Total n00b begging for help

Discussion in 'OT Technology' started by flyinbrian, Dec 13, 2003.

  1. flyinbrian

    flyinbrian New Member

    Joined:
    Nov 3, 2003
    Messages:
    2,147
    Likes Received:
    0
    Location:
    Virginia
    I am running Adaware 6.0 and SpyBot S&D along with PC-Cillin, all stay updated.

    Somehow, something has made it's way in.

    If I open a new window, (IE), I get my homepage, (Yahoo). I open a second page from the start menu, I get search-space.com??!?! I reset this in options and it happens over and over. Deleted all history, cookies, etc. Run Adaware, SpyBot, and anti-virus regularly, but still have this.

    Also, if I go to right click, open in a new window, it freezes for a while then eventually stops processing and wakes up without opening another window.

    This is driving me nuts.

    It seems like something extra is running at all times, then I get re-directed to this search-space website.

    Any ideas are greatly appreciated.
    Thanks in advance. :hs:
     
  2. Blindsight

    Blindsight Guest

    Two things:

    1 - have you updated spybot? That makes a big difference

    2 - get a program called tweak xp and check what programs you have autostarting

    Something additional is you can posta screen shot of your running processes and I'll check them and see if you have anything nasty running
     
  3. you can see, and control, what programs are autostarting using msconfig without bothering with tweakxp can't you? :dunno:
     
  4. Blindsight

    Blindsight Guest

    tweak xp makes it easy and safe for the re-re's out there
     
  5. flyinbrian

    flyinbrian New Member

    Joined:
    Nov 3, 2003
    Messages:
    2,147
    Likes Received:
    0
    Location:
    Virginia
    Thanks for the replies.

    Answers to your question Blindsight-
    1. Yes, Spybot, Adaware, and PC-Cillin all havethe current updates.

    After posting this task manager screenshot, I will go look for tweak XP.

    [​IMG]

    Thanks again for your help.
     
  6. Leb_CRX

    Leb_CRX OT's resident terrorist

    Joined:
    Apr 22, 2001
    Messages:
    39,994
    Likes Received:
    0
    Location:
    Ottawa, Canada
    check the add remove programs, i've seen some spyware crap show up there
     
  7. Mugatu

    Mugatu Ask me about market research. OT Supporter

    Joined:
    Oct 21, 2001
    Messages:
    245,192
    Likes Received:
    0
    I found this through google, try it

     
  8. flyinbrian

    flyinbrian New Member

    Joined:
    Nov 3, 2003
    Messages:
    2,147
    Likes Received:
    0
    Location:
    Virginia
    Thanks again for everyone's help and assistance.
    I have managed to remove this nuisance from my machine by using a program called "HijackThis" and removing certain items found in a scan in the program.

    For future reference, if anyone else has this problem, Spybot, Adaware, or anti-virus' do not see this or correct it.

    Download HijackThis, run a scan, and remove these items-
    O2 - BHO: (no name) - {00110011-4B0B-44D5-9718-90C88817369B} - C:\WINDOWS\NavExt.dll

    O4 - HKLM\..\Run: [wcmdmgr] C:\WINDOWS\wt\updater\wcmdmgrl.exe -launch


    Along with this-
    winlogon.exe-0BF37AE5.pf in folder C:\WINDOWS\Prefetch and anything named, 'b.exe'.

    I hope this may help someone else experiencing the same issue.
     
  9. flyinbrian

    flyinbrian New Member

    Joined:
    Nov 3, 2003
    Messages:
    2,147
    Likes Received:
    0
    Location:
    Virginia
    Good find!

    I just found that after using the method I described above. That program is said to be the fix as well.

    Thanks
     
  10. Mugatu

    Mugatu Ask me about market research. OT Supporter

    Joined:
    Oct 21, 2001
    Messages:
    245,192
    Likes Received:
    0
    :doh: well good luck :wavey:
     
  11. Blindsight

    Blindsight Guest

    Good job man

    After I looked at all your processes, I was just about to recommend Hijack This :)

    Hope everything keeps working well :wavey:
     

Share This Page