Is Help Ok? Spyware is annoying me!

Discussion in 'Malware Help (A Specialist Will Reply)' started by SoftwareDiva, Jun 27, 2005.

  1. SoftwareDiva

    SoftwareDiva Private E-2

    I really need help. I have tried almost everything. I have read the thread with regards to the about blank which is what is on my computer. I have cleaned the registry of "oldHome. - about blank" I have taken EVERY about blank, I have tried to kill the se.dll. Which obviously will NOT DIE. From my computer. I just want to know WHY DOES IT COME BACK! sorry about that. No more yelling.

    I am so frustrated, it has taken over my browser Internet Explorer. When I reset my home page, of course it comes back. I have Webroot and when I disable the "sp" which it is under, it comes back. When I go to my Programs and system utility under disable start up items there are two sp files I disable they come back. I clean out my temp files it comes back, in my registry there is an unistall and I 'unistall' the file called search assistant along with its dll file however it keeps reinventing itself and comes back.

    I just want to know why does this thing not DIE! Please help!?? here is my file.

    Thanks sorry for my rants.
    It's extremely frustrating as I am trying to use my internet and it starts flashing and takes my start bar out. It has taken over my internet providers browser which is Rogers.com. I cannot access my mail as the whole screen goes directly to a Search engine.


    Edit by chaslang: Unrequested inline log removed
     
    Last edited by a moderator: Jun 28, 2005
  2. SoftwareDiva

    SoftwareDiva Private E-2

    Actually I meant to say Please Help!!

    Guys I really need help on removing this hijack, is it so embedded that it cannot be removed??
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Actually I meant to say Please Help!!

    Please read the announcement and sticky threads. HJT logs should only be posted when requested and then they must be attachments to your message. Please run the steps below.

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

    After doing all of the above continue with the below:

    Download this file: SpSeHjfix109

    Unzip it to your desktop or to a folder.

    Boot into Safe Mode

    Start SpSeHjfix, click on " Desinfecton starten" (the other button means close) then it will reboot and finish the cleaning.

    Run SpSeHjfix one more time.

    This should produce a log should on your desktop or the same folder as SpSeHjfix.


    Boot into normal mode and make sure you follow these directions:


    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

    - Also post as an attachment, the log from SpSeHjfix
     
  4. SoftwareDiva

    SoftwareDiva Private E-2

    Oooops...sorry I did something I shouldn't of.

    I have one question though can someone please please tell me why is it that that some files on my computer cannot be deleted. For instance they say they are 'writer protected and I do not have access to delete'. These are files that are the dll files that re boot the dll files I think from my computer. Because I have cleaned out my computer so many times. And the files come back. It is the about blank and it is extremely difficult to delete.
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Just follow the steps that I gave you. Files are write protected because they do not want you to be able to delete them. It is a simple trick used by malware creators to keep novices from being able to easily remove the bad files.

    The malware problems you have are self replicating and can respawn themselves unless you remove all components (of which there can be many).
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds