| Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free! |
drusearch/casino icons/porno pop up
|
Original Message
|
Name: dddddde
Date: June 29, 2004 at 13:33:20 Pacific
Subject: drusearch/casino icons/porno pop up OS: XP SP1 CPU/Ram: not sure
|
Comment: i've been having the worst time with this scummy adware. my homepage keeps getting changed to either drusearch.com/user6 (or something similar to that) or about:blank. i am also getting a lot of pop ups, including everyonce in a while a pop up for something called 'casino pallazzo' (sp?) that installs shortcuts on my desktop. i am also getting extremely pornographic popups, some of which are fullscreen (i can't let my 8-year-old neice on the computer anymore, i'm afraid). does anybody else have any similar symptoms? any suggestions? thank you all.
Report Offensive Message For Removal
|
|
Response Number 1
|
Name: dddddde
Date: June 29, 2004 at 13:35:07 Pacific
|
Reply: (edit)i neglected to mention, i do have spywareblaster, adaware, and CWShredder. they'll catch a lot of stuff, but as you know these things have a way of replicating themselves.
Report Offensive Follow Up For Removal
|
|
Response Number 2
|
Name: jitendrarpawar
Date: July 25, 2004 at 20:16:47 Pacific
|
Reply: (edit)Wow!!!! I got rid of this. Heres what I did. Check your Task Manager and find out how many Winlogon.exe's are running in processes. I had two 1) WINLOGON.EXE (c:\winnt\system32) and 2) winlogon.exe (c:\winnt) I was unable to stop anyone. so I renamed second one as winlogon1.exe and it worked. And kill process hrtcm.exe. In addition to this i moved some suspected files from winnt to other directory. hrtcm.exe,optimize.exe,wsem218.dll, ieuninst.exe,uneng.exe,unstall.exe, Syskernel12.dll,whCC-MOTOR.exe I think the most imp file is hrtcm.exe Clear your Temp files and internet files plus clear history. And Lastly run Hijack.exe and clear all the entries for drusearch.exe My machine is working fine and i have Shift deleted those files. Just restart your machine once and get rid of drusearch.com forever. Njoy!!!!!!!!!! Regards, Friend
Report Offensive Follow Up For Removal
|

Post Locked
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
Go to Security and Virus Forum Home