 |  |  |  |  |  |  |  |
Pop-ups and redirection
 |
Hrm, that didn't work as well as it should have...
Let's try this:
1. Download the 14-day trial version of Webroot's Spy Sweeper. When you install it, just choose the "Typical" option, follow the prompts, and then run the program.
- Click on "Options" and then click on "Update Definitions" under the Program Options tab.
- Under the Sweep Options tab, select ALL options under 'What to Sweep'.
-Click the "Sweep" icon and then "Start" to begin scanning.
- When the scan completes, click Next to automatically quarantine all detected items.
- Click the Results icon, select Session Log, and then click Save to File. Save the scan results to your desktop and close Spy Sweeper.
2. Run HijackThis again and have it fix the following entry if still present:
O20 - Winlogon Notify: ShellScrap - C:\WINDOWS\system32\n2l80c3uef.dll
3. Reboot into safe mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up)
- Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and uncheck "Hide protected operating system files" and "Hide extentions for known file types".
- Locate and delete the following files if still present:
C:\WINDOWS\system32\n2l80c3uef.dll
C:\WINDOWS\system32\iieshare.dll
C:\WINDOWS\system32\m2820cloefqc0.dll
C:\WINDOWS\system32\f00olad31d0.dll
- Empty your Recycle Bin and reboot normally.
4. Run HijackThis again and post the new log. Also post the Spy Sweeper scan report.
Let's try this:
1. Download the 14-day trial version of Webroot's Spy Sweeper. When you install it, just choose the "Typical" option, follow the prompts, and then run the program.
- Click on "Options" and then click on "Update Definitions" under the Program Options tab.
- Under the Sweep Options tab, select ALL options under 'What to Sweep'.
-Click the "Sweep" icon and then "Start" to begin scanning.
- When the scan completes, click Next to automatically quarantine all detected items.
- Click the Results icon, select Session Log, and then click Save to File. Save the scan results to your desktop and close Spy Sweeper.
2. Run HijackThis again and have it fix the following entry if still present:
O20 - Winlogon Notify: ShellScrap - C:\WINDOWS\system32\n2l80c3uef.dll
3. Reboot into safe mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up)
- Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and uncheck "Hide protected operating system files" and "Hide extentions for known file types".
- Locate and delete the following files if still present:
C:\WINDOWS\system32\n2l80c3uef.dll
C:\WINDOWS\system32\iieshare.dll
C:\WINDOWS\system32\m2820cloefqc0.dll
C:\WINDOWS\system32\f00olad31d0.dll
- Empty your Recycle Bin and reboot normally.
4. Run HijackThis again and post the new log. Also post the Spy Sweeper scan report.
"May the Wombat of Happiness snuffle through your underbrush."
- Ancient Aborigine blessing
Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.
However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
- Ancient Aborigine blessing
Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.
However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
Thanks for the help all, you guys truly know you're game 
|
Similar Threads
- pop ups wont stop (Web Browsers)
- wow 37 pop ups (Web Browsers)
- Microsoft IE Offline Pop-ups (Web Browsers)
- Hijack this log - can't get rid of pop ups (Viruses, Spyware and other Nasties)
Other Threads in the Viruses, Spyware and other Nasties Forum
- Previous Thread: Desktop hijacked - spyware
- Next Thread: Red Circle Icon with white x
Views: 2025 | Replies: 11
| Thread Tools | Search this Thread |
Latest Viruses, Spyware and other Nasties Posts
Related Forum Features
Tag cloud for Viruses, Spyware and other Nasties
adobe adware anti-malware anti-virussitesaccessissue antivirus apple attack audio avg backtoschoolspeech bar blackhat botnet botnets china combofix commercial commercials conficker connect control crosssitescripting cyber cybercrime cyberwarfare ddos domains e-mafia email europe exam facebook fake fancheckvirus gaming gumblar hijack internet iphone kaspersky legal logfiles mail malware mcafee mega-d messagelabs microsoft mobile msn news norton obama panel parents pc phishing police policeprovirusmba-mblockedinternetaccess president privacy pro problem redirect redirecting reliability report research risk rogueantivirus rootkit scareware school search security seopoisoning sites software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec system teen threat trojan unabletoaccessanti-virussites unwanted update usa virus viruses vista volume vulnerability warning windows worm zero-day
