Wilders Security Forums  

Go Back   Wilders Security Forums > Browser Hijacks and Spyware Problems > adware, spyware & hijack cleaning
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Spyware Cleaning Section Closed!!
Notice: The spyware cleaning (HijackThis) section is closed. Wilders Security no longer provides one on one spyware cleaning assistance. Please see this announcement for a list of websites that provide such services.
 
 
Thread Tools Search this Thread
  #26  
Old August 6th, 2004, 12:37 AM
snapdragin's Avatar
snapdragin snapdragin is offline
Administrator
 
Join Date: Feb 2002
Location: Southern Ont., Canada
Posts: 8,415
Default Re: My PC crashed and I need some serious help!

Hi ZeldaManiac44,

You did a pretty good job actually of cleaning the other few files that needed removed from your earlier log.

There's just a few items to clean up, and you had mentioned in your earlier post that wanted the netzero search removed, so we can fix that in Hijackthis.

Make sure you do not have any browsers open.
Re-scan with Hijackthis and place a check beside the following items, then press *Fix checked:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.netzero.net/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://my.netzero.net/s/search?r=minisearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://my.netzero.net/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch

R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\PROGRAM FILES\NZSEARCH\SEARCHENH1.DLL

O2 - BHO: (no name) - {0B90AA1B-F649-44C3-9FD3-736C332CBBCF} - (no file)

O4 - HKCU\..\Run: [spc_w] "C:\Program Files\NZSearch\hcm.exe" -w

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - (no file)
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - (no file)


Delete the NZSearch folder in C:\Program Files.

I am not seeing an antivirus running, or a firewall. You can find a list of free antivirus programs and firewalls here: Free Tools

For the moment though, I would recommend using one of the free on-line virus scans. You can find several to choose from here: Free Services

In answer to your other question regarding the closing of the 'adware, spyware and hijack cleaning forum', you can read the answer given by LowWaterMark (Administrator) here in this post.

Also, the threads here in this specific forum will only be locked for now.

Regards,

snap
__________________
@-`-,--
  #27  
Old August 12th, 2004, 08:58 PM
ZeldaManiac44's Avatar
ZeldaManiac44 ZeldaManiac44 is offline
Regular Poster
 
Join Date: Jun 2004
Location: TX, United States.
Posts: 56
Default Re: My PC crashed and I need some serious help!

I checked off in HijackThis, exactly what you told me to, and the entries were removed successfully. I don't think there's any reason to post another log, because we all know that since my Internet connection is gone there isn't a way for spyware to get back in.

The only small problem I encountered was when I eliminated the NZSearch folder in C:\Program Files. When I did that, I went to the Recycle Bin to purge it permanently from my system, and although the Recycle Bin seemed 'full' since there was an animated paper wad inside of the iconm nonetheless when I opened the folder, there was nothing in the Recycle Bin!

This has happened a couple times before, but I was just wondering what it means, can you tell me why it happens?

Also, seeing as how our work here is done, by all means lock this thread, I'd prefer that actually. And you can answer my Recycle Bin question via PM (personal message).
__________________
My PC's statistics => Model-Make: Dell OptiPlex GX110; Operating System: Windows 98; Firewall: n/a; Antivirus: n/a; Antispyware: Spybot: Search and Destroy 1.4, Lavasoft Ad-aware
 

Wilders Security Forums > Browser Hijacks and Spyware Problems > adware, spyware & hijack cleaning « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 08:08 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums