Im infected with the Hotoffers.info bug

[Chilkat]

Hello everybody,
I am working on a computer that has this hotoffers bug wich keeps placing porn links on the desktop. I cant get on the internet with the infected computer, it only tries to go to their website and zonealarm block them out. Im using my jump drive to xfer files onto the infected computer. I also would need a link to what ever programs I would need to post the info you guys would need.

[DMR]

Hotoffers infections have been a pretty popular topic here in the last few months. Please review the suggestions given in our recent hotoffers-related threads and see if one of those solutions works for you:

http://www.daniweb.com/techtalkforums/search.php?searchid=373139

If you cannot find a fix that works, or if you have any questions about the procedures described in those threads, please repost here. When you do, it would be a good idea to give us a HijackThis log as well:

Download HijackThis onto your jump drive:

http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe

You should be able to run HJT right from the jump drive, but if not, create a folder on the hard drive for HJT and move it there. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.

Run HijackThis, but do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...". Save the log in the folder you created for HiajckThis, open the log in Windows Notepad, and cut-n-paste the entire contents of the log here. The log contents will tell us a lot about what "nasties" have crept into your system, and once we analyse the log we can tell you what to do from there.

[dlh6213]

DMR, your DaniWeb link doesn't work :(

Chilkat, try this to get rid of HotOffers:

Boot into Safe Mode and do a search for these files:

param32.dll
guninst.exe
popup_bl.dll
systr.dll
svrhost.exe

Delete them, and then reboot normally

Delete all the HotOffer icons from your desktop.

Empty your Recycle Bin.

Get HijackThis as DMR suggested, and post the log as there will probably be some more cleanup to do.

[DMR]

DMR, your DaniWeb link doesn't work :(

Again??!!
I even made sure to test the link after I posted, because this has happened to me a few times before. I'll have to ask Dani if she can find out what makes search-result links "go stale"....