Computing.Net > Forums > Security and Virus > drusearch/casino icons/porno pop up

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

drusearch/casino icons/porno pop up

Reply to Message Icon

Original Message
Name: dddddde
Date: June 29, 2004 at 13:33:20 Pacific
Subject: drusearch/casino icons/porno pop up
OS: XP SP1
CPU/Ram: not sure
Comment:

i've been having the worst time with this scummy adware.

my homepage keeps getting changed to either drusearch.com/user6 (or something similar to that) or about:blank. i am also getting a lot of pop ups, including everyonce in a while a pop up for something called 'casino pallazzo' (sp?) that installs shortcuts on my desktop. i am also getting extremely pornographic popups, some of which are fullscreen (i can't let my 8-year-old neice on the computer anymore, i'm afraid).

does anybody else have any similar symptoms? any suggestions? thank you all.



Report Offensive Message For Removal


Response Number 1
Name: dddddde
Date: June 29, 2004 at 13:35:07 Pacific
Reply: (edit)

i neglected to mention, i do have spywareblaster, adaware, and CWShredder. they'll catch a lot of stuff, but as you know these things have a way of replicating themselves.


Report Offensive Follow Up For Removal

Response Number 2
Name: jitendrarpawar
Date: July 25, 2004 at 20:16:47 Pacific
Reply: (edit)

Wow!!!!
I got rid of this.
Heres what I did.
Check your Task Manager and find out how many Winlogon.exe's are running in processes.
I had two
1) WINLOGON.EXE (c:\winnt\system32) and
2) winlogon.exe (c:\winnt)
I was unable to stop anyone. so I renamed second one as winlogon1.exe and it worked.
And kill process hrtcm.exe.

In addition to this i moved some suspected files from winnt to other directory.
hrtcm.exe,optimize.exe,wsem218.dll,
ieuninst.exe,uneng.exe,unstall.exe,
Syskernel12.dll,whCC-MOTOR.exe
I think the most imp file is hrtcm.exe
Clear your Temp files and internet files plus
clear history. And
Lastly run Hijack.exe and clear all the entries for drusearch.exe

My machine is working fine and i have Shift deleted those files.

Just restart your machine once and get rid of drusearch.com forever.

Njoy!!!!!!!!!!

Regards,
Friend


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 5 Days.
Discuss in The Lounge
Poll History




Data Recovery Software