Geese,
Well, I spent all morning trying to follow all those instructions. As long
as I've been online, which is since '95, I've learned alot, but still I'm
probably very low on the totem pole in knowing the ins and outs of how these
work. The first part was easy. I deleted temp files. I then tried to put
hijack this in it's own file to save. That was tough. I found folders and
created a new one, but had no clue how to move this program. Finally, I
went into the program itself and found something that said, move this
folder, so I did that, but today when I try to find the program, I have to
hit search as it's not where I thought it was.
Then, I went ahead and clicked on everything mentioned and all the
optionals. I thought I read each one carefully, but maybe I checked a wrong
one, as I somehow deleted my Outlook Express, which is why I haven't been
online today. I scanned with that program from housecalls and it found 5
trojans. I dleted the files. I went into hidden files and folders, but
could only find 5 out of 7, so deleted 5.
The end result was good and bad. I lost Outlook Express, everytime I hit
search for the hijack program, a certain program kept installing and I
couldn't get rid of it. I still had the toolbar on the bottom. That one
might be because I couldn't find that hidden file called, "toolbar". I was
still getting some whitebrite pop-up and that annoying "Stop pop-up's" Ad.
I also tried to get into another important program, and couldn't get in
because something wasn't installed. The good was, I got rid of all the
trojans, the computer seemed faster and some of the junk was gone.
Unfortunately, the bad outweighed the good. After trying different things,
I just did a restore to April 1. I have my Outlook back, probably all my
trojans, a million pop-ups, and all those icons are back in favorites, on my
start page and on the bottom page.
I have learned a few things and will try again. First, I'm running my
antivirus, then, I'm going to run ad-aware and spy-bot, and that housecalls.
Then, I'll take out a little at a time and post another log.
Thanks for getting back to me. I do use roboform and don't think I could
live without it.
I do appreciate any thoughts. I'm under Linda L. I do realise that no one
has to help and they're not
getting paid. That's why I would feel guilty posting a second time. I just
don't think that too many people will read as far as page 5. It seems alot
of people have alot of problems. There's even a newer one on page 1 that
has my same problem with the omegasearch. And I'm going to sleep shortly
anyway, so won't try anything new until tomorrow. Daylight savings time
tonight so it's almost 1 am here.
page
Well Linda, it looks like you went to bed a bit early. Someone replied
to your post on the hjt forum & the entries look safe to remove.
I did notice a few that you might want to ask them that he didn't
mention but maybe Trend's house call scan will remove it all.
the O4 - HKLM\..\Run: [iefeatures] C:\WINDOWS\System32\iefeatures.exe
refers to a trojan called TROJ_POPMON.A Did you ever have a lycos side
bar installed w/o your consent?
The O4 - Global Startup: Microsoft Office.lnk = C:\Program Files
\Microsoft Office\Office10\OSA.EXE could be ticked to free up some of
your resources. It is a memory hog.
Did you install the Robo Form program ? Roboform(dotcom)If so ok, if not
I'd uninstall it.
Also, put the Hijack This prog in it's own directory like C:\hjt so it
can create backup files of what's deleted, it can't do that in a temp
dir, & you don't want all that crap on your desktop