a problem getting rid of spy ware- please help

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by coboy, Aug 25, 2004.

  1. coboy

    coboy Private E-2

    hi there, i am only new to this site so i hope that you can help me, i have been following the step by step guide on how to delete the auto:blank pop-up from the computer. this is what happens, and it ONLY happens when i check my mail. what happens is that i log onto yahoo to check the mail and then when i enter my details in and i am forwarded to the mailbox the auto:blank kicks in, now it only happens when i go into the mail box, but no other page.

    i have downloaded spyware doctor, ad-aware, hijackthis, spysweeper, spybot and auobuster, i have turned off the system back up, and before this i updated everything, i then scanned the computer with all of them in saf mode, adn deleted all the files that were threats.

    i then followed the instrcutions on the http://forums.majorgeeks.com/showthread.php?t=38772 page but i got stopped by some problems, these were : Windows Registry Editor , i didnt know what key i was sposed to back up.
    however the major problem was the opening of the notepad, on the tutorial it reads ads the following: ) Now we are going to use notepad to erase the contents of the DLL file shown in the R0 & R1 lines of your HijaakThis log. To do this click Start, Run, and enter the following command "notepad c:\path\xxxxx.dll" (without the quotes) and click OK.
    an that we must change the extension name as there is no generic extension, that is fine, so what i did was take the address from the hijacklist and then tried to run it, but it sed that there was no destination of that kind. OK, so i just searched for it manually, the xxxxx.dll that is, and i found it, and then i opened it with notepad, but it was empty, even the properties says that there was 0-Bytes, so at this stage i just gave up, because it ses that the steps MUST be followed.
    Can someone please tell me what i am sposed to do to get rid of this problem,
    thank you for any help that i may receive,
    Coboy
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Coboy,

    First just use a little more care when typing. It's about:blank not auto:blank (unless you have a new piece of malware). And it's About:Buster not auobuster. And System Restore not system back up.

    I don't understand this statement,

    "i then followed the instrcutions on the http://forums.majorgeeks.com/showthread.php?t=38772 page but i got stopped by some problems, these were : Windows Registry Editor , i didnt know what key i was sposed to back up. "

    The procedure did not say anything about backing up a registry key. It does say to delete some particular keys if found. But it is never a bad idea to backup your registry before making changes to it.


    I also don't understand your problem with notepad. Unless you have misunderstood the "notepad c:\path\xxxxx.dll" statement. You have to substitute (and I gave an example) your fullpath and file name. You do not change the extension. The extension is .dll and is always (as far as I have seen) .dll. Unless the file was hidden for some reason I cannot think of any reason why notepad could not open it. And I don't understand how your file could be blank to begin with. Are you sure you are looking at the correct file.

    Post a HijackThis log as an attachment according to the guidelines written here: http://forums.majorgeeks.com/showthread.php?t=38752

    I want to see what your log is indicating. But you should have run all of the steps indicated in this thread before beginning any of this: http://forums.majorgeeks.com/showthread.php?t=35407
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds