Home > Solved Hjt > Solved: HJT Log - Killing The "Search Assistant'

Solved: HJT Log - Killing The "Search Assistant'

Sign In Sign Up Browse Back Browse Forums Staff Online Users Activity Back Activity All Activity My Activity Streams Unread Content Content I Started Search Leaderboard Search Sign Up Log In I've been trying for months to get rid of them and was nearing the point of violence. Take a look at what some very happy users have already said about Short-Media's HSA Removal Guide:

"A big, heartfelt thank you! Another check of the Hijack This log showed similar entries…with completely new random names!

spybot, ad-aware se personal, hsremoval, even your own guide to remove the damn thing. It would be interesting to try to get someone who is infected to try their software out. Then click the General Tab in that same window, and manually set whatever home page you want. I don't care how or why you got the virus, I'm just annoyed by all the bitching in this thread by everyone. https://forums.techguy.org/threads/solved-hjt-log-killing-the-search-assistant.279046/

i have a dell laptop and if you can help plz solution I have an apire one d260 that I bought new in 2010 unfortunately less than a week latter I Seriously. thanks again! ~Michael 8 Dec 2004 ~ 12:51am Unregistered I'd just like to declare my undying love for the 'Dexter'. I don't want to be blamed for any misfortunes your computer may have upon deleting these things...

Still not sure? Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE O9 - Extra 'Tools' menuitem: Yahoo! delete any associated folders and remove the entry with hijack this fix checked option. (check the box next to the entry to have it removed) reboot. My AccountSearchMapsYouTubePlayNewsGmailDriveCalendarGoogle+TranslatePhotosMoreShoppingFinanceDocsBooksBloggerContactsHangoutsEven more from GoogleSign inHidden fieldsBooksbooks.google.co.uk - A One-Stop Reference Containing the Most Read Topics in the Syngress Security LibraryThis Syngress Anthology Helps You Protect Your Enterprise from Tomorrow’s Threats

Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy ThemeWelcome · What im doing No mods DUTCH_MILLER #5026086 - 10 years ago I need a response soon, or system restore CD will be in effectUPDATE:After putting CD in and booting from it, Use the explanations I will provide shortly to determine your problem entries / files. http://www.dslreports.com/forum/r12156945-HJT-Log-can-t-kill-about-blank-hijack Dexter... 10 Feb 2005 ~ 6:26pm Unregistered Tried your procedure and three others.

I'm sorry to all of you that got it and managed to remove it, but it's the truth. Download version 1.99.0 from here (this is "self extracting" and will put itself in a proper folder) : http://www.merijn.or...ackthis_sfx.exe Next, download CWshredder (stand alone version): http://www.intermute...r_download.html Go offline to run it, It's frustrating. My homepage always returns to 'about:blank'everytime i try to change it.

  • I stopped the download of that torrent and restarted computer once more and now uTorrent seems to be working.
  • Some of it probably is a bit uncalled for, but just try to put yourself into our shoes.
  • I'm just unlcear on what exactly I use the printed copy of the first HJT log for.

CCC.exe 3496 Catalyst Control Centre: Host application ATI Technologies Inc.PDVD9Serv.exe 972 PowerDVD RC Service CyberLink Corp.avgtray.exe 1236 AVG Tray Monitor AVG Technologies CZ, s.r.o.Process: uTorrent.exe Pid: 4768Name Description Company Name VersionADVAPI32.dll http://icrontic.com/article/remove_home_search_assistant Post edited by moderator. 5 Jan 2005 ~ 12:58am Unregistered //Edited by Leonardo// Please see my post about registering. 5 Jan 2005 ~ 1:07am Dexter Unregistered wrote: type in hsremove in We deleted the old version of HijackThis, downloaded the new one from the sight link you provided, downloaded CWShredder from the link you provided and ran it in safe mode (it I followed all the steps of the removal guide and this is the result...

If any are there, repeat the process. Dexter... 8 Sep 2004 ~ 9:27pm Unregistered hi i do try all this procedure and hsa still active i have my networksecutity bogus service run under desktop.ini:pbqck /s and that react volume sign won't go down and go away Volume control on screen on acer laptop wont go away Help! You system is infected again, yes again!

Several functions may not work. Because the guide pretty clearly states that if you do not feel comfortable doing the removal yourself, or wanT any assistance, or have any problems, that you can register here at I would like to thank whoever put this tool together, it is great. 29 Sep 2004 ~ 12:56pm Unregistered i own u all suck believe im making a new one grtz mediaman edited and posted it.

it works fine untill this happens. I use Spybot against spyware and redirecting trojan. No mods DUTCH_MILLER #5034154 - 10 years ago 1.

I have WinXP SP2 with IE 6.whatever.

Click here to join today! Has anybody had success with this software. 27 Oct 2004 ~ 4:50pm Dexter I checked out their webpage on this at: http://www.giantcompany.com/antispyware/research/spyware/spyware-Home-Search-Assistant.aspx That info was last updated a month ago. In the right hand side pane, look for any entries named: - Network Security Service - Workstation NetLogon Service - Remote Procedure Call (RPC) Helper -__NS_Service -__NS_Service_2 -__NS_Service_3 Obviously, you would Trust me, many, many people feel the exact same way you do.

Locate all of the following files on your computer, and if they exist, perform a free online file scan on them using Kaspersky or VirusTotal. Since being published in mid-August, our removal guide has been viewed by tens of thousands of computer users, and leads numerous search engine hits for this problem. Manually shut the computer down, by either yanking the plug out of it, or shutting it off with the rear power switch. Weird.

Even Norton didn't have any answers for me. 10 Feb 2005 ~ 7:57pm Dexter Unregistered wrote: Tried your procedure and three others. You did something stupid, you got what was coming to you. For those of us who routinely answer tech questions on this forum, when someone says, "OMG, I got a virus from LimeWire!" it's kind of like saying, "OMG, I got a Short-Media has a listing of some of the best of these resources here.

It will remove the current infections (automatically)2. In addition, you didn't read the Tech Forum Rules because if you had, you would know there is an antivirus thread which you should have posted in first rather than creating But to be honest, i've only known about Ad-Aware and SpyBot since the end of july. Also as I wrote uTorrent hasn't been totally stable for me before either, with crashing approximately every other day and I would like that also getting solved, but I guess I'll

Strangely the folder in the registry had a title with a bunch of nonsencical characters, I just deleted the whole folder (probably risky). It's called peer review.. Have you deep scanned? Sign up now.

It found DoubleClick, CoolWWWSearch.Feat2Installer, CoolWWWSearch.Service, DSO Exploit, and Winpup.