I had gotten hotoffers.info last night, and after 2 hours of running programs like hijack this, cwshredder, ad-aware, Norton, etc., etc., etc., and none of it working, I FINALLY came across a solution that worked.

:!: Warning: BIG SMACK ON HEAD AHEAD :!:

On the bottom of the page on http://www.hotoffers.info/179/index.html is a link labelled "uninstall info". I clicked it and it lead me to this page: http://www.hotoffers.info/uninstall/index.html. Here's what it said:
{
How to uninstall?

1. You need to save file uninstall.exe from our server.

2. You need to launch this file.

3. Then open regedit.exe in your Windows directory. And find HKEY_CURRENT_USER "Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UninstallHP.

4. Now please delete UninstallHP folder.

5. Now please write in your command field: regsvr32 /u popup_bl.dll

6. Press OK. You're free of this trojan!
}

I downloaded the file (I uploaded it in thread "Another HotOffers Hijack (HJT log incl)" page 2, and it's not letting me upload it again) and ran the file. My Windows went blank, so I had to reboot. After I rebooted, it wasn't changing my homepage anymore. I didn't even need to follow the other steps (although I might, now that I think of it, just to make sure it's ALL gone). I only tried this once and it worked. I'm not interested in getting the trojan again to see if this works every time, so please reply to this post to let me know if it worked for you so that I can feel good about doing my good deed for the day. :cheesy:

Who would have known that actually paying attention to what was on these stupid ad pages would have been at all beneficial?

Ya a couple other sites ive been infected with do that maybe its the law to be removable or something.

Thank you!!!
It really works, and exactly as you've written in your message.I've downloaded the uninstall file and after I launched it windows went blank.After the reboot it was gone.Actually it was still there but when I changed my homepage to about:blank in ie's options menu it disappeared.
I still can't understand how a spyware or trojan or whatever it was lets you to delete itself from your computer. Maybe they have souls and a context of mercy.
Thanks again.... :lol: :lol: :lol:

Well some do others dont kon4ay.biz doesnt have an unistall link

Well....I took the chance of installing the "uninstaller", as I was so freaking tired of dealing with hotoffers......

It looks like it worked, just as the others have said....by big fear is what the "uninstaller" could have installed that I cannot see, but is lying in wait.........*sigh

ReaperVelle

Nice one Ceomoses. Was starting to get 'stressed' - was a real pain. Did what you said and so far so good.
Many thanks
mickeyp321.

Yes, I believe that it is the law to give a way to uninstall or unregister yourself from a site. The only problem is that most of the these things are being done by some of the most unethical people, so most of the times it is not even there, or when they do give you a link, it is at a place that is not easy to see...

If they were a little ethical, they would not have done this shit in the first place. Forcing me to come to their site and popping up some naked pictures will not bring them any businesss - at least not from me. Their site has not find its way into unrestricted zone..

Thanks for the info though. I will try it too. No, I did not read the whole page either, and the first time it popped up a nakedgirl, I blocked the site..

And yes, it seemed that it worked. God only knows what other shit they may installed on my computer through this uninstall.

Thank you for the info though.

And by the way, when I ran regsvr32 /u popup_bl.dll, it gave me a message

"popup_bl.dll is no tan executable file and no registration helper is registered for this file type"

unbelievable, man. It really worked. Thanks a bunch.

If anyone discovers other stuff this uninstaller installs, post it here!

i dont see that link, my hotoffers.info page that pulls up is just porn without a link for that, it is hotoffers.info/192/index.html