Tech Support Forum - View Single Post

forhockey · 07-07-2007, 11:24 AM

Hi mjman,

Let me see if I understood correctly. You've deleted the WildTangent folder, but it still exists in the add/remove programs list?

The .txt file located in C:\e469f47be8f80a2705f0795f0e is nothing to be worried about. Microsoft updates always generates these random folder names, which we are never really sure about. Next, we are going to try using another online scan, which I'll mention in my instructions later to come. Lastly, this round we will take care of the redirection to that website.

Please save these instructions to Notepad as the internet will not be available to you at certain points of the removal process.
Please ensure that there aren't any opened browsers when you are carrying out the procedures below.
Make sure to work through all the Steps in the exact order in which they are listed below.
If there's anything that you don't understand, ask your question(s) before moving on with the fixes.

---------------------------------------------------------------------------------------------

Open HijackThis and click on 'Do a System Scan Only'. Check the following entries (If they still exist, make sure you do not miss any)

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://as.starware.com/dp/search?x=w...QbxjCX8bBWUo+B

Please remember to close all other windows, including browsers then click Fix checked.

---------------------------------------------------------------------------------------------

Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky Online Scanner

Answer Yes, when prompted to install an ActiveX component.

The program will then begin downloading the latest definition files.
Once the files have been downloaded click on NEXT
Locate the Scan Settings button & configure to:
- Scan using the following Anti-Virus database:
  - Extended
- Scan Options:
  - Scan Archives
  - Scan Mail Bases
Click OK & have it scan My Computer
Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
Click the Save as Text button to save the file to your desktop so that you may post it in your next reply

* Turn off the real time scanner of any existing antivirus program while performing the online scan

---------------------------------------------------------------------------------------------

Please reply back with the following:

Question about WildTangent
Kaspersky Log
System Behaviour?

07-07-2007, 11:24 AM	#7 (permalink)
forhockey Analyst, Security Team Join Date: Sep 2006 Location: Ontario, Canada Posts: 2,948 OS: Windows 7 Ultimate	Re: Homepage in MSN lost to spyware!?! Hi mjman, Let me see if I understood correctly. You've deleted the WildTangent folder, but it still exists in the add/remove programs list? The .txt file located in C:\e469f47be8f80a2705f0795f0e is nothing to be worried about. Microsoft updates always generates these random folder names, which we are never really sure about. Next, we are going to try using another online scan, which I'll mention in my instructions later to come. Lastly, this round we will take care of the redirection to that website. Please save these instructions to Notepad as the internet will not be available to you at certain points of the removal process. Please ensure that there aren't any opened browsers when you are carrying out the procedures below. Make sure to work through all the Steps in the exact order in which they are listed below. If there's anything that you don't understand, ask your question(s) before moving on with the fixes. --------------------------------------------------------------------------------------------- Open HijackThis and click on 'Do a System Scan Only'. Check the following entries (If they still exist, make sure you do not miss any) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://as.starware.com/dp/search?x=w...QbxjCX8bBWUo+B *Please remember to close all other windows, including browsers then click Fix checked.* --------------------------------------------------------------------------------------------- Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky Online Scanner Answer Yes, when prompted to install an ActiveX component. The program will then begin downloading the latest definition files. Once the files have been downloaded click on NEXT Locate the Scan Settings button & configure to: Scan using the following Anti-Virus database: Extended Scan Options: Scan Archives Scan Mail Bases Click OK & have it scan My Computer Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it. Click the Save as Text button to save the file to your desktop so that you may post it in your next reply * Turn off the real time scanner of any existing antivirus program while performing the online scan --------------------------------------------------------------------------------------------- Please reply back with the following: Question about WildTangent Kaspersky Log System Behaviour? __________________ Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum Last edited by forhockey; 07-07-2007 at 11:25 AM.