let's get HJT installed properly and get a new log as an attachment:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
    chaslang, Sep 11, 2005
    #2
  3. jtsquare

    jtsquare Private E-2

    Thanks for your offer of help but I think I have the problem under control now.
     
    jtsquare, Sep 19, 2005
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay! So you are saying the below are no longer in your log:


    C:\WINDOWS\etb\pokapoka66.exe

    O4 - HKLM\..\Run: [System service65] C:\WINDOWS\etb\pokapoka65.exe
    O4 - HKLM\..\Run: [System service66] C:\WINDOWS\etb\pokapoka66.exe
     
    chaslang, Sep 19, 2005
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds