Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chris Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

HomeSearchAssistant/Search Extender/Shopping Wizard

Status
Not open for further replies.

tdenitti

MIS
Aug 24, 2001
68
US
This is just a warning out there to all that wish to heed it. If you notice any of the three programs listed in the subject of this post in your add/remove programs listings, drop what you're doing immediately and look into it! I just wrestled with this for two days straight and finally got a handle on it. This malware creates three types of files, .exe, .dll and .dat files. And in some cases corrssponding registry entries. The files are named in that all to familiar random character convention (example: oiuer.exe) Ad-Aware, SpyBot, Bazooka, Hijack This are helpless against this as of yet. These programs will detect these files and registry entries but cannot completely remove them.

I have found the best way to remove this nastiest of "software" is to boot into safe mode...run these detection/removal programs and then manualy go to your %windows% and %windows%\system32 directories and delete these .exe, .dll and .dat files. These files usually range from 5 to 7 characters in length. Some with 32 in the file name. I've done searches in my registry for all of these files and found that a lot of them have registry entries to boot. Make sure you are thorough in your removal or else you will wrestle with this as I did. I hope this helps!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top