Browser hijacked

Browntoa

delete them all

abwsco

Done that and I'm just working through the rest of the list.

Browntoa

hope you were'nt planning to go to bed early

Pchelpman normally pops in during the morning, if you finish tonight then do the new hijack this scans first thing in the morning and post them for him

abwsco

Have hit a problem. I can't download the smitRem.exe on the pc that needs cleaning. When I click on the link I get a Cannot Find Server message. I have managed to download VX2 cleaner OK and check for all updates OK though.

So far I have run Spybot and Ad-aware (both were already updated) and VX2 and nothing was found.

I have tried on my un infected PC and I could download smitRem.exe OK from the link if I wanted to. Unifected PC is running XP.

Sorry about this further hassle for you.

abwsco

Browntoa wrote:

hope you were'nt planning to go to bed early

Pchelpman normally pops in during the morning, if you finish tonight then do the new hijack this scans first thing in the morning and post them for him

LOL- I got up at 1.30am this morning to close the pandascan and save details. Cannot believe that 1 thing has caused so much hassle and I've had other stuff on the pc given that I am a bit anal about running spyware removal progs and AVG nearly everyday. At least this is making my daughters realie they must[/] be more careful about what they are doing.

Toxteth_OGrady

I've hosted the smitrem.exe file here for you to download. Your Hosts file may have been corrupted by the malware.

Can you copy files from your clean pc to the other?

:cool:

TOG

abwsco

Toxteth_OGrady wrote:

I've hosted the smitrem.exe file here for you to download. Your Hosts file may have been corrupted by the malware.

Can you copy files from your clean pc to the other?

:cool:

TOG

Should be able to but my brains getting mashed-lol. Going to try the above now. Thanks

abwsco

Thanks you. Have downloaded it and am about to go into safe mode again on infected PC.

abwsco

Update that I'm now running panda scan again.

abwsco

Thought I'd got rid of stuff as I've been following instructions and deleting but here is my Active Scan.


Incident Status Location

Adware:adware/cws.searchmeup Not disinfected C:\WINDOWS\kl.exe
Potentially unwanted tool:application/myway Not disinfected HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\!!014DA6C9-189F-421A-88CD-07CFE51CFF10}
Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\Anne1\Desktop\smitRem\Process.exe
Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\Anne1\Desktop\smitRem.exe[Process.exe]
Spyware:Cookie/RealMedia Not disinfected C:\Program Files\Spybot - Search & Destroy 1.1\Recovery\InternetExplorer24.zip[anne1@realmedia[1].txt]
Spyware:Cookie/Xmts Not disinfected C:\Program Files\Spybot - Search & Destroy 1.1\Recovery\InternetExplorer24.zip[anne1@xmts[1].txt]
Spyware:Cookie/go Not disinfected C:\Program Files\Spybot - Search & Destroy 1.1\Recovery\InternetExplorer27.zip[anne1@go[1].txt]
Spyware:Cookie/RealMedia Not disinfected C:\Program Files\Spybot - Search & Destroy 1.1\Recovery\InternetExplorer27.zip[anne1@realmedia[1].txt]
Possible Virus. Not disinfected C:\WINDOWS\system32\ZoneLabs\srescan.dll

Will run the housecall now. Also don't seem to be able to unistall S & D 1.1