Get Rid of Search Assistant/Toolbars?

Donnie

Hi Fran

Firstly, when SpyBot pops up a box and you make a choice, you also need to put a tick in the box to remind SpyBot not to pop the box up again.

Secondly, go to 'Tools' in SpyBot and then 'System Start Up'. it is probable that the process that is causing the problem is listed there. 'Untick' the relevant boxes, this will temporarily disable them(You can delete them afterwards when you are SURE they are Spyware).
Next, go to 'browser pages' and change all of those you don't recognise to the about:blank option.

Let me know how you go.

Fran

Donnie,

Thanks for the suggestions. I started off denying and clicking for it to be remembered, but the problem is that they keep sending again and again. If I untick one process, the same will be sent again in a few seconds/minutes depending on what processes I am using and how they have set it. I just click deny or close now as there's less clicks involved. I have the same with SpySweeper asking about browser settings and other changes.

I expect the same would apply if I alter the browser pages they'd just be back in a few seconds.

sra

. I was given the address of a free web-based email last night... http://www.softhome.net

When I think of all the "free for life" email accounts I tried out over the years-

another.com
genie.co.uk
nameplanet.com
and a dozen less well know ones

yahoo and hotmail are the only ones that have remained free.

Donnie

Which 'start up' items did you 'untick' withing SpyBot/Tools/System Start Up?

Fran

StrikeEagle

Are you a male?
Are you married?
Have you got loads of money?

You've fixed it :-* :-* :-*

(I hope!!)

I'd forgotten how quick broadband works....

aussielle

[move] ;D ;D Hurray ;D ;D hurray ;D ;D hurray ;D ;D[/move]

StrikeEagle

Yes
No
If I were rich would I be on this forum

Fran

I'm back on this thread!

That's because THEY came back... the popups telling about Search Assistant and browser problem. But at a much slower rate.

I got a printed copy of a Hijackthis Tutorial and used that together with info already gathered from Strike Eagle and other observations I'd made along the way to delete things using Hijackthis and to delete things from the registry too. But it was still there. ???

Then as I started work on it again this morning, Spysweeper suddenly popped up saying it had found Keenvalue (already "deleted" twice by Norman Antivirus). It had also found other stuff and did a full scan.

It found:- Spyware - Keenvalue - 114 traces
Adware - Altnet - 4 traces (apparently tracks all of your uploads with Kazaa Media Desktop)
Opistat - 6 traces (this is put there by Norman which I was aware of)
Lopdotcom - 4 traces
Cydoor Peer-to-peer dependancy
Topsearch

After the scan I deleted the stuff and it's all gone!!. (Maybe!)

Good job I didn't get heavy fingered while editing the registry and everything seems to be working fine.

Fran

???

They're back!!!! ::) >:(

All was quiet for a bit.

But when I ran the Browser Hijack Recovery I saw that there are two Internet Explorers, one I had decided last night looked dodgy and had removed it from the register. (Including "liesgrim".) It has a small "c" in the register. But it's back. It is the one causing the problem with the Search Assistant and also keeps trying to change the Internet Explorer settings.

Any ideas as I can't seem to delete it and none of the security measures have picked it up.

???

StrikeEagle

Do hijackthis again, and delete same stuff as I said in PM.

Reboot into safe mode. Delete:

C:\Documents and Settings\All Users\Application Data\love soft fast sect\Corn Seek.exe

C:\WINDOWS\System32\KDP32fb.dll

C:\PROGRA~1\browse cake\liesgrim.exe

Reboot into normal mode, and see if Hijackthis has found any of the stuff I told you to delete before.