yes, hello, ok, heres the problem, i have ran spybot s&d, found stuff and deleted it, malewarebytes isnt finding anything, but, when i run hijackthis it pops up the "urlsearchhook ( no name) with a bunch of numbers (no file), there are teo of them, they both pretty much look the same, except the second one says urlsearchhook a couple different times in the same line, like it repeat itself on the line ok, well when i delete them they go to the backups, but, there still also in the scan again, everytime i try and delete them they still pop back up on the scan, also, all the backups that i delete, when in the backups, come back in the backup folder also, they go away, but when i leave the backup and go back to it, there all right back there again, there are a couple other files i deleted that are in the backup folder that dont show up on the scan anymore but still pop up in the backups even after i delete them, bascially nothing will leave the backups, and i cant get rid of the urlsearchhook crap, i know there viruses, i have looked them up, if there not please inform me otherwise, if anyone has any advice or knows what to do please let me know, ty
ok, i ran avira, it found 52 suspected malware, all pretty much temporary internet files, html's, they were all quarantined and then deleted, but, then i ran hijackthis again, and the 2 URLsearchhook's were there, not 1 but 2, its in the scan report above, the same as before, but see, when i delete them they still are in the scan but they also do show up in the backup folder, when i delete anything from the backup's they all apear right back when i leave and go back, no matter how long i wait to go back, even other files i have deleted from the scan wont stay deleted from the backups. So, thats my basic issue, getting rid of the urlsearchhook's from the scan and keeping the files i delete that show up in backups stay deleted..please someone help, lol..ty for whomever assist me.. rj
here is everything that was on the log i just saved after the hijackthis scan..also a couple bho's (no name)'s came up again, i cant get the backups to stay deleted, every time i delete them they come right back when i go back in there, every time, grrrrr,..please help.
Logfile of HijackThis v1.99.1 Scan saved at 4:22:49 PM, on 3/15/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791)
lol, i dont know how that happened, the first scan i did in this post was with hijackthis 2.0, but i deleted it when i tried another program, but forgot i still had the old version there so when i scanned with hijackthis i didnt realize it was the old one, anyway, here is the scan, theres alot different this time than the first scan now, but like i said, my main question is why wont the backups stay deleted and how do i get these stupid urlsearchhooks (na name) off the scan and my pc, they go to the backups when i delete them but they come right back up on the scan, its wierd cause now theres like 6 or 7 urlsearchhooks in my backups for hijackthis because like i said they go to the backup when i delete them but not off my pc, lol..anyway here it is...oh, i also did the regisrty cleaner program but it didnt get rid of the url's either, hope you can help, lol.thanks again. rj
Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:22:01 PM, on 3/15/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal
You will have to disable Spybot's Teatimer before we begin, as it will interfere with the fix. To do this can you start Spybot and go to the Mode button and select Advanced. Go to Tools > Resident and uncheck the box next to Tea-Timer. Make sure that the icon in the system tray is no longer there. If it is, just right click on it and select "Exit". Download ResetTeaTimer.bat. Double click ResetTeaTimer.bat to remove all entries set by TeaTimer. Do not forget to re-enable teatimer when we are done :). If teatimer gives you a warning afterwards that some changes were made, allow this instead of blocking it.
Programs like SUPERAntiSpyware, may interfere with the following fix, so we need to temporarily disable it.
Right-click on the SUPERAntiSpyware icon in the system tray.
Choose View Control Center... "Preferences/options" button/tab.
On the General and Startup...tab, uncheck, "Start SUPERAntiSpyware when Windows starts"
click Close to exit.
Don't forget to enable your SUPERAntiSpyware protection, when your computer is clean.
Go to Add/Remove programs and uninstall the following, if present:
Viewpoint Manager,Viewpoint Media Player,Viewpoint Toolbar
The above could appear anywhere within the entry. Be careful not to remove any personal or system software.
Scan with HijackThis and then place a check next to all the following, if present:
im sorry but when i click on the link you have there for "resetteatimer.bat, it says the link is broken and i cant find it elsewhere on the web, or it shows another link called "subratam.org and when i go to that link theres no teatimer link like you showed me, what can i do
Just disable it as normal and make certain it is not running in task manager before doing the fix. I have the reset tea timer on pc at home, so if the above does not work, I will upload it for you to try again.
im sorry, i dont wanna sound like an idiot, but i dont understand what your saying now, if i follow the steps you provided i need the resetteatimer.bat program thing to finish everything, what do you mean just disable it, disable what?
ok, your probably gonna be tired of tryinna help me, lol, but what you just gave me i didnt see anything bout teatimer, the bottom links are just scan programs, the top one just took me to that proffesional page or whatever it is and they had a bunch of programs listed on the left of there page but nothing bout tea timer, do i need the tea timer thing to finish what you have told me to do in the beginning?
Younjust need to manually disable Tea-Timer for the period of time you need to follow the rest of the instructions I gave. If you do not disable it, hijackthis will not be able to 'Fix.' That is why I said I would upload the resetteatimer.bat file if you had trouble disabling it yourself.
here is the new scan i did, because i just deleted superantispyware after uploading another program called ad-aware which i rather have, and for some reason, i dont know if it was one of the items ad-aware found but the urlsearchhook i couldnt get rid of before isnt there anymore, watch, here is the new scan after deleting what you told me to ok, please tell me if you see anything else that could be something bad, thanks
Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 9:51:33 PM, on 3/19/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal