Ahhhhh

[JuniorMickey]

Okay techie guys I need help. This is what I get for letting my sister use my computer.... anyways, My IExplorer has been hijacked. I can't get to any website (and some, like my bank will not let me use Foxfire). I ran adaware and spybot. Both came back clean. Ran a virus scan - came back clean. I have two programs showing up on my add/remove programs that I cannot remove. When I attempt to remove them it directs me to a website asking me to download a program to remove this. I know it is total BS and I'm getting really annoyed.

Also, another note, my AIM has stoped functioning. I can sign on but as soon as someone IMs me or I try to IM someone, it shuts down. I uninstalled and reinstalled but it didn't do any good. HELP ME PLEASE!

[Shogun]

If all else fails, try setting the computer back to factory settings with the recovery disc.

[JuniorMickey]

Only have one recovery disk.... supposed to have three

[JacksDad]

Start Windows in Safe Mode to remove the programs. They should also be removed from your registry.
Do you still have my number?
I could stop by after work and kill them if you'd like.

[JuniorMickey]

I do have your number.... can you walk me through removing them?

[JacksDad]

No Sho. She doesn't need to recover.
Just a nasty bug.
We'll get it.

[JacksDad]

I'll try. Gimme a call.

[ukwdwnut]

good luck you 2 :D

[BevW]

No joke...if it's a bug, I know you guys can fix it.
I have a question JM when you're done....are you using Mozilla?

[ukwdwnut]

bev mozilla is another name for firefox

[BevW]

Yup yup yup....I was just wondering if she was using it cos she had said something about trying it out and I wanted to see what she thought.

Mike, do you use it? I keep calling it Foxfire..don't ask why..I have a problem with titles..:lol:

[JacksDad]

I think it was me who called it foxfire.
Senility creeps in. http://www.wdisneyw.com/ubb/tongue.gif

[JacksDad]

JM. Do a search on your computer for 180Search or 180Solutions.
That's the one.
Again do a SafeMode remove and kill it from the reg as well.
180 may not show up in Add/Remove but it should be somewhere on the hd.
That's one of the oldest and nastiest adwares around.

[JuniorMickey]

Thanks JD. MRU picked up like 1200 items but didn't do it. I'll do a search for the other right now

[JuniorMickey]

Nothing on a hd search and nothing in the reg for either of those....

[OKWTink]

The Foxfire Series was a wonderful set of very informative and educational books that came out of Appalachia in the late seventies. They were filled with practical advice. I had the entire set when I was going through my mountain woman phase. :D

Unfortunately, I no longer have them. They were really quite excellent reference tools.

Carry on. :D

[JuniorMickey]

JD Rocks! We managed to fix the problem (via system restore). After this, I highly recommend everyone running on XP set a system restore point for now if all is good with your computer

[JacksDad]

For those who don't know do tech support driving from house to house everyday.
I see so many computers each day I thought JM was on Windows 2000.
(My last call of the day JM, in Weston. A nightmare. :afraid:)
As soon as I found she had XP, problem solved.

Those updates are important. Please use them.
And try not to use Internet Explorer.

[dcfromva]

Do a search on your computer for 180Search or 180Solutions.
That's the one.
Again do a SafeMode remove and kill it from the reg as well.
180 may not show up in Add/Remove but it should be somewhere on the hd.
That's one of the oldest and nastiest adwares around.
JD,
Funnily enough, I discovered some spyware on my computer, too.

All my restore points were gone. (I had some restore points for the 13th and the 14th of Dec because I had just done a restore--but they were all wiped out).

I have run through ad-aware, spybot, and cw shredder, but the spyware still pops right up when I run the IE browser. (I had been planning to run Firefox, but I just didn't get around to it before this incident occurred...Too late, but, I am on Firefox now-- :lol: :lol: )

I did a search for the 180Search or 180Solutions and didn't find anything...but today when I was removing a program, guess what I found on my add/remove program list? "uninstall 180searchassistant"

I tried to unistall it, but it said, "An error occurred while trying to remove uninstall 180searchassistant. It may have already been uninstalled."

What is so strange is that this spyware came up on my computer after I typed in a search request on google and hit "search" ... I didn't hit any of the resultant links from the google search--but the spyware just came up. I tried to just close the pop-up windows, but it didn't stop it from becoming installed. I wonder if it was coincidental? I know you take your chances with an unfamilar site, but it was totally unexpected that it happened when I was just doing an initial search. (I did report it to Google--and they said it didn't have anything to do with their site--it was coincidental... :rolleyes: )

Anyhow, do you know how to get rid of the uninstall 180searchassistant thingie?

Thanks,
DC :ears:

[dcfromva]

.... :whistle:

[JacksDad]

If it is 180 or a cousin it's still in your registry.
I'm not comfortable walking people through the registry.

If you can'y restore try doing a repair off your XP disk.
Not a restore, but a repair.

Do you know how to do a print screen?
I'd like to see what's running in the background.

[dcfromva]

Do you know how to do a print screen?
I'd like to see what's running in the background.

Um...no. (Is that like just taking a picture of what is on the screen? There must be a button around here somewhere....)

Have you heard of software called "Regisry Mechanic" by PC Tools Software? (I wouldn't mind purchasing a copy of the software if I had any inkling that it was a good product...)

-DC :ears:

[JacksDad]

Just another piece of software to slow down your computer.
Hold on.
I'll find what you/I need right now.

[JacksDad]

Download this. (http://majorgeeks.com/downloadget.php?id=3155&file=9&evp=3304750663b552982a8baee6434cfc13)

Post your logfile, please attach it as a file. To do this save the log file and select Go Advanced and then Manage Attachments to upload it to this thread. It is very important that you close all running programs including your web browser (this includes Internet Explorer), email, items in the tray before running Hijack This!

Give us some time to examine it.
I have no life. :wink:
I may see it right away.

[dcfromva]

JD,
I am going to see if I can find my XP disk to see about the repair option. Thanks for the help. :)

-DC :ears: