Korean Job Discussion Forums

[kangnamdragon]

Somehow this new toolbar has appeared on my computer and I don't know how do get rid of it or what it is. I cannot find it in the program files or the remove software tools.

Sometimes it changes my homepage to mysearchnow

sometimes it changes my Yahoo Companion tool bar. When I get rid of it I right click on the tool bar and there is something called "Bat army defy".

Sometimes when I make a new page or even change pages it is there, and sometimes not.

I has added may things to my favorites in IE that I don't want and when I try to erase them my computer says I cannot because they are in use even though I have no other windows open.

Please help me get rid of this monster. Thank you.


P.S. I am using English Windows XP on this computer.

[the_beaver]

run->regedit->search->mysearch*

Then erase the bastard.

[kangnamdragon]

[Nowhere Man]

Adaware and spybot both take it down.

I first got it bundled with Morpheus.

[discostar23]

Happened to me too. I found it in my add/remove programs but i removed it and it stayed there. Can't help you...sorry

[kangnamdragon]

Sorry, nothing has worked yet. Any more ideas?

[Demophobe]

Download this program, then do the following:

http://www.spychecker.com/program/hijackthis.html


1) Restart in Safe Mode (see below)
2) Enable Hidden Files (see below)

Locate and delete the following:

C:\PROGRAM FILES\1option <--this folder
C:\PROGRAM FILES\INTERB~1 <--this folder

Note: if "access denied" message, right-click the folder
Select: Properties, uncheck: "Read only" and "Hidden" (if exists)
Click Apply, and then delete it.

While still in Safe Mode:

Start | Run (type) "%temp%" (no quotes)
Completely delete the entire contents of that "temp" folder.

While still in Safe Mode:
Close all open windows, rescan with HijackThis and "Fix checked" the following:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearchnow.com/searchbar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://mysearchnow.com/searchbar.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mysearchnow.com/passthrough/index.h....bbc.co.uk/news
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://mysearchnow.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearchnow.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://mysearchnow.com/searchbar.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://mysearchnow.com/searchbar.html
O2 - BHO: (no name) - {549ABD6E-D428-C0C7-4E64-4DC3BFE1A97B} - C:\PROGRA~1\1option\LogExit.dll
O3 - Toolbar: jump scr - {5A3A6E74-3C63-1F45-A313-3C04D02E4039} - C:\PROGRA~1\1option\LogExit.dll
O4 - HKLM\..\Run: [AXISLONG] C:\PROGRA~1\INTERB~1\boltnewvc.exe

Restart normally and then ...

Reconfigure Ad-Aware for Full Scan:
Please update the reference file following the instructions here:
http://www.lavahelp.com/howto/updref/index.html

Launch the program, and click on the Gear at the top of the start screen.

Click the "Scanning" button.
Under Drives & Folders, select "Scan within Archives".
Click "Click here to select Drives + folders" and select your installed hard drives.

Under Memory & Registry, select all options.
Click the "Advanced" button.
Under "Log-file detail", select all options.
Click the "Tweaks" button.

Under "Scanning Engine", select the following:
"Include additional Ad-aware settings in logfile" and
"Unload recognized processes during scanning."
Under "Cleaning Engine", select the following:
"Let Windows remove files in use after reboot."
Click on 'Proceed' to save these Preferences.
Please make sure that you activate IN-DEPTH scanning before you proceed.

After the above post a fresh log ...
________________________________________

[Dalton]

cexx.org

Yet another link for you. This is just a great message board I found that's helped me when I had a nasty prog on my sysytem. I just read through it, never registered.

Other spyware removal prevention progs are Spyblaster and Coolweb search removal tool. Spyguard (part of spyblaster) lets you know immediately if some ahole is trying to change any ie settings and gives you the option to accept or refuse.

Hijack this is worth getting too. With this tool you become familiar with what's running on your pc and then you can spot aliens pretty quickly without help. You'll find links for this and other stuff at cexx.org

Don't sweat the name, it doesn't imply anything. These guys are serious. Never by an HP pc or Dell pc according to them. They are or were discussing starting class action law suits against them because of the spyware they install on their prefitted pc's.

[Demophobe]

I believe that you can disable third-party installs in the internet explorer "advanced" tab in "internet options".
I may be lucky, but I have never been hijacked. Some of them are benign, but some of them actually take you to illegal areas. There was a lawsuit some time back against one of these companies.
Security on internet explorer sucks.
Get mozilla...firefox is the basic browser, and the standard download includes a mail client, news groups and chat. A great browser, without all of the security problems.

http://www.mozilla.org

[shawner88]

I got something called adwave earlier....kept opening up a sponsered search window whenever i did a google search. Check control/alt/delete and see if something called wintools is running. If it is,

boot into safemode (f8 while starting)
search for wintools, delete the 2 files, reboot....