1
   

HELP ME! how do i get rid of mysearchnow.com pop up

Forums: Computers
Email this Topic • Print this Page
 
 
ramennoodles
 
Reply Tue 29 Jun, 2004 02:33 pm
HI I need help in getting rid of the mysearchnow.com toolbar

here is the log from hijackthis:


Logfile of HijackThis v1.97.7
Scan saved at 3:20:52 PM, on 6/29/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\WINDOWS\wt\updater\wcmdmgr.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\PROGRA~1\Hold Audio Loud\Seek Meow.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Window's User\My Documents\TARA'S\HijackThis.exe

R3 - Default URLSearchHook is missing
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {E294DC85-0F89-DF7E-9EEC-D06BB6AFABB1} - C:\PROGRA~1\MEMODE~1\Obj Bias.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Tons mapi - {171CEDA3-6D7F-B8A1-4B3A-E915D6F6DC07} - C:\PROGRA~1\MEMODE~1\Obj Bias.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [updater] C:\Program Files\Common files\Updater\wupdater.exe
O4 - HKLM\..\Run: [version] C:\WINDOWS\System32\version.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [wcmdmgr] C:\WINDOWS\wt\updater\wcmdmgrl.exe -launch
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [PLATFORM HELP] C:\PROGRA~1\Hold Audio Loud\Seek Meow.exe
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\Symantec\LIVEUP~1\SNDMon.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: updater.lnk = C:\Program Files\Common Files\updater\wupdater.exe
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{121B8627-CD49-4D73-B897-1E4775BB469F}: NameServer = 216.114.192.10 216.114.208.186
O17 - HKLM\System\CS1\Services\Tcpip\..\{121B8627-CD49-4D73-B897-1E4775BB469F}: NameServer = 216.114.192.10 216.114.208.186


please help me! tell me what to delete

thanks
  • Topic Stats
  • Top Replies
  • Link to this Topic
Type: Discussion • Score: 1 • Views: 1,790 • Replies: 4
No top replies

 
cicerone imposter
 
  1  
Reply Tue 29 Jun, 2004 10:30 pm
noodles, First of all, Welcome to a2K. There are similar threads already on A2K with some good answers. Go to "Forum" then to "Computers." You should find several there. Good luck.
0 Replies
 
Craven de Kere
 
  1  
Reply Wed 30 Jun, 2004 10:33 pm
c.i.

These types of problems require specific help. I respectfully request that you cease to give 'advice' on these threads. You are hurting more than you help.
0 Replies
 
Craven de Kere
 
  1  
Reply Wed 30 Jun, 2004 10:45 pm
Re: HELP ME! how do i get rid of mysearchnow.com pop up
ramennoodles wrote:

C:\WINDOWS\wt\updater\wcmdmgr.exe


Investigate this.

Quote:
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe


Kill this process then uninstall/delete this.

Quote:
C:\Program Files\Messenger Plus! 3\MsgPlus.exe


I would uninstall this, but I have not checked the plugin for spyware.

Quote:
C:\PROGRA~1\Hold Audio Loud\Seek Meow.exe


kill/delete


Quote:
R3 - Default URLSearchHook is missing


Fix

Quote:
O2 - BHO: (no name) - {E294DC85-0F89-DF7E-9EEC-D06BB6AFABB1} - C:\PROGRA~1\MEMODE~1\Obj Bias.dll


Fix

Quote:
O3 - Toolbar: Tons mapi - {171CEDA3-6D7F-B8A1-4B3A-E915D6F6DC07} - C:\PROGRA~1\MEMODE~1\Obj Bias.dll


Fix

Quote:
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot


Bloat, fix

Quote:
O4 - HKLM\..\Run: [updater] C:\Program Files\Common files\Updater\wupdater.exe


Fix and delete the file


Quote:
O4 - HKLM\..\Run: [version] C:\WINDOWS\System32\version.exe


Fix and delete the file

Quote:
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime


Bloat, fix

Quote:
O4 - HKLM\..\Run: [wcmdmgr] C:\WINDOWS\wt\updater\wcmdmgrl.exe -launch


Fix and delete the file

Quote:
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"


Bloat, fix

Quote:
O4 - HKLM\..\Run: [PLATFORM HELP] C:\PROGRA~1\Hold Audio Loud\Seek Meow.exe


Fix and delete the file

Quote:
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?


Fix

Quote:
O4 - Global Startup: updater.lnk = C:\Program Files\Common Files\updater\wupdater.exe


Fix and delete the file

Quote:


Uninstall smileycentral.

Quote:
O17 - HKLM\System\CCS\Services\Tcpip\..\{121B8627-CD49-4D73-B897-1E4775BB469F}: NameServer = 216.114.192.10 216.114.208.186
O17 - HKLM\System\CS1\Services\Tcpip\..\{121B8627-CD49-4D73-B897-1E4775BB469F}: NameServer = 216.114.192.10 216.114.208.186


fix


Quote:
please help me! tell me what to delete


When I say "fix" I mean to use hijackthis to fix it. When I say "delete" you ALSO need to delete that file, make backups on removable media (floppy, CD) if you want to be sure (in case I am wrong).

Reboot and let us know if you are cured. Even if you have no problems please report as much as it will help us help others.
0 Replies
 
ramennoodles
 
  1  
Reply Fri 2 Jul, 2004 12:52 pm
thank you for the help!

i didnt delete and fix everything because i didnt want to do anything bad to the computer but I fixed a few things and I deleted msgplus.

much thanks

peace!
0 Replies
 
 

Related Topics

Super cool computer tricks, for dopes like me. - Discussion by OCCOM BILL
Clone of Micosoft Office - Question by Advocate
Do You Turn Off Your Computer at Night? - Discussion by Phoenix32890
The "Death" of the Computer Mouse - Discussion by Phoenix32890
Windows 10... - Discussion by Region Philbis
Surface Pro 3: What do you think? - Question by neologist
Windows 8 tips thread - Discussion by Wilso
Mac help/can't install new printer, don't remember passwd - Discussion by ossobuco
GOOGLE CHROME - Question by Setanta
.Net and Firefox... - Discussion by gungasnake
Hacking a computer and remote access - Discussion by trying2learn
 
  1. Forums
  2. » HELP ME! how do i get rid of mysearchnow.com pop up
Copyright © 2025 MadLab, LLC :: Terms of Service :: Privacy Policy :: Page generated in 0.04 seconds on 08/19/2025 at 12:23:06
▲ ▼