http://ads1.searchmiracle plz help!

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Mo0nRaY, Mar 22, 2005.

  1. Mo0nRaY

    Mo0nRaY Private E-2

    Hi!

    I got alot of popups from http://ads1.searchmiracle.com and i dont manage 2 get rid of them! plz help me! they keep popping up, and when they does, they make me leave games e.c.t. a real problem when im playing in ladders:/

    Ive tried:

    SpyBot S&D
    Ad-Aware SE
    Spybouncer
    Startup Inspector for Windows XP
    Highjack this (deleted all the files i didnt recognise)
    regedit (tried to remove the keys)
    even tried to put my system back to b4 i got the problems, but nothing helps.

    Any help would do ;)
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs. TIP: Create a folder on your C:\ drive for the tools/utilities you will need to use. For example: Navigate to your Program Files directory, right click on a blank spot in the window > choose New > Folder. Name this folder Spyware Tools. Now you can save the needed tools to this folder and if you prefer, create sub-folders named for each individual utility.

    After doing ALL of the above if you still have a problem:


    • Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT
    • Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file.
    • Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.
    • Run HijackThis and save your log file.
    • Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post).
     
  3. Mo0nRaY

    Mo0nRaY Private E-2

    Still gettin the shit, :( damn it , really bothering :-/ . well here is my attached log file
     

    Attached Files:

  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    First:
    Please update to Hijack This 1.99.1 and attach a new log using the new version.

    Second:
    Please close ALL browsers while using HJT.

    C:\Programfiler\Mozilla Firefox\firefox.exe


    Will be awaiting a new log from the new version. You have a few baddies but we need the updated log before we can procede.
     
  5. Mo0nRaY

    Mo0nRaY Private E-2

    here is the log from the new version :p hope this helps .. came home from snowboarding 2day, and it was like 1000000000 popups, used ages 2 close em all :-/
     

    Attached Files:

  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Scan with HijackThis and Check the Boxes for the following:

    Make sure All Browser Windows are Closed when you Click FIX.

    O4 - HKLM\..\Run: [etbrun] C:\windows\system32\elitexlp32.exe


    Again, make sure All Browser Windows are Closed when you Click FIX.


    NOW:
    Please boot into Safe Mode with the Viewing of Hidden Files & Folders Enabled and navigate to and DELETE the following if they should remain:

    C:\windows\system32\elitexlp32.exe


    NEXT:
    Run CCleaner and Spybot S&D and have Spybot fix what it finds.
    Note: Dont forget to update Spybot S&D by selecting "Search For Updates"

    Then, as an added precaution, Go to Start > Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked:
    Temporary Files
    Temporary Internet Files
    Recycle Bin


    And Click OK.


    Reboot to Normal Windows


    FINAL STEP

    Reset Web Settings & Default Security Settings:


    To Reset Web Settings:
    Right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

    If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK


    To Default Security Settings:
    Right click on your desktop Internet Explorer icon and select Properties. Then click the Security Tab and click Default Level for Internet, Local Intranet, Trusted Sites, and Restricted Sites.



    Scan with HijackThis and attach the new log. Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now.

    Good Luck!:)
     
  7. Mo0nRaY

    Mo0nRaY Private E-2

    ty m8 :)
     
  8. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your Welcome! I will be awaiting your results and a new log.:)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds