How do I delete 'specialgoods' hijacker

Discussion in 'privacy problems' started by opendrawers, May 10, 2005.

Thread Status:
Not open for further replies.
  1. opendrawers

    opendrawers Registered Member

    Joined:
    May 10, 2005
    Posts:
    5
    I am at my wits end trying to find help with this, can you help, if you can please keep advice fairley simple. Thank you
    Stella :doubt:
     
  2. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Hey Stella....Welcome to Wilders [​IMG]

    What program is informing you about 'specialgoods' hijacker ?

    Also....are you seeing red x at the bottom right of your task bar :doubt:
     
    Last edited: May 10, 2005
  3. opendrawers

    opendrawers Registered Member

    Joined:
    May 10, 2005
    Posts:
    5
    I suppose it would be internet explorer, this 'specialgoods' is automatically dialing up the net and is now aparrently my home page, after what I have seen come up on the screen I can honestly say I never noticed a small red cross, where should I see it? I was trying not to look at all. I keep getting pop up ads and a microsoft security warning directing me to a useless site for spyware removal, or a site not found page when it has gone looking for 'specialgoods' home page. I am on windows 98 if it matters. Thanks so much for deciding to help. I have just downloaded spy guard.
    Stella
     
  4. Atarius

    Atarius Guest

    I do have, in my case, a red x in the bottom right corner of the taskbar... and I have all the trouble in the world getting rid of it.. even looking at my running processes doesn't give me a clue as to what can cause this...
    I did have smitfraud.trojan infecting my computer, but I got rid of it.. and now this red X sticks in my task bar, and when I click on it, it send me to a specialgood.info/anything site... and it adds some icons on my desktop also... Any info will be greatly appreciated!

    Thanks!
     
    Last edited by a moderator: May 11, 2005
  5. FanJ

    FanJ Guest

    Hi,

    Maybe a good idea to check this thread:
    General Cleaning Instructions

    Maybe you need a HijackThis-log, but the Wilders-board doesn't do HijackThis-logs anymore.
     
  6. opendrawers

    opendrawers Registered Member

    Joined:
    May 10, 2005
    Posts:
    5
    Thanks Fan J, Does it matter that I already have 5 anti-stuff programmes already? ad aware, spy doctor, a pop-up thing, anti-virus, spyware guard. It sounds like a heck of a lot of stuff to download. I just found the 'specialgoods' red cross in my task bar by the way.
    Stella
     
    Last edited: May 12, 2005
  7. wilseed

    wilseed Guest

    Download Killbox and extract to hard disc.
    Change folder options to show system files and hidden files.
    Restart computer in Safe Mode (press F8 during boot)
    Change homepage to other than that specialgoods shite.
    Run KillBox and select file in Windows/System32/ called param32.dll (I think that's what it was called!!)
    Select "delete on reboot" and Killbox will prompt you to reboot.
    On reboot the X should be gone.
    You may have to tidy up some other **** and rubbish registry entries.
    But that annoying crap should be gone.
    Try and get good antispyware software to clean up anything left over.
    PATCH UP YOUR PC IMMEDIATELY.
     
  8. MelarianRi

    MelarianRi Registered Member

    Joined:
    May 16, 2005
    Posts:
    22
    Location:
    USA, MA
    Yeah, I got the 'SpecialGoods' thing as well, it's rather annoying. I have this little white X surrounded by red in my Toolbars. I've tried to find and delete it manually but it obviously doesn't have a name. Uh, yeah, I'm 16, so I'm not exactly computer knowledgable here. >.<

    I also had the trojan-spy, Odd...

    Also, i don't know HOW to patch my PC... >.>
     
  9. opendrawers

    opendrawers Registered Member

    Joined:
    May 10, 2005
    Posts:
    5
    Thanks Wilseed, but I have no idea what you are talking about or how to begin going about it whatever it is, I can get to safe mode and I'm afraid thats about it. I have a feeling I will be doing some fairly quick learning.
     
  10. SpikeyB

    SpikeyB Registered Member

    Joined:
    Mar 20, 2005
    Posts:
    478
  11. tkc

    tkc Guest

    i just helped someone remove a similiar problem a few days ago. the instructions are listed on daniweb.

    http://www.daniweb.com/techtalkforums/post114046-41.html

    i know it says hotoffers.info, but they have similiar files installed. i would suggest renaming the files to a non-executable extension and moving it a quarantine directory just in case u need them later on (unlikely). of course, u'll need to take note of their location if u need to move them back (unlikely).
     
  12. sHiNg0

    sHiNg0 Guest

    tnx for help!
     
  13. Steve0619

    Steve0619 Guest

    Hey guys, I have been struggling with the same exact problem. I finally gave up on it and did a system restore. ie(start>programs>accesories>system tools> system restore) Luckily my comp had backed up not a day or two before. Seems to have fixed the problem. If your not worries about losing some data, try it. I don't know if this helps.
     
  14. Aanchal...

    Aanchal... Guest

    Hey guys, I have been struggling with the same exact problem.
    There was a red x in the bottom right corner of the taskbar .. and when I click on it, it send me to a specialgood.info/something site... and it adds some stupid icons on my desktop also but I got rid of it.

    I had just deleted all the files related to it .

    Go to your system32(c:\windows\system32) folder and delete all files containing the names which the icons on your desktop contains.for example:-Air tickets,cigarette,online casino,britnyspears etc.

    Also delete any instances found:

    param32.dll
    guninst.exe
    popup_bl.dll
    systr.dll
    svrhost.exe

    if system is not allowing u to delete these files , rename the files & restart your computer And then try to delete all files but remember dont forget the names u have rename with.

    i m sure u ll get rid of it .

    Also change the default site name in IE .

    If u want to sesure ur pc ,download and install 'Microft Antispyware' which gives u real time protection by stopping most spyware threats before they install.

    Do try it .....This will definitely solve ur all problem.

    Regards
    Aanchal.......bye
     
  15. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,802
    Location:
    Texas
    Posted by compu


    I HAVE NARRATED BELOW THE 'SPECIALGOODS' PROBLEM WHICH MY PC IS SUFFERING FROM.

    PROBLEM:

    O.S OF MY PC IS WIN 98 SE.

    MY HOME PAGE IS GETTING RESET TO WWW.SPECIALGOODS.COM/AD/AD0271/GO.PHP, DESPITE CHANGING IT MANY TIMES.

    WHILE SURFING NET, PERIODICALLY THE WEB PAGE GETS DIVERTED TO WWW.SPECIALGOODS.COM/AD/AD0271/GO.PHP WHICH FURTHUR TAKES IT TO SOME PHARMACY STORE OR PORNOGRAPHY PAGE.

    ALSO A MICROSOFT WINDOWS ERROR MESSAGE NO.#317 KEEPS POPPING UP SAYING WINDOWS IS SEVERLY CORRUPTED AND SO I SHOULD DOWNLOAD AN ANTISPY SOFTWARE PATCH. ON SYING YES TO THIS, IT TAKES TO THE SAME WWW.SPECIALGOODS.COM !!!

    THERE IS RED BUTTON WITH A WHITE CROSS MARK IN MY SYSTEM TRAY, WHICH I AM UNABLE TO DELETE. RATHER WHEN I CLICK ON THAT,LEFT OR RIGHT, IT TAKES ME TO THE SAME WWW.SPECIALGOODS.COM !!!

    I HAVE USED MANY SOFTWARES BUT UNABLE TO REMOVE THIS. THE SOFTWARES I TRIED ARE CPOUNTERSPY,SPYSWEEPER, ADAWARE,CWSHREDDER,STINGER,HIJACKTHIS, WINDOWS REGISTRY CHECKER....ALL WITH LATEST UPDATES.

    I OBSERVED THE I.P ADDRESS OF 69.50.165.245, WHEN WWW.SPECIALGOODS.COM/AD/AD0271/GO.PHP OPEN I.E.

    I DO NOT HAVE A FIREWALL YET, BUT HAVE AN ACTIVE ANTIVIRUS SOFTWARE OF COMPUTER ASSOCIATES.






    compu

    Your hijack log has been removed.

    We have discontinued the HijackThis log analysis service here at Wilders. See the following announcement regarding this change:

    https://www.wilderssecurity.com/showthread.php?t=42148

    Within that post is an image linking over to a site that lists a number of other security forums, some of which still provide that service. If you want your log reviewed, you'll need to pick a site and read their spyware scanning and cleaning (HijackThis posting) guidelines, following all their required steps carefully, and then posting as directed.

    Two of the bigger forums for HijackThis log processing, (meaning they process more log threads each day than many others) are: SpywareInfo.com and CastleCops.com .
     
    Last edited: Jun 3, 2005
  16. compu

    compu Registered Member

    Joined:
    Jun 3, 2005
    Posts:
    3
    LOTS OF THANKS TO YOUR FORUM AND INFORMATION I GOT FROM IT, I HAVE SUCCESSFULLY GOT RID OF WWW,SPECIALGOODS.COM PROBLEM ON 4/6/05..

    I located the three files,

    param32.dll
    guninst.exe
    popup_bl.dll

    in c:\windows\system32 folder and try to delete them....but they were not getting removed. Then I downloaded the software "pocket killbox". by running it, the files got removed and that was the end of the problem.

    Then there were some icon files, associated with the above, left back in the folder. I removed these too.

    Finally, i removed the files in my temp folder and also recycle bin.

    Then rebooted the system and immediately thereafter I installed Zonealarm personal firewall.

    Killbox and Zonealarm are free softwares available for download on the net.
     
    Last edited by a moderator: Jun 6, 2005
  17. compu

    compu Registered Member

    Joined:
    Jun 3, 2005
    Posts:
    3
    LOTS OF THANKS TO YOUR FORUM AND INFORMATION I GOT FROM IT, I HAVE SUCCESSFULLY GOT RID OF WWW,SPECIALGOODS.COM PROBLEM ON 4/6/05..

    I located the three files,

    param32.dll
    guninst.exe
    popup_bl.dll

    in c:\windows\system32 folder and try to delete them....but they were not getting removed. Then I downloaded the software "pocket killbox". by running it, the files got removed and that was the end of the problem.

    Then there were some icon files, associated with the above, left back in the folder. I removed these too.

    Finally, i removed the files in my temp folder and also recycle bin.

    Then rebooted the system and immediately thereafter I installed Zonealarm personal firewall.

    Killbox and Zonealarm are free softwares available for download on the net.
     
    Last edited by a moderator: Jun 6, 2005
  18. ConfusedTeen

    ConfusedTeen Guest

    I see the files at system32 but I can't delete them and I don't know where Pocket Killbox is...please help I need this gone by like..tomorrow night and I'm only 14 so please try and keep it as simplified as possible
     
  19. Don Pelotas

    Don Pelotas Registered Member

    Joined:
    Jun 29, 2004
    Posts:
    2,257
    You can donwnload Killbox from here, use the "delete on reboot option", or try Unlocker i like it better and you don't have to reboot with this one. :)
     
Loading...
Thread Status:
Not open for further replies.