Author Topic: Popup/adware infected comp, help!  (Read 2532 times)

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Popup/adware infected comp, help!
« Reply #20 on: April 25, 2005, 01:15:11 AM »
Can you do the following

Open Notepad (START>>>RUN>>>type in notepad)
Hit OK
Copy the contents of the CODE  box to notepad
In Notepad click FILE>>SAVE AS
IMPORTANT>>>Change the Save as Type to All Files.
Name the file as fix.reg

Save this file on the desktop

Code: [Select]
Windows Registry Editor Version 5.00

[-HKEY_USERS\.DEFAULT\Software\DLMax]

[-HKEY_USERS\S-1-5-18\Software\DLMax]

Double click on fix.reg and allow to merge to the registry

If you didn't uninstall Bearshare, you should at least disable it from running on startup
Do another scan with Hijackthis with all other windows closed and fix checked these entries

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause


Restart your computer afterwards

Open Spybot and Search for updates
Check for problems, let me know if it finds those entries afterwards
« Last Edit: April 25, 2005, 01:16:00 AM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Guest

  • Guest
Popup/adware infected comp, help!
« Reply #21 on: April 25, 2005, 06:41:44 PM »
congratulations no immediate threats were found!

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Popup/adware infected comp, help!
« Reply #22 on: April 25, 2005, 07:33:27 PM »
I'll lock this topic as your problems appear resolved, if you need it reopened, please PM a Mod or the site Admin and supply a link to this thread

Take Care

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here