943,972 Members | Top Members by Rank

Ad:
Apr 27th, 2005
0

Im infected with the Hotoffers.info bug

Expand Post »
Hello everybody,
I am working on a computer that has this hotoffers bug wich keeps placing porn links on the desktop. I cant get on the internet with the infected computer, it only tries to go to their website and zonealarm block them out. Im using my jump drive to xfer files onto the infected computer. I also would need a link to what ever programs I would need to post the info you guys would need.
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
Chilkat is offline Offline
1 posts
since Apr 2005
Apr 27th, 2005
0

Re: Im infected with the Hotoffers.info bug

Hotoffers infections have been a pretty popular topic here in the last few months. Please review the suggestions given in our recent hotoffers-related threads and see if one of those solutions works for you:

http://www.daniweb.com/techtalkforum...earchid=373139

If you cannot find a fix that works, or if you have any questions about the procedures described in those threads, please repost here. When you do, it would be a good idea to give us a HijackThis log as well:


Download HijackThis onto your jump drive:

http://www.stevewolfonline.com/Downl...HijackThis.exe

You should be able to run HJT right from the jump drive, but if not, create a folder on the hard drive for HJT and move it there. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.

Run HijackThis, but do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...". Save the log in the folder you created for HiajckThis, open the log in Windows Notepad, and cut-n-paste the entire contents of the log here. The log contents will tell us a lot about what "nasties" have crept into your system, and once we analyse the log we can tell you what to do from there.
DMR
Team Colleague
Reputation Points: 221
Solved Threads: 369
Wombat At Large
DMR is offline Offline
6,439 posts
since Dec 2003
Apr 28th, 2005
0

Re: Im infected with the Hotoffers.info bug

DMR, your DaniWeb link doesn't work

Chilkat, try this to get rid of HotOffers:

Boot into Safe Mode and do a search for these files:

param32.dll
guninst.exe
popup_bl.dll
systr.dll
svrhost.exe


Delete them, and then reboot normally

Delete all the HotOffer icons from your desktop.

Empty your Recycle Bin.

Get HijackThis as DMR suggested, and post the log as there will probably be some more cleanup to do.
Team Colleague
Reputation Points: 63
Solved Threads: 213
Posting Maven
dlh6213 is offline Offline
2,962 posts
since Jul 2004
Apr 28th, 2005
0

Re: Im infected with the Hotoffers.info bug

Quote originally posted by dlh6213 ...
DMR, your DaniWeb link doesn't work
Again??!!
I even made sure to test the link after I posted, because this has happened to me a few times before. I'll have to ask Dani if she can find out what makes search-result links "go stale"....
DMR
Team Colleague
Reputation Points: 221
Solved Threads: 369
Wombat At Large
DMR is offline Offline
6,439 posts
since Dec 2003

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Viruses, Spyware and other Nasties Forum Timeline: I know it is stupid but how do I get rid of a downloader trojan
Next Thread in Viruses, Spyware and other Nasties Forum Timeline: is this where i post hjt





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC