Spyware- Re-directing links, Random Ads sound

July 22, 2009 at 07:04:14
Specs: Windows XP
I have a real bad spyware issue where sometimes when i select a bookmark or link it redirects it to an advertisement site

then im getting this thing were im on the computer and all of a sudden i hear an advertisment playing in the background so i go to process explorer and killed the process of b.exe (sometimes dtemp.exe) and it would stop

i went through the computer deleted alot of temp stuff including the a b c d .exes but it is still occurring

i turned off restore, went into safe mode, did an anti virus scan (AVG free edition 8.5) and it was all clean but still the spyware continue

please help, thanks


See More: Spyware- Re-directing links, Random Ads sound

Report •


#1
July 22, 2009 at 07:32:04
yo alex download http://www.malwarebytes.org/mbam.php then boot into safe mode and delete
O20 - AppInit_DLLs: ,C:\DOCUME~1\ALEXBR~1\LOCALS~1\Temp\231911kou.dll
O20 - Winlogon Notify: RelevantKnowledge - c:\program files\relevantknowledge\rlls.dll


then run malwarebytes (rememeber to update it in the update tab)


in safe mode

go in ur windows/system32/drivers/etc/ and delete the HOSTS folder dont delete any other folder or u wont have internet! :( reboot gl reply plz


Report •

#2
July 22, 2009 at 19:45:26
ok i booted to safe and deleted those 2 things on HJT

then i ran malwarebytes and it found 50 something things but
the log says no action was taken when i selected remove all

i tried to delete the hosts folders but non of the folders are
there

[IMG]http://i87.photobucket.com/albums/k124/AnArchyKiNG999/cwindows.png[/IMG]

lol yea i just might have a little bit more then spyware

thanks for the help so far
i still need help getting rid of all of this

please ask if you need more information


Report •

#3
July 23, 2009 at 02:51:42
yo alex u need to be logged in as administrator before u can view/delete anythin in the WINDOWS folder, log in admin and do the scan again in safe mode,

download http://www.forospyware.com/sUBs/Com...

save it to ur desktop run it, create the recovery tool let it run and dont turn off ur comp! restart and run the malwarebytes
and post the hijackthislog
go to start - run and type C:\windows\system32\drivers\etc
and delete the hosts file from there gl if u need any help post a reply and run the combofix.exe gl reply plz


Report •

Related Solutions

#4
July 23, 2009 at 12:26:23
hi again

i was on admistrator when i did the whole process and still was unable to get to the windows folder without all of that junk in it and non of the actual needed folders

i will try again

the link you sent me ofcombofix.exe led me to a forum in another language

thanks again for helping


Report •

#5
July 23, 2009 at 15:18:50
yo alex run this in safe mode it the other link works with me
http://download.bleepingcomputer.co... ur
then run malwarebytes in safe mode
restart
u will be clean with runnin the 2 scans
ur windows folder should look like this http://img151.imageshack.us/img151/... . ur missin the main folders run the scans gl ! reply plz once u dont them scans run a virus scan usin AVG or avast or http://www.kaspersky.com/virusscanner gl !

Report •

#6
August 4, 2009 at 20:26:10
sorry i am back from a trip and i will try those

thanks for waiting i hope i didnt lose you


Report •


Ask Question