Wed 2 Jun, 2004 02:35 am - Searchmeup - found more dregs
Glad it worked. I'm still clean but I later ran RegistryFirstAid (RFA) in search mode looking for "twt" "twaint" and "127.0.0.1"... (view)
Tue 25 May, 2004 02:45 am - Yuckware - searchmeup - clean for 24 hours - runwin32.exe
I'm learning to be pessimistic, but the hijacking has not repeated for 24 hours.
I was checking what hijackthis produced when run... (view)
Mon 24 May, 2004 09:48 am - Yuckware - Searchmeup - not cured, the saga continues
In spite of staying clean for longer than usual, the proxy server was switched to 127.0.0.1 again when I booted this morning. The home page... (view)
Sun 23 May, 2004 07:19 pm - Yuckware - searchmeup - CURED?
After the long saga above of things tried without success, I searched the Documents and Settings folder for the infected user (four other users were not infected).... (view)
Mon 17 May, 2004 12:46 pm - Yuckware - Searchmeup - more on the saga
That was the result of running HijackThis on the only infected account, three other limited users are clean (from the beginning), also administrator user... (view)
Sun 16 May, 2004 05:19 am - Yuckware - Searchmeup - Still there, new log
Bad news, HijackThis log on infected (limited user) account showed all the fixed searchmeup and 127.0.0.1 references were back in, so I'm still... (view)
Sat 15 May, 2004 08:46 pm - Yuckware - Searchmeup - further purge
I ran HijackThis in safe mode again, 'fixed' all the ones you suggested, rebooted but found IE still hijacked. Reset home page and disabled proxy... (view)
Fri 14 May, 2004 06:55 pm - Yuckware - Searchmeup - New log
I had tried to 'fix' a number of the entries from previous log without improvement. As suggested I pared down the Start list, rebooted (in SAFE mode) and... (view)
Sat 8 May, 2004 07:19 am - I went through the whole procedure in timberlandko's 611538, disabled Restore, twaintec was not listed in control panel>programs but it was in C:\windows and \lastgood, regsvr32 succeeded... (view)
