Computing.Net > Forums > Security and Virus > HotSearchBox has taken over!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

HotSearchBox has taken over!

Reply to Message Icon

Name: angelskittles23
Date: July 20, 2004 at 19:49:51 Pacific
OS: Windows XP Home
CPU/Ram: 1.8GHz CPU/128MB RAM
Comment:

Hi everyone! For the last month or so I've been receiving lots of viruses on my computer and have done just about anything I can do to get rid of them. But every time I think I've gotten rid of them all, there's still SOMETHING lingering that changes my homepage almost immediately after opening Internet Explorer. I think it may have something to do with the hotsearchbox.com thing, but I'm not totally sure. What happens is that I open IE, my homepage is visible for approximately 30 seconds before changing to what looks like a large link page. My toolbars disappear, and the only way to get rid of this page is pushing "Alt F4". After the initial opening of IE I am able to use it without a problem. Also, I believe my search tool has been taken over by hotsearchbox. Everytime I open IE, the search assistant(?) to the left has links with hotsearchbox.com as its main domain. My operating system is Windows XP, and I run Norton AntiVirus 2004. I've also used both Panda ActiveScan and Trend Micro Housecall to help find things that Norton didn't pick up. Norton said it found nothing. The other two found a lot.

Panda ActiveScan found the following:
Downloader.GK (5 files were found)
These files were found in the "Local Settings\Temp" files. Very sorry, I do not know all the specific file names for sure.

Trend Micro Housecall found the following:
Adware.Ruledor.C (2 files found)
BKDR B.A (1 file found)
BKDR Sandbox.A (10 files found)
Trojan.Agent.AE (10 files found)
Trojan.Agent.CF (1 file found)
Trojan.Alchemic.A (3 files found)
Trojan.Dyfuca.M (1 file found)
Trojan.Imiserv.C (5 files found)
Trojan.Small.GM (1 file found)
Trojan.Small.GO (1 file found)
Trojan.Small.IQ (1 file found)
Trojan.Startpag.KF (1 file found)
Trojan.Stilen.A (3 files found)

Most of the above files were found in these areas:
Local Settings\Temp files
Recycler
System Volume Information
Windows\System32

I have a copy of my HiJackThis log if anyone would like to view it. Thanks!



Sponsored Link
Ads by Google

Response Number 1
Name: JPQ
Date: July 20, 2004 at 21:08:12 Pacific
Reply:

Download Ad-aware 6.0 and Spybot S&D then UPDATE them before running them....and delete anything they find...

Computing.Net - Security Tools

You can also download and run CWSHREDDER, McAfee Stinger, AVG...

Check the Windows Critical upates if possible...

Windows UpDates

JPQ


0

Response Number 2
Name: murve
Date: July 21, 2004 at 06:43:37 Pacific
Reply:

hi angel,
first off lets try this.
disable system restore to flush out your restore folder. then download your latest defs for your anti-virus, anti-trojan, adaware and spybot.
if you don't have an anti-trojan, adaware or spybot go to www.thepublicworks.com and go to free stuff and download adaware and spybot, for your anti-trojan scroll down to payware and link to trojan hunter and download free 30 day trial, get the latest defs.
now reboot your computer and go into safe mode. scan your machine with all those programs. delete all files they come up with.
next make sure all your hidden files are made visible, clean your cache, temp files in temp folder, history and cookies folder, and clean out your recycle bin.
now if you have a copy of hijackthis, run it.
save your log file, and post it here so that someone can have a look at it.
reboot into regular mode and re enable your system restore.
all the best,
murve


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: HotSearchBox has taken over!

URL Has Taken Over Desk top www.computing.net/answers/security/url-has-taken-over-desk-top/22776.html

allaboutsearching.com has taken ove www.computing.net/answers/security/allaboutsearchingcom-has-taken-ove/10727.html

All Browsers Taken Over -- Help? www.computing.net/answers/security/all-browsers-taken-over-help/16991.html