Computing.Net > Forums > Security and Virus > allaboutsearching.com has taken ove

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

allaboutsearching.com has taken ove

Reply to Message Icon

Name: thedougster
Date: March 25, 2004 at 15:47:54 Pacific
OS: Windows XP Pro
CPU/Ram: 2.2G / 512M
Comment:

When I open up IE, I get:
- many new popup windows
- the main screen goes to "allaboutsearching.com"
- one of the popups is a giant toolbar on the bottom quarter of the screen
(titled "allaboutsearching.com/passthru/popupbaropener.html")

It previously also created a floating small toolbox with buttons but, at least for
the moment, I have gotten this to stop. Using Ad-Aware, hijackthis, etc. I have
been able to get the problem to go away. However, as soon as I reboot and
re-login, the problem comes back.

Thanks in advance for any help!!!
Doug



Sponsored Link
Ads by Google

Response Number 1
Name: MrCharlie
Date: March 25, 2004 at 16:48:36 Pacific
Reply:

Let's try the easy way first, there's an uninstaller available. I downloaded and tried it, see OK - try it. If no luck, post a HJT log of your system.
Uninstaller
HiJackThis and Instructions


0

Response Number 2
Name: thedougster
Date: March 25, 2004 at 18:35:24 Pacific
Reply:

Thanks...the toolbars are now gone and allaboutsearching.com seems to be gone (I hope!).

I still have a few problems:
- After initial bootup and initial startup of IE (all ok), when I first try to go to a new website I get a bunch of popups
- I think I have the "look2me" trojan. I have the "msg121.dll" file and it takes about 3 minutes to login. Plus I am unable to get rid of it even by running "kill2me" since the "file is in use".

Any ideas?

Thanks again for your help on this!!!
Doug


0

Response Number 3
Name: blender
Date: March 25, 2004 at 20:53:31 Pacific
Reply:

Doug

Go to:

http://cexx.org/lspfix.htm

Download the lspfix.exe file (save it)
Dont proceed with next step until you have the lspfix.exe file (you could break internet)

Next go here:

http://spywareinfo.com/~merijn/downloads.html

Download kill2me.zip to desktop
Go offline
Unzip kill2me.zip
Double click kill2me.exe to run (your desktop icons, taskbar will dissapear for a short time...thats normal)

Now go to where you saved lspfix.exe

Double click to run
Check "I know what I am doing"
Place in the remove pane all instances of inetadpt.dll and nothing else, click finish. If kill2me has removed inetadpt.dll, just click finish.

Clear out all temporary internet files including offline content.
Clear out the contents of c:\windows\temp
Delete the inetadpt.dll file from:
C:\windows\system32\inetadpt.dll <-this file

Reboot and rescan with ad-aware.
For extra settings in ad-aware; set it up according to this help page for best affects:

http://www.lavahelp.com/howto/fullscan/index.html

Use the custom scanning options (not just smartscan)

If ad-aware finds junk...let it remove what it finds and reboot.

Let us know if all is ok.
______________________________________


I never give up!

Windows Update


0

Response Number 4
Name: MrCharlie
Date: March 26, 2004 at 15:18:51 Pacific
Reply:

If you still have problems, post a HiJackThis scan of your system and we'll clean up the rest of the 'junk'.


HiJackThis and Instructions


0

Response Number 5
Name: thedougster
Date: March 27, 2004 at 05:00:13 Pacific
Reply:

Thanks to all!!! The problem is fixed.


0

Related Posts

See More



Response Number 6
Name: jcmansu
Date: March 29, 2004 at 14:14:01 Pacific
Reply:

how do you get rid of this if it has taken over your computer and wont let you online anymore. How can you fix this offline


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: allaboutsearching.com has taken ove

*start-space.com help! www.computing.net/answers/security/startspacecom-help/7783.html

URL Has Taken Over Desk top www.computing.net/answers/security/url-has-taken-over-desk-top/22776.html

HotSearchBox has taken over! www.computing.net/answers/security/hotsearchbox-has-taken-over/12967.html