elf

haha hey greyknight, I didn't think I'd be posting a problem here any time soon, but here goes.

(i'll get a hijack log as soon as possible, but it isn't an immediate problem)

I fixed one of my friends computers the other night (her video drivers some how got uninstalled, and her sound card didn't have the right drivers), and scanned it for viruses and spyware, etc...

She got on and was listening to the radio and it had to download a "plugin" and it ran fine for a few minutes and then icons started popping up...

I ran that trendmicro house call, a few times...and adaware, and spybot...

A grand total of 700+ spyware/virus/adware files, registry files, processes.

I got rid of all of them except an annoying as "Begin2search.com" toolbar. Neither adaware or spybot would find it, so I looked up removal instructions online and followed them, and the toolbar disappeared. The reason there is still a problem (a funny one, in my personal opinion but I think it will start to bug her...I know it would bug me). Everytime the word "sex" or "spyware" is on the screen, it is highlighted and linked to some porn site, or some anti-spyware site (the reason I know it is begin2search is because when you mouse over it, it flashes the link at http://begin2search.com/blah blah blah somelinkhere (not sure the whole link)

If you need a hijack this log to fix it I'll get one next time I go over there, but if you know what to do without it, I'd appreciate it.

__________________


If TSF has helped you, Tell us about it! or Donate to help keep the site up!
I do not subscribe to threads, so if I stop replying, PM me with a link to your thread so I can find it again.

sdavis1225

I was wondering if you rebooted into safe mode and ran all those programs?
is her anti-virus up todate?

elf

yea I went into safe mode and removed like 3 self-perpetuating viruses, and removed HKEY_CLASSES_ROOT\clsid\{52fe5233-367c-4efb-bdd7-0be4d212c107}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{52fe5233-367c-4efb-bdd7-0be4d212c107}
from registry as instructed by http://www.pestpatrol.com/pestinfo/b/begin2search.asp

Antivirus was trendmicro's free online scan, as she does not have any, and I did not want to take the time to get the one the university provides her (plus she has a 3GB harddrive...)

and the toolbar is gone, but it still highlites sex and spyware...which is just fairly humerous

edit: I'll probably try "NoAdware" next as they claim to specialize in removing this toolbar

__________________


If TSF has helped you, Tell us about it! or Donate to help keep the site up!
I do not subscribe to threads, so if I stop replying, PM me with a link to your thread so I can find it again.

sdavis1225

Thinks it worth while for her to get antivirus softare installed before you work
you work on it anymore

elf

Well trendmicro has as fairly thorough scan, and her computer is running fine. I will scan it again and get a hijack this log for everyone to peruse, but its all good (unless someone knows exactly what my problem is without looking which is unlikely)

__________________


If TSF has helped you, Tell us about it! or Donate to help keep the site up!
I do not subscribe to threads, so if I stop replying, PM me with a link to your thread so I can find it again.

greyknight17

I wouldn't get NoAdware since that's a rogueware program. We suggest not using it. Post the HijackThis log file.

__________________
Please do NOT PM me. Post whatever questions you may have in the forum and we will take a look at it when we get to it. If you have waited for more than 3 days, you may then and ONLY then PM me for assistance. I will take a look at it.

Adaware :: CWShredder :: HijackThis :: Panda ActiveScan :: Spybot S&D

Anti-Spyware Tutorial :: Spyware Prevention Tools