I am at a loss and have tried everything

Discussion in 'Malware Help (A Specialist Will Reply)' started by mstradewinds, Jun 15, 2005.

  1. mstradewinds

    mstradewinds Private E-2

    I have browser windows popping up constantly (even when I am not sitting at the computer). I have run every program I can think of, read every forum with any mention of the following items which keep popping up (for starters):

    ads1.revenue.net
    64.192.130.141
    loadingwebsite.com

    I also have a registry entry that keeps coming back to RUN.. eliteowg32.exe - I have tried to delete via safe mode, ran every possible cleaner.. Help!
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    After doing ALL of the above if you still have a problem:


    http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

    http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

    http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     
  3. mstradewinds

    mstradewinds Private E-2

    Already on step one with a question LOL.. how do I know if I have these:????


    2: Only do this step if you have the about:blank or home search hijack
     
  4. mstradewinds

    mstradewinds Private E-2

    FOrget it, I got it. thanks.. back soon with good news I hope
     
  5. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    You'll know if you have these infections, your homepage in IE will be set to about:blank or something like res://...dll. It will stay set as this no matter how many times you changed it.

    Okay!

    Good Luck!:)
     
  6. mstradewinds

    mstradewinds Private E-2

    Well I have run everything and I still have the problem :( Whats my next step? I may have to get on it tommorrow though, I am exhausted with this. lol. Thanks in advance !
     
  7. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Read my post very carefully and you would know what to do next. Attach a current HJT log from normal mode.

    You must do this in a timely manner so the infections will not mutate and get worse.

    Will be awaiting HJT log.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds