1
   

help needed to get rid of searchweb2

 
 
Reply Wed 27 Oct, 2004 07:34 am
hi I can not get rid of this searchweb tool bar no matter what I try
here is my HijackThis Logfile can anybody help me

Logfile of HijackThis v1.97.7
Scan saved at 16:30:15, on 27.10.2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\drivers\trcboot.exe
C:\Program Files\Personal Communications\PCS_AGNT.EXE
C:\PROGRA~1\NavNT\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\drivers\ldlcserv.exe
C:\PROGRA~1\NavNT\rtvscan.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\pcssfrrx.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\PROGRA~1\NavNT\vptray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINNT\Plaxo\1.4.2.25\InstallStub.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\YahooPOPs\YahooPOPs.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\INCRED~1\bin\IncMail.exe
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.isbank.com.tr/Internet/index.aspx?width=1024&height=768
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://kuleproxy.isbank/wpad.dat
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ISTSGBIMISAS001:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Bağlantılar
F2 - REG:system.ini: UserInit=C:\WINNT\system32\userinit.exe,,pcssfrrx.exe
O3 - Toolbar: &Radyo - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [E-Ajanda] C:\Documents and Settings\mt46911\Desktop\E-Ajanda.exe
O4 - HKLM\..\Run: [win32sys] C:\WINNT\system32\win32sys.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\NavNT\vptray.exe
O4 - HKLM\..\Run: [FILETHEVCSHIM] C:\Documents and Settings\All Users\Application Data\Phone Ping File The\SEEK DOG.exe
O4 - HKCU\..\Run: [PlaxoUpdate] C:\WINNT\Plaxo\1.4.2.25\InstallStub.exe -a
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: ICQ 4.1 (HKLM)
O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM)
O15 - Trusted Zone: http://*.cagri.isbank
O15 - Trusted Zone: http://*.forum.isbank
O15 - Trusted Zone: http://*.telefon.isbank
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = gm.isbank.com.tr
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = gm.isbank.com.tr
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = gm.isbank.com.tr
  • Topic Stats
  • Top Replies
  • Link to this Topic
Type: Discussion • Score: 1 • Views: 2,849 • Replies: 2
No top replies

 
raghu
 
  1  
Reply Thu 28 Oct, 2004 12:52 am
searchweb2 or lop fix
Hi All,

After all the research we have found the way to remove searchweb2....

very simple...you can find where these unwanted data and delete it..

this searchweb2 creats all its files in c:documents and settings/application data....

all unwanted datas under this directory should be removed example- leader tech, ante download,admin trans...etc..if you still have doubts just write me on [email protected]
0 Replies
 
timberlandko
 
  1  
Reply Thu 28 Oct, 2004 01:48 am
crazyfish, I can't go over your log right now, but take a look at This Advice from Don77. Dunno for sure if that's gonna do it for ya, but its the same highjack. I'll try to check back here sometime in the next 24 hours to see how you're doin'.

Before following any advice on yuckware removal, check out the posting history of the advice-giver; just click on the username to see a listing of that member's posts. Some advice-givers are better than others.
0 Replies
 
 

Related Topics

YouTube Is Doomed - Discussion by Shapeless
So I just joined Facebook.... - Discussion by DrewDad
Internet disinformation overload - Discussion by rosborne979
Participatory Democracy Online - Discussion by wandeljw
OpenDNS and net neutrality - Question by Butrflynet
Internet Explorer 8? - Question by Pitter
 
  1. Forums
  2. » help needed to get rid of searchweb2
Copyright © 2024 MadLab, LLC :: Terms of Service :: Privacy Policy :: Page generated in 0.04 seconds on 09/29/2024 at 06:26:17