Take your computer, throw it out the window and buy a Mac.
Did you post your Hijack This log to a tech forum for expert help? I don't have the links at hand, but I believe you can post your Hijack This log to the SpywareWarrior.com forum. Also, I recall stumbling upon a forum called "Castlecops" to which people were posting Hijack This logs (I think).
I had a problem last weekend, and it took a washing of Ad-Aware AND Norton anti-virus. I was advised that you should also run an anti-virus along with your anti-spyware. It worked for me.
I've always thought their should an electronic message sent from your computer along with the spyware that reads: "Unauthorized access to this computer will result in fees being incurred. This is your only warning. Should I find indication that you have returned to my computer, you will be charged $1,000.00."
Then record the event somehow, get the name of the person at the company and sue them in small claims court. Get the judgment and go after them.
I know you can get in touch with double-click. I've talked to them before.
Not sure my idea will work but when I used to get repeated telemarketing calls and this is what I did.
I would get a name however I could. Then I would tell that person I was a marketing review service. Their first generated an invoice but I am waving that because they were not aware of our service. I told them if they called again, however, they would be charged at my normal rates of $500.00 per call. If they did not pay, I would go to small small claims and file suit against them personally and their company, making sure to let I report unpaid bills to the credit bureau and that it will show up on their credit report as an unpaid judgment.
It got the attention of a few of them. Others cursed me out.
There was a ton of this type of stuff on them. You have to have a good idea what the usual windows and system32 directory looks like in order to pick out the problem files.
These files have to be deleted, if you're lucky, in safe mode, and most likely at the dos prompt.
Or, you can boot up with a linux live-CD and delete files on the windows drive that way. If you have and know what ERD commander is, you can boot into an XP environment and get to enough of the registry on your infected drive to clean it up.
In short, if you don't have data you just have to have, fdisk and re-install.
A backup image program like Acronis or ghost is a lifesaver, BTW.
HTH longjack
If they are coming back after a reboot they are in the run/runonce, autoexec.bat, startup, or even win.ini files - which you can access via msconfig and/or regedit.
Also, here's a few quick things to check (assuming Windows XP):
When you get the problem fixed, immediately switch to Opera or Firefox and stop using MS Internet Explorer immediately! And be careful what you download and install.
Good luck.
Take a couple hours to reformat and install your software with a good fire wall.
Don't ever buy a mac, the only reason they are not full of viruses today is that so few own them, that hackers don't yet bother to write for them.
More than likly Mac will go away completly in ten years and even the hackers know it.
I used CWS shredder to help remove a nasty cool websearch trojan on my system about a year ago, I switched to Firefox after that.
It put an executable "ie.exe" in my root directory that would do all of its nasty work after rebooting, regardless of resetting all of my browser settings and enabling Hijack this to stop it. (It didn't)
If one of these scumware programs won't let you delete a suspicious executable, just reboot into safe mode and then delete it.
I could probably spend 10000 words telling you how to get rid of these pests via registry editing in safemode.
That said, look at my FR homepage, there may be some tools to help. Pest Patrol, spysweeper and the MS beta tool may be your answer. My FR homepage has some links.
Browser Wars, take two various FR links | 12-22-04 | The Heavy Equipment Guy http://www.freerepublic.com/focus/f-news/1306815/posts ...and let your compiler of links drop out of Lurk & Link mode for comment and advice: Ditch IE. Honest to God, almost anything else will give you fewer problems. Try and compare- use IE, then run Ad-Aware and Spybot Search & Destroy... then try another browser and repeat. You will be stunned at the garbage IE attracts. Keep your OS updated & patched. Run a hardware firewall-- with today's LAN's, it's easy. You need a hardware firewall. Use a software firewall, too-- if you don't, you'll never know how many times your PC is trying to "phone home" and send your info across the web. |
Find the download for Killbox.exe
You can put any file name in the application, and it will stop it (or "kill it") at every boot time.
I got this advice from one of the online help sites---it was the ONLY thing that stopped a trojan on my computer when all the other stuff wouldn't work.
BUMP FOR READING AT HOME
I had a spyware problem a while back (don't remember the name but it was not adwave) and Ad-Aware and Spybot were not able to remove it either so I did some research. The problem was that there was a shareware toolbar of some sort that was installed on the computer. So, I went to the control panel, then add/remove programs and uninstalled the IE toolbar. After that shareware program was deleted, Ad-Aware/Spybot was able to remove the spyware for good and it hasn't come back. Maybe you have a shareware program (screensaver, etc.) that keeps reinstalling the garbage.
FYI