i used the program...............

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Darkruler, Jul 30, 2004.

  1. Darkruler

    Darkruler Private E-2

    damn!! everytime i go to the internet the homepage changes to "home search", so i got a download from spychecker but it dosent works! it turns to the same homepage!!! i cant remove it from the control panel!! can someone help me?

    this home search also can effect the view of some pages right? cuz since i got this problem i cant acess many sites
     
  2. Darkruler

    Darkruler Private E-2

    anyone???? my OS is XP pro if it helps
     
  3. Maxwell

    Maxwell Folgers

  4. Darkruler

    Darkruler Private E-2

    nope, i dont get it, please can someone PLEASE show me step by step how to fix this?
     
  5. NeoNemesis

    NeoNemesis Moutharrhea

    Stop telling people to post hijack this log files.
     
    Last edited by a moderator: Jul 30, 2004
  6. Darkruler

    Darkruler Private E-2

    could u give me a link to it? "how do i "post my log as an attachment"?
     
  7. ICeMaN

    ICeMaN Master Sergeant

    Per the tutorial, Hijack This log files are to attached when someone capable of analyzing it asks. So far, that is myself and chaslang.
     
    Last edited by a moderator: Jul 30, 2004
  8. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Ok, you need to disregard everything posted here and start with me. People are offering you advice, then not following up. You have a known hijack that requires you follow my step by step instructions here:

    http://forums.majorgeeks.com/showthread.php?t=35407

    You said you wanted step by step, there you go. You need to do as much there as you can, BUT it is important you download either About:Buster or HSremove, or both and follow the directions on their download page.
     
  9. Darkruler

    Darkruler Private E-2

    thanks a lot, but i dont understand what do i have to do... should i go in the C: and look for those lines and change them to the home page i want? how? sorry if im such a dumb
     
  10. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Ok, lets back up. Start at the top of that thread. There are 5 steps to prepare your computer to properly scan for spyware. They are highlighted in blue where it says Getting Prepared Steps 1-5:

    Then theres the removal process which is also in blue and says Time To Start Scanning And Cleaning Steps 1-4:


    After all of that where the blue line says Official Hijack This Tutorial: is what you want to ignore, thats too far ahead.

    If you are unable to complete any of the steps, you may need to take it to a local shop. We are unable to do that for you and not sure how I can clarify it any better for you, but if I can, I will.
     
  11. Darkruler

    Darkruler Private E-2

    ok, i just figure it out, i "fix" those lines in the thread you gave me, but it still dosent works! the home page comes back to home search...
     
  12. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Nope, you didnt figure it out. There are no lines to fix. If your using Hijack This, close it and forget it. As I said, ignore all posts until you get to mine and I never said to use Hijack This. Its not a spyware removal tool. Its handy to check things, to see what you have, or as a final cleanup step, but again, as the tutorial says, its a last step, not first :) So your running backwards meaning you have still yet to even read the tutorial making it very difficult for me to be of any assitance to you. If you ask for help, please read what I am typing, you simply are not.

    It is of no use to you right now. Lets try this a bit simpler for you. Download About:Buster here: http://www.majorgeeks.com/download4289.html

    If that did not work, try HSremove: http://www.majorgeeks.com/download4286.html

    Please follow the directions for using them on the page you download from and check back. Again, its important when you click the link, you read and\or print the download page before downloading. Use it right and you should be fixed up :)
     
  13. Darkruler

    Darkruler Private E-2

    buster gives me an error....................:mad: im getting a litlle down... "run time error 339" why me???
     
  14. Darkruler

    Darkruler Private E-2

    HELP!!!!!!!!!!!!!!!!!! whats with that error??????????????
     
  15. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Try HSremove in the meantime, sorry, been busy, this is my first time back here since yesterday. Im not sure why you are getting that error. You can either re-download it or download the VB6 run time files http://majorgeeks.com/download523.html
     
  16. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    As Major indicated you probably need to download and install the VisualBasic runtime library. If that does not help, give us the exact complete error message. There may be a file name indicated in the message. I think you may be missing "MSCOMCTL.OCX"
    If that is the case download and run this:

    http://www.spywareinfo.com/downloads/tools/missingfilesetup.exe


    For future reference, the title of your thread was not chosen very well. And it did not tell us what you were even talking about. "I used the program....." is what you wrote. What program did you use? Had you written something like "HSA or HomeSearchAssistent problem" you would have gotten a response much sooner than you did.

    If the above resolves your problems with getting About:Buster (AB) to run, follow the directions indicated on the download link for AB and let us know how things look now.
     
    Last edited: Jul 31, 2004
  17. Darkruler

    Darkruler Private E-2

    thanks chaslang! that worked! heres what i got:

    -- Scan 1 --------
    About:Buster Version 2.0
    Deleted Service Key Successfully!
    Removed! : C:\WINDOWS\dugbuy.dat
    Removed! : C:\WINDOWS\tlwis.dat
    Removed! : C:\WINDOWS\vxqju.dll
    Removed! : C:\WINDOWS\System32\emmve.dat
    Removed! : C:\WINDOWS\System32\javavh.exe
    Removed! : C:\WINDOWS\System32\qnxsx.dat
    Attempted Clean Of Temp folder.
    Removed Uninstall Key (HSA)
    Removed Uninstall Key (SE)
    Removed Uninstall Key (SW)
    Pages Reset... Done!
    -- Scan 2 --------
    About:Buster Version 2.0
    Attempted Clean Of Temp folder.
    Removed Uninstall Key (HSA)
    Removed Uninstall Key (SE)
    Removed Uninstall Key (SW)
    Pages Reset... Done!

    and sorry for the title...
     
  18. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay so now About:Buster ran. But are you still having problems?
     
  19. Darkruler

    Darkruler Private E-2

    it works for some time... but then comes back...... also whem i search for something in google that homesearch opens a page about what im trying to look for
     
  20. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay! But previously you did not follow the instructions on the download link for About:Buster. It specifically states to do multiple scans. First you scan which will give actually run two scans called Scan 1 and Scan 2. Then you need to immediately reboot and as soon as your PC comes back up run About:Buster again. Copy and Paste the outputs from both of those back here.

    Just to warn you ahead of time this does not typically work by itself. Many times it requires some manual work and quite a bit of repetition to kill off this hijacker. It drops lots of files on your PC and has many different ways to revive itself.

    You may be okay at the first run of IE after reboot but then if you open another IE session you may notice the problem has come back.
     
  21. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If still having problems, please try using the step by step Generic Solution I just put up as a sticky.
    http://forums.majorgeeks.com/showthread.php?t=38772

    Let me know if you have any questions on using this. This has been my old faithful method in the past and I've updated the Generic Solution to make use of some new tools and new information. Yes it is long but I have had great success using this when all else has failed.
     
  22. Darkruler

    Darkruler Private E-2

    here:

    -- Scan 1 --------
    About:Buster Version 2.0
    Removed! : C:\WINDOWS\dugbuy.dat
    Removed! : C:\WINDOWS\tlwis.dat
    Removed! : C:\WINDOWS\System32\emmve.dat
    Removed! : C:\WINDOWS\System32\msme32.exe
    Removed! : C:\WINDOWS\System32\qnxsx.dat
    Attempted Clean Of Temp folder.
    Removed Uninstall Key (HSA)
    Removed Uninstall Key (SE)
    Removed Uninstall Key (SW)
    Pages Reset... Done!
    -- Scan 2 --------
    About:Buster Version 2.0
    Removed! : C:\WINDOWS\dugbuy.dat
    Error Removing! : C:\WINDOWS\System32\apiew.exe
    Attempted Clean Of Temp folder.
    Removed Uninstall Key (HSA)
    Removed Uninstall Key (SE)
    Removed Uninstall Key (SW)
    Pages Reset... Done!
     
  23. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That's still only one run of the program. Each time you run it, it does a scan 1 and a scan 2. You still are not following directions. I said:
    - run AB ( save output)
    - reboot
    - run AB again ( save output)
    - post info from both AB runs

    If you do this correctly and you still have problems, you will need to use the Generic Solution I pointed you towards.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds