PING - siljaline

  • Thread starter Thread starter PA Bear
  • Start date Start date
P

PA Bear

Please drop in on our little party at "urlmon.dll error on IE6" (this
newsgroup).

Anne has finally been able to run 'hijackthis' and has posted results.
These look suspicious to me but you and Tony are the pros:

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL =
http://www.ewebsearch.net/sp.htm

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL =
http://www.jetseeker.com/ie/

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.ewebsearch.net/sp.htm

O2 - BHO: (no name) - {1F48AA48-C53A-4E21-85E7-AC7CC6B5FFA7} -
C:\WINDOWS\TEMP\WINNDKJ.DLL
 
Please drop in on our little party at "urlmon.dll error on IE6" (this
newsgroup).

Anne has finally been able to run 'hijackthis' and has posted results.
These look suspicious to me but you and Tony are the pros:

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL =
http://www.ewebsearch.net/sp.htm

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL =
http://www.jetseeker.com/ie/

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.ewebsearch.net/sp.htm

O2 - BHO: (no name) - {1F48AA48-C53A-4E21-85E7-AC7CC6B5FFA7} -
C:\WINDOWS\TEMP\WINNDKJ.DLL
Click to expand...

Bear - "preliminary findings" - more later...
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL =
http://www.ewebsearch.net/sp.htm

Spyware "dialer" - Hijack This should be used to remove all traces of this item.

SamSpade Safe Browser
<quote> from source: <script>
Click to expand...
window.open("http://connect.online-dialer.com/connect.php?did=od-teen238",
*uckingdrocher",
"x=5000,top=5000,y=5000,left=5000,height=10,width=10,directories=1,toolbar=1,addressbar=1,resizable=1,menubar=1,scrollbars=1");
</script>

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL =
http://www.jetseeker.com/ie/

"jetseeker" = http://www.doxdesk.com/parasite/TinyBar.html Spyware & Virus!

Can't run the BHO list from Spywareinfo, site seems to be down at this writing.
I'll look up the unknown BHO later.

HTH



--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_
 
From Tony Klein's BHO List:

Browser Helper Object:
CLSID: {1F48AA48-C53A-4E21-85E7-AC7CC6B5FFA7}

Status: X - Spyware/Malware

Filename(s): win+four random letters.dll
Description: ToolbarCC/Rnd
Link: http://www.doxdesk.com/parasite/ToolbarCC.html

Henri - sorry for the duplication - just finishing off.

Bear! If you need anything else, Ping me again or post s'more in the thread.


--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_
 
As I suspected. Thanks again.

~PAB
Click to expand...

You're welcome, anytime.


--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_
 
Back
Top