C:\searchpage.html#1504 hijack. I CANT GET IT OFF!

Discussion in 'Malware Help (A Specialist Will Reply)' started by The_G_Man75, Jul 17, 2004.

  1. The_G_Man75

    The_G_Man75 Private E-2

    yes i did
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Make sure you have enabled viewing of hidden system files and folders: http://forums.majorgeeks.com/showthread.php?t=37650
    I want you to try the steps below and let me know the results of these steps:
    1. In Control Panel, open Add or Remove Programs. In the list of currently installed programs, click Interstitial Ad Delivery by n-CASE or n-CASE.
    2. Click Change/Remove, and then click Yes to remove this n-CASE component.
    3. In the list of currently installed programs, click n-CASE or PAD Lookups by n-CASE.
    4. Click Change/Remove to remove this n-CASE component.
    5. Right-click the Windows taskbar, and then click Task Manager.
    6. On the Processes tab, click any instances of the Msbb.exe process that are still running, and then click End Process.
    7. Search your Windows drive for the Msbb.exe file, and delete it if you find it.
    After doing that post (as an attachment) a current HijackThis log so I can see where you are currently at.
     
  3. The_G_Man75

    The_G_Man75 Private E-2

    I do not have n-case, i have looked but it is not there
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay! But your last HJT log showed msbb.exe in two places:

    C:\winnt\180solutions\msbb.exe
    O4 - HKLM\..\Run: [msbb] c:\winnt\180solutions\msbb.exe


    Please run HijackThis (make sure you have the new version): http://www.majorgeeks.com/download3155.html

    and have it Fix:
    O4 - HKLM\..\Run: [msbb] c:\winnt\180solutions\msbb.exe

    Then boot in safe mode and delete:
    C:\winnt\180solutions <---- the whole directory

    Let me know if this works. After that post a new HijackThis log, as an attachment. You need to save it to a .txt file so you can attach it. A .log file cannot be attached.
     
  5. The_G_Man75

    The_G_Man75 Private E-2

    Hi again, sorry i just ignored you but I went away to Italy and forgot about this, because i got a new computer. My laptop has improved but it still has some problems, I don't have the problem with the searchpage anymore because I have just uninstalled internet and vowed never to do business with bt again, I have three problems:
    smss.exe
    csrss.exe
    lsass.exe
    all are in task manager but when I try to end the process it says "This is a critical system process" or "the operation could not be completed. Access is denied." i have run hijack this, and have numerous other antispyware programmes buti thought id ask you first.
    can you help? Cheers
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Those are all Critical Windows files. You should not be trying to end those processes or trying to delete the files.

    Are you having problems with the PC? If so, follow the steps below:

    To help us to best help you, please follow the steps below closely and in the order given and do not skip anything. If you have any difficulty, please post back letting us know what steps you have completed, what you found while doing the scans if anything along with details about any problems you may have encountered in completing the steps. The more details you can provide the better. Don't be afraid to ask for additional help if you don't understand something!

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  7. The_G_Man75

    The_G_Man75 Private E-2

    I can't do anything which would involve going online because my laptop is incapable, however it does have hijack this, cwshredder, ad-aware 6 and other programmes that i downloaded last year, the only problem im aware of, and want to be aware of, is that some programmes that use msdos or command prompt dont work or more specifically they start then terminate with no explanation from windows or otherwise.
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If your programs are that old they may not be of much help. You really need the current versions. Has this PC been non-useable for that long?

    You can post a HijackThis log (as an attachment) from whatever version you have but it would be better if you could download updates using another PC and get them to the problems PC somehow! (a CDROM, flashdrive, floppy).
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds