can't remove "only the best" popup ad, browser hijacked!!

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by ronyotz, Sep 16, 2004.

  1. ronyotz

    ronyotz Private E-2

    hi, my IE's been hijacked,

    - my home page resets to about:blank,
    - everytime i do a search in Google, another browser window opens with the url - "http://search-to-find.com...",
    - I get an "Only the Best" pop-up ad
    - and to top it all, Notepad closes by itself.

    I've used Adaware, Spybot, HiJackThis, AboutBuster and CWShredder, and nothing. The moment i open IE again, everything comes back.

    Maybe someone out there can take a look at my HiJackThis Log?

    help.....please...
     
    ronyotz, Sep 16, 2004
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    chaslang, Sep 16, 2004
    #2
  3. ronyotz

    ronyotz Private E-2

    Thanks Chaslang, i've just noticed that thread, im gonna try that, see how it goes...
     
    ronyotz, Sep 16, 2004
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay! Let me know if you have problems with it.
     
    chaslang, Sep 16, 2004
    #4
  5. ronyotz

    ronyotz Private E-2

    Thanks Chaslang!!, the "when all else fails" solution worked fine, i finallly got rid of the popups and the about:blank home page, notepad is working fine again and i just hope it stays that way, cause i've heard that for some the problem seems to be gone and after a few days it all comes back.
    Do you have any other prevention tips besides the one posted at the top of every thread, especially for this kind of adware or spyware??

    Thanks again.
     
    ronyotz, Sep 17, 2004
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If it is going to come back, it usually does so within a few reboots and a couple of opening and closings of Internet Explorer. But you are right, these can come back and very often do. Here is a canned speech I have for protection:

    Make sure you get your system protected from reoccurrence of issues like this. Here are some simple steps you can take to reduce the chance of infection in the future. I strongly encourage you to do them all.

    1. Visit Windows Update:
    Make sure that you have all the Critical Updates recommended for your operating system and IE. The first defense against infection is a properly
    patched OS.
    a. Windows Update: http://v4.windowsupdate.microsoft.com/en/default.asp
    Do this at least once a month.
    b. Never add any site to your Trusted Sites Zone.

    2) Anti Virus: make sure you have one and keep it updated. Here are some good free ones:
    http://majorgeeks.com/download1968.html Avast
    http://majorgeeks.com/download886.html AVG
    The top two hands down. Better than Norton or McAfee!
    Only run ONE AV!

    3) Firewall: if you don't have one get one of these below. The last two are free versions:
    Don't care if your on dial up or High Speed....you must have a firewall
    http://majorgeeks.com/download738.html Kerio Personal Firewall
    http://majorgeeks.com/download3356.html Sygate Personal Firewall Free
    http://www.majorgeeks.com/download388.html ZoneAlarmFree

    4) Get a Temp File/Cookies/index.dat cleaner
    http://majorgeeks.com/download4191.html CCleaner (Crap Cleaner)

    5) SpyWare Prevention (These prevent, they are not scanners. Scanners are listed later.)
    http://majorgeeks.com/download2859.html SpyWare Blaster
    http://majorgeeks.com/download3045.html SpyWare Guard

    6) SpyWare Scanners/Removers
    http://majorgeeks.com/download2471.html SpyBot (Use the Immunize feature. I don't activate the TeaTimer)
    http://majorgeeks.com/download506.html Ad-aware SE
    http://www.majorgeeks.com/download4283.html VX2 Cleaner Plug-In for Ad-Aware

    Also see the last section of READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal
     
    chaslang, Sep 18, 2004
    #6
  7. Tivs

    Tivs Private E-2

    Hello.

    I had been having a nightmare with the "Only The Best" pop up and not being the most technical of people was having great difficulty getting rid of it. After trying my best with all hte instructions posted here, I still could not resolve it, again, probably down to my inexperience as opposed to the instructions themselves.

    However, in one last attempt I seemed to have resolved the problem on my PC.

    1) Downloaded HijackThis and TrojanHunter 4.0
    2) Rebooted to Safe Mode
    3) Ran Trojan Hunter on C: drive which found numerous trojans seemingly linked to the problem I was having.
    4)Start Menu/Search/All Files and Folders/ search C: drive for *.tcf files
    5) Delete all *.tcf files found
    6)Run HijackThis
    7) Deleted all R0, R1,R2,R3 entries
    8) Rebooted to normal mode
    9) Problem seemingy resolved. Have been working away for about 8 hours now.

    Like i say, Im not technical at all and dont know if this is a fluke or if it will work on anyone elses PC. Just thought i'd mention it. Good Luck.
     
    Tivs, Oct 14, 2004
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Have you rebooted a few times and opened and closed Internet Explorer a few times?
    Are you sure you had the symptons of HSA? Please post a HijackThis log.
     
    chaslang, Oct 14, 2004
    #8

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds