MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Malware Removal
Register FAQ Members List Calendar Casino Mark Forums Read

Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient.


Reply
 
Thread Tools Display Modes
  #1  
Old 07-04-05, 21:57
RookieGirl RookieGirl is offline
Private E-2
 
Join Date: Jul 2005
Posts: 26
Thanks: 2
Thanked 1 Time in 1 Post
Exclamation My Way Search Assistant Removal

Happy 4th of July Everyone!

Somehow I got this little bugger... can't figure out how to get rid of it.
You can't remove it from the "Add/Remove Hardware" screen.

I have a HijackThis log if you want to see it.
I ran AdawareSE but for some reason I don't think it's updating correctly.

Any help would be appreciated!
Thanks
Reply With Quote
Sponsored links
  #2  
Old 07-04-05, 23:47
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 79,718
Thanks: 61
Thanked 7,420 Times in 3,971 Posts
Default Re: My Way Search Assistant Removal

You should be looking at Add/Remove Programs not Hardware.

If you still have problems, follow the steps below. HijackThis is far from the first step. What version of Ad-Aware SE do you have. Make sure you compare to the one in the links below.

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #3  
Old 07-05-05, 13:59
RookieGirl RookieGirl is offline
Private E-2
 
Join Date: Jul 2005
Posts: 26
Thanks: 2
Thanked 1 Time in 1 Post
Default Re: My Way Search Assistant Removal

The problem with this Assistant is that when viewed in Add/Remove Programs there is no change/remove option. It is listed, but there is nothing you can do to it. I don't think you can remove it from that location.

I have Ad-Aware SE and have run that. The only thing that it comes up with are tracking cookies, which I then delete.

This is a new laptop, so it came with McAfee. That has Antivirus, Antiabuse, Antihacker, Antispam, and a Firewall. All are up to date and run continually.

I also have CC-Cleaner, which I run frequently.

Attached is my HijackThis log, I hope you can help me!

Thanks so much
Attached Files
File Type: txt HJTlog75.txt (9.9 KB, 2 views)
Reply With Quote
  #4  
Old 07-05-05, 14:43
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 79,718
Thanks: 61
Thanked 7,420 Times in 3,971 Posts
Default Re: My Way Search Assistant Removal

As I said in my last message (and these are required steps)


Quote:
Please follow the steps below:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
And you did not install HijackThis properly as requested. And ALL browsers ( C:\Program Files\Internet Explorer\IEXPLORE.EXE ) must be closed before using HJT.



Also, uninstall WeatherBug. That is where you got MyWay from.

Also uninstall anything that says WildTangent

Notice the below in your log:
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)



You also have R0 & R1 lines from Dell that contain myway. Some people consider these problems and some do not. As far as I'm concerned they are no big deal but they are a poor choice for Dell to be giving for their home pages.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter

Last edited by chaslang; 07-05-05 at 14:49..
Reply With Quote
  #5  
Old 07-05-05, 20:47
RookieGirl RookieGirl is offline
Private E-2
 
Join Date: Jul 2005
Posts: 26
Thanks: 2
Thanked 1 Time in 1 Post
Default Re: My Way Search Assistant Removal

I have followed all of your steps

here is the hjt log
hopefully it is alright now
Attached Files
File Type: log hijackthis.log (9.3 KB, 1 views)
Reply With Quote
Sponsored links
  #6  
Old 07-06-05, 01:35
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 79,718
Thanks: 61
Thanked 7,420 Times in 3,971 Posts
Default Re: My Way Search Assistant Removal

Quote:
Originally Posted by RookieGirl
I have followed all of your steps

here is the hjt log
hopefully it is alright now
You are still running HijackThis directly from the ZIP file:

C:\DOCUME~1\LAUREN~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

You must extract the hijackthis.exe from the zip file. You are not doing that. What you are doing is running it from within the ZIP file. You need to extract the hijackthis.exe file and put it into a folder you create (as suggested C:\Program Files\HJT ).

However, at this point a can tell you that your HJT log is clean. You just have one item left over from run HSremove. So you can have HJT fix the below:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm


Do you still have problems? Is MyWay still in Add/Remove programs? If so, follow the steps below.

Open HijackThis, click Config, click Misc Tools
Click "Open Uninstall Manager"
Click "Save List" (generates uninstall_list.txt)
Click Save, copy and paste (or attach) the results into your next post
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #7  
Old 07-06-05, 13:42
RookieGirl RookieGirl is offline
Private E-2
 
Join Date: Jul 2005
Posts: 26
Thanks: 2
Thanked 1 Time in 1 Post
Default Re: My Way Search Assistant Removal

My Way Search Assistant is still in my Add/Remove Programs.

Here is the uninstall list.
Attached Files
File Type: txt uninstall_list.txt (2.3 KB, 16 views)
Reply With Quote
  #8  
Old 07-06-05, 23:25
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 79,718
Thanks: 61
Thanked 7,420 Times in 3,971 Posts
Default Re: My Way Search Assistant Removal

Well it is not there according to HijackThis's Uninstall program list.

Run regedit and do a searrch for it. Tell me what registry key it is in.

As an alternative you could use a RegSrchTool (below) but in either case, you really need to use the proper search string (what it file is actually called in the registry) to locate it.


Please unzip and run the RegSrchTool
Please make sure that your Anti-Virus app does not have Script Blocking enabled. If so, disable it to allow the tool to run.

Please enter the following into the Search Box: My Way

or try Search Assistant or MyWay

Please save the results of this search and attach them.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #9  
Old 07-07-05, 14:02
RookieGirl RookieGirl is offline
Private E-2
 
Join Date: Jul 2005
Posts: 26
Thanks: 2
Thanked 1 Time in 1 Post
Default Re: My Way Search Assistant Removal

I ran the RegSrchTool and searched "My Way" and "Search Assistant" attached are the results...
Attached Files
File Type: txt My Way search.txt (715 Bytes, 16 views)
File Type: txt Search Assistant.txt (3.4 KB, 15 views)
Reply With Quote
  #10  
Old 07-07-05, 23:46
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 79,718
Thanks: 61
Thanked 7,420 Times in 3,971 Posts
Default Re: My Way Search Assistant Removal

Try this!

Copy the contents of the below Quote Box to Notepad. Then click File and then Save As. Change the Save as Type to All Files. Name the file delmyay.reg and then click save. (make sure you save it somewhere you can find it. Saving it to your Desktop may make that easy.) Then double-click on the delmyay.reg file on your desktop (or locate it with Windows Explorer and double click on it if not saved to the Desktop) and when it prompts to Add in to the registry, say yes.
Quote:
REGEDIT4

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\7D449D87B79A4004BAA05BDA60389904]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7D449D87B79A4004BAA05BDA60389904\InstallProperties]
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
Sponsored links
  #11  
Old 07-08-05, 06:29
RookieGirl RookieGirl is offline
Private E-2
 
Join Date: Jul 2005
Posts: 26
Thanks: 2
Thanked 1 Time in 1 Post
Default Re: My Way Search Assistant Removal

It's gone from add/remove programs

so can i delete that new desktop delmyay.reg icon or should i just move it to another location?

also is it ok to hide some of my files again?
Reply With Quote
  #12  
Old 07-08-05, 14:52
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 79,718
Thanks: 61
Thanked 7,420 Times in 3,971 Posts
Default Re: My Way Search Assistant Removal

Quote:
Originally Posted by RookieGirl
It's gone from add/remove programs

so can i delete that new desktop delmyay.reg icon or should i just move it to another location?

also is it ok to hide some of my files again?
Yes you can delete the .reg file from your desktop.

It is not necessary to hide your files again. It will only make it easier for stuff to hide from you again. The only thing that hiding the file does is make it harder for you to delete protected (hidden) system files by mistake. The problem with this is that malware knows this is the default and uses it to their advantage to hide from you. The first thing I do on every PC I use (especially new PCs or newly formatted) is to unhide evrything. I never set it back. But this is up to you. If you feel that you or anyone else using the PC, would be safer (from yourself) by hiding files then go ahead and hide them. Just remember that any malware that sneaks in will now be hiding too.

To help keep you clean, make sure you complete the steps in the below:

How to Protect yourself from malware!
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #13  
Old 07-08-05, 16:11
RookieGirl RookieGirl is offline
Private E-2
 
Join Date: Jul 2005
Posts: 26
Thanks: 2
Thanked 1 Time in 1 Post
Default Re: My Way Search Assistant Removal

thanks for all of your help

Reply With Quote
  #14  
Old 07-09-05, 01:18
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 79,718
Thanks: 61
Thanked 7,420 Times in 3,971 Posts
Default Re: My Way Search Assistant Removal

You're welcome. Surf safely.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 15:55.


MajorGeeks.Com Home Page
| Admin Tools | All In One | Anti-Spyware | Anti-Virus | Appearance | Backup | Benchmarking | BIOS | Browsers | Covert Ops |
Data Recovery | Diagnostics | Drive Cleaners | Drive Utilities | Drivers | Driver Tools Ergonomics | Firewalls | Games | Game Tweaks | Graphics | Input Devices | Internet Tools | Macintosh | Mail Utilities | Memory | Messaging | Monitoring | Microsoft | Multimedia | Networking | Office Tools | Process Management | Processor | Registry | Security | System Info | Toys | Video | Miscellaneous
|
Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger