Get Rid of Search Assistant/Toolbars?

Fran

Thanks Strike Eagle,

I'll try that now.

Fran

???

Did that, then these ones had reappeared when I ran Highjackthis log:

RO - Search Assistant ( >:()
O2 - Boltsafe ( >:()
017 - Nameserver (>:()

When I rebooted, Spybot said it was deleting the Search Assistant value.....but........I went onto Internet Explorer and it came straight back plus all the casino etc. files that keep appearing.

I had trouble getting onto websites and when I re-connected an extra dial up box appeared (which always seems to when there's problems).

There are also 2 x P2P's again when I deleted one of them before.

>:( :P :-/

StrikeEagle

Okay go to safe mode and delete:

C:\PROGRA~1\UPLOAD~1\boltsafe.exe

Then reboot.

Then go to: http://www.hsremove.com/

and try and run the file 'hsremove.exe' located there.

Fran

Went to delete the file and a search said that "location unavailable" and that it must be on "hard drive on this computer or on a network".

Meta acid is back and the 2nd P2P which I deleted again.

I can't get onto any other website though I have managed this one, Mozilla says this when I try to open a new window:

"https://www.fojeyieydcqgloc.us could not be found"

I have to go out but will try when I get back to get that website.

Thanks for your continuing support Strike Eagle.

Fran

Any ideas on what to do next with this one? ???

peter_the_piper

Sorry, can only reiterate previous post.

Sooler

Are you using a firewall?

Fran

Yes I've got 2 firewalls at the moment - Windows SP2 one and Sygate. The problem is getting rid of stuff that's already there.

Update on things (specially for Ausielle who appears as riled as me by these things cos of personal experience! :P ::))

I ran the "Giant" scan and remove programme and it found:-

IncredFind Adware
EGroup Dialer Dialer (2 objects)
MemoryMeter Browser Highjacker
eGroup Adware
Remote Password Stealer Password Highjacker
NCase Browser Hijacker
SpyAnytime PC Spy (Commercial Key Logger)
Save Now (Adware)
Altnet Top Search - Browser plugin
Brilliant Digital (Spyware)
KaZaA (Adware bundler)
Kazoom (Adware)
PowerSearch (Browser Hijacker)
MyWaySearchBay (Browser plugin)

Five of these it listed as "severe" risk, the KaZaA one was about a medium risk.

B**** F***** !!!! etc.

At least it says it has, cos being cynical I wonder if these free trials don't chuck another few extra things in to make you buy their product?!

So I deleted that lot .....and...... Search Assistant change thing is still popping up. I blocked it 4 or 5 times, then "Giant" told me it had allowed the change. >:( When that happens you have to click on "manage allow things" (or whatever words it is) and be quick cos it disappears quickly. You can then play at removing the ones you have allowed. But of course within a minute they are back. The only way to be able to do anything on the computer is to just leave the message which asks you to block or allow and don't touch it. It stays still until you click on it.

So this is some invidious (is that the right word?) Search Assistant and cos of all the stuff that's supposed to have been on the computer I don't know which one this one comes from. At the moment my computer sounds very busy, like when doing a scan, but I'm not, so I think it's undoing all the work that "Giant" just did. :P

aussielle

Update on things (specially for Ausielle who appears as riled as me by these things cos of personal experience! :P ::))

.

At least it says it has, cos being cynical I wonder if these free trials don't chuck another few extra things in to make you buy their product?!

Call me cynical too then, cos that was my first thought. ::)

Especially since the other programs you've run are highly rated/tried and tested and this one I believe only came out on 9th Sept.

aussielle

P.S for god's sake Fran!!!!!!!!!!!!! ::) ::)


GET RID OF KAZAA

Tell son he will have to use alternative, like winmx (my son uses this and no probs)

Use Kazaabegone and follow the instructions Owen gave me

At least that should clear some of your baddies