View Single Post
  #5 (permalink)  
Old 17-06-2007, 11:35 PM
Neal's Avatar
Neal Neal is offline
Senior Member
 
Join Date: Sep 2005
Posts: 5,524
Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!
Re: CiD adware/popup removal

Hi,


1. Run Spybot-S&D in Advanced Mode.
2. If it is not already set to do this Go to the Mode menu select "Advanced Mode"
3. On the left hand side, Click on Tools
4. Then click on the Resident Icon in the List
5. Uncheck "Resident TeaTimer" and OK any prompts.
6. Restart your computer.



Run hijackthis and click on scan only button and put checks next to these:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

O2 - BHO: (no name) - {598F4775-6FB6-477B-9842-E0426824E077} - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DP27.dll (file missing)

O4 - HKCU\..\Run: [stop remote] C:\DOCUME~1\JESSIC~1\APPLIC~1\TEAMME~1\dalestorewa it.exe

O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbar...p=ZJxdm047YYGB




Close all windows and browsers even this one and click on fix checked




With nothing open but hijackthis click on "fix checked"


Now reboot into safe mode by tapping your F8 key upon restart and safe mode screen appears, select safe mode and press enter.


Navigate to these files or folders using Windows Explorer (OR Start -> Search) and delete (if present):



DELETE FOLDERS

C:\DOCUME~1\JESSIC~1\APPLIC~1\TEAMME~1 > folder starts with TEAMME


Reboot normal mode and...


1. Download this file - COMBOFIX
2. Double click combofix.exe & follow the prompts.
3. When finished, it will produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall.


Post a new hijackthis log also please.
__________________
Stalking and killing Spyware

Have we helped you? Please consider a donation to help keep D-A-L free. Click on donate below



MALWARE: READ FIRST Procedures:
|_ SpyBot V1.5 _|_ HijackThis Log __V2.0.2 _|




ASAP: promoting a high standard and quality of security support no matter where you seek help.

Reply With Quote