Search200 - please help me, very appreciated!!

I know that this thread has been put up before but I really need some help on getting rid of the Search200 trojan. It's been on my computer for practically a year and I never knew what it was. My computer is so slow and has problems even running two things at once, plus the annoying toolbar, reset homepage, and icons on my desktop. I've just downloaded hijackthis and if requested I'll put up the log of the latest scan as an attachment. I would really appreciate any help you could give me! Thanks!

 

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

 

Thanks for those steps. I did them all, except for the optional ones, and nothing happened. I got rid of a lot of other infected files and such but i still have the same problems. Should I attach my hijackthis log?

 

Yes please attach a HijackThis Log.

 

Here is the log. I wasn't online or on a messenger so I don't think it should be tainted.

 

Look in Add/Remove programs for Logitech Desktop Messenger and uninstall if found. It is an unecessary service.

If you are using WinXP or WinMe, make sure you have system restore disabled (per the tutorial).
For all OS types, make sure viewing of hidden files is enabled (per the tutorial).

Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

After clicking Fix, exit HJT.

Boot into safe mode and use Windows Explorer to delete:

Now run Ccleaner (installed while running the READ ME FIRST). Now if running Win XP goto c:\windows\Prefetch and delete all files in this folder.

Now reboot in normal mode and post a new HJT log. And tell us how things are working.

 

Wow thanks so much! The toolbar is gone, my homepage stays where I want and the icons are gone. Plus, it's a lot faster! I've attached my new HJT log just in case though, thanks again for all your help!

 

You still have this entry in your HJT log:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bjapdndtsubgwgy.net/k5hBrTOg0ZeAeyT4j53IERkh3Bvpxq8_AjZoq7NuGqhvcTJBp8UXj_VNq51ag2iB.html

Have HJT fix that line. Otherwise your log looks good.