| | |
How do I removed hotoffers?
![]() |
•
•
Join Date: Mar 2005
Posts: 3
Reputation:
Solved Threads: 0
•
•
•
•
Originally Posted by dlh6213
Try this to get rid of HotOffers:
Get the Pocket Killbox from here:
http://bleepingcomputer.com/files/spyware/KillBox.zip
Unzip the file to your desktop.
Go offline until this is completed (you may wish to print these instructions).
Boot into Safe Mode and do a search for these files and delete any instances found:
param32.dll
guninst.exe
popup_bl.dll
systr.dll
svrhost.exe
If any could not be deleted, (most likely param32.dll), run Pocket Killbox and paste the full file path of file in the box and click on Delete on Reboot. Click on the button with the red circle and an X in the middle; you will get a message saying File will be deleted on next reboot, Process and Reboot now?, Click Yes to reboot. (Note: the 'file path' will be something like C:\WINDOWS\System32\param32.dll)
scan with hijackthis, and have it fix:
R0 (or R1) - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotoffers.info/this-part-may-vary
Reboot normally and delete any unwanted icons from your desktop.
Empty your Recycle Bin.
Ok..I did all this...why am I still having problems...IT JUST WON"T LEAVE ME ALONE!!! :mad: :cry:
•
•
Join Date: Jul 2004
Posts: 2,964
Reputation:
Solved Threads: 210
Hi Dreamer132, welcome to DaniWeb 
I've split your post into it's own thread per forum rules (http://www.daniweb.com/techtalkforum..._faq#faq_rules)
Get the self-extracting version of HijackThis from here (in line 2):
http://www.malwareremoval.com/downloads.html
Then close any open browser windows, 'Scan and Save Log' with hijackthis, copy the log, and paste it in this thread.

I've split your post into it's own thread per forum rules (http://www.daniweb.com/techtalkforum..._faq#faq_rules)
Get the self-extracting version of HijackThis from here (in line 2):
http://www.malwareremoval.com/downloads.html
Then close any open browser windows, 'Scan and Save Log' with hijackthis, copy the log, and paste it in this thread.
Links to help you help yourself :
Protect Your PC & Avoid Infections -- http://www.daniweb.com/techtalkforums/thread27519.html
Cleanup Procedures & Tools -- http://www.daniweb.com/techtalkforums/thread27570.html
Infection Removal & HijackThis Use -- http://www.daniweb.com/techtalkforums/thread28196.html
Protect Your PC & Avoid Infections -- http://www.daniweb.com/techtalkforums/thread27519.html
Cleanup Procedures & Tools -- http://www.daniweb.com/techtalkforums/thread27570.html
Infection Removal & HijackThis Use -- http://www.daniweb.com/techtalkforums/thread28196.html
![]() |
Similar Threads
- How I removed hotoffers.info (Viruses, Spyware and other Nasties)
Other Threads in the Viruses, Spyware and other Nasties Forum
- Previous Thread: Aurora popups - unoriginal, I'm sorry
- Next Thread: How I removed hotoffers.info
Views: 1110 | Replies: 1
| Thread Tools | Search this Thread |
Tag cloud for Viruses, Spyware and other Nasties
acrobat adobe adware anti-malware anti-virussitesaccessissue antivirus attack avg backtoschoolspeech bar blackhat botnet botnets censorship china commercial commercials conficker connect control crosssitescripting cyber cybercrime ddos e-mafia education email europe exam exploit fake fancheckvirus firefox gaming gumblar halloween herss.exe hijack hosting internet kaspersky legal mail malware mcafee mega-d messagelabs microsoft mobile nazi news obama onlinethreats paedophile parents patch pc phishing police policeprovirusmba-mblockedinternetaccess president pro problem redirect reliability report research risk rogueantivirus rootkit samhain sans school search security seopoisoning software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec system threat trojan unwanted update usa virus viruses vista volume war warning web windows worm yahoo zero-day zeroday






