Tech Support Forum - View Single Post - Searchdom, loaders and virus Influx 'HELP'?

VADAR · 03-03-2005, 12:57 AM

Hi Steve,

Download Hoster (http://www.greyknight17.com/spy/Hoster.exe) and run it. Choose the 'Restore Original Hosts' button and press OK.

Reboot into Safe Mode.

Run StartDreck again in the same fashion.

Highlight these entries one at a time and click on the Delete button:

*Start Page=http://www.searchdom.net
*CustomizeSearch=http://%77%77%77%2E%73%65%61%72%63%68%64%6F%6D%2E%6E%65%7 4/?re=
*SearchAssistant=http://%77%77%77%2E%73%65%61%72%63%68%64%6F%6D%2E%6E%65%7 4/?re=

*Start Page=about:blank

Close StartDreck and reboot.

Let's use a program to scan for any trojans that may exist. Download TDS-3. Learn how to use it here. Make sure to update it after you installed it. You can get the manual updates here. When you launch the program, it will scan your memory for running processes. This will take less than 30 seconds. Next go to System Testing on the menu and choose Full System Scan. After that's finished, post the log file by selecting everything on the top pane (select from bottom to top). If any alarms are found, it will be listed in the bottom window. Please copy and paste that here also if it applies.

Run HijackThis again Save the log file and run KRC HijackThis Analyzer in the same folder to get the result.txt log. Just post the contents of the result.txt file in the forum.

Also could you please send a new StartDreck log.

03-03-2005, 12:57 AM	#8 (permalink)
VADAR Member Join Date: Jan 2005 Location: Bristol,uk Posts: 154 OS: win xp pro	Hi Steve, Download Hoster (http://www.greyknight17.com/spy/Hoster.exe) and run it. Choose the 'Restore Original Hosts' button and press OK. Reboot into Safe Mode. Run StartDreck again in the same fashion. Highlight these entries one at a time and click on the Delete button: Start Page=http://www.searchdom.net CustomizeSearch=http://%77%77%77%2E%73%65%61%72%63%68%64%6F%6D%2E%6E%65%7 4/?re= SearchAssistant=http://%77%77%77%2E%73%65%61%72%63%68%64%6F%6D%2E%6E%65%7 4/?re= Start Page=about:blank Close StartDreck and reboot. Let's use a program to scan for any trojans that may exist. Download TDS-3. Learn how to use it here. Make sure to update it after you installed it. You can get the manual updates here. When you launch the program, it will scan your memory for running processes. This will take less than 30 seconds. Next go to System Testing on the menu and choose Full System Scan. After that's finished, post the log file by selecting everything on the top pane (select from bottom to top). If any alarms are found, it will be listed in the bottom window. Please copy and paste that here also if it applies. Run HijackThis again Save the log file and run KRC HijackThis Analyzer in the same folder to get the result.txt log. Just post the contents of the result.txt file in the forum. Also could you please send a new StartDreck log.