suspected spyware/virus help!

kimchicowboy · 08-26-2005, 01:52 AM

my friend is asking me for help. he has a toolbar that showed up on his IE6 browser that won't go away. at the far left, it says "remove toolbar" but that doesn't actually remove it. the homepage is automatically set as "C:\WINDOWS\system32\msblank.html" and he tries to set it back to google or whatever, but it always changes back to C:\WINDOWS\system32\msblank.html.

i told him to look at add/remove software, but nothing seems suspicious. he did an adaware and NAV check. NAV came up with nothing, but adaware took away some stuff. it's still there. any ideas? thanks!

mechmike0034 · 08-26-2005, 05:39 AM

http://www.pchell.com/support/aboutblank.shtml
http://www.bleepingcomputer.com/foru...DLL-t4210.html

DarkFury · 08-26-2005, 08:30 AM

Try cleaning the viruses from "Safe Mode".. if that don't work, nuke the system, reinstall Windows and be sure to put up your Windows Security Updates, AdAware PE, Spybot, and Spyware Blaster BEFORE you go surfing the web.

kimchicowboy · 08-26-2005, 09:14 AM

thanks for the help guys. i think he's just going to reformat it since he just did it not too long ago. and DF, he can't download security updates because he can't for *cough* reasons *cough* that won't let him.

mechmike0034 · 08-26-2005, 09:36 AM

AutoPatcher is a comprehensive collection of patches, addons and registry tweaks that give you peace of mind in the knowledge that your Windows system is up to date, even before you connect it to the Internet. It's designed to quickly patch a system with the most current updates and tweaks available, and requires no user interaction once you have selected what to install.

http://fileforum.betanews.com/detail...P/1067103058/1

Jeffbx · 08-26-2005, 09:50 AM

Quote:

Originally Posted by kimchicowboy

thanks for the help guys. i think he's just going to reformat it since he just did it not too long ago. and DF, he can't download security updates because he can't for *cough* reasons *cough* that won't let him.

Heh - tell him to get familiar with that format.. reload process then!

DarkFury · 08-26-2005, 03:15 PM

Quote:

Originally Posted by kimchicowboy

thanks for the help guys. i think he's just going to reformat it since he just did it not too long ago. and DF, he can't download security updates because he can't for *cough* reasons *cough* that won't let him.

Bwaaa haa haa haa....

BTW... isn't "Amnesty days" going on now... where he can turn in that bad copy and get a cheap legit copy?

08-26-2005, 01:52 AM	#1
kimchicowboy Admiral Join Date: May 2000 Location: in the middle of the pacific ocean Posts: 5,344	suspected spyware/virus help! my friend is asking me for help. he has a toolbar that showed up on his IE6 browser that won't go away. at the far left, it says "remove toolbar" but that doesn't actually remove it. the homepage is automatically set as "C:\WINDOWS\system32\msblank.html" and he tries to set it back to google or whatever, but it always changes back to C:\WINDOWS\system32\msblank.html. i told him to look at add/remove software, but nothing seems suspicious. he did an adaware and NAV check. NAV came up with nothing, but adaware took away some stuff. it's still there. any ideas? thanks! __________________ "I pick my nose too but never eat it." - bachviet, 3/30/04 if anyone wants to go scuba diving in oahu or wants to learn who to scuba dive in oahu, PM me.

08-26-2005, 05:39 AM	#2
mechmike0034 aka the keg killer Join Date: Dec 2002 Location: Ala-effin'-bama! Posts: 2,738	http://www.pchell.com/support/aboutblank.shtml http://www.bleepingcomputer.com/foru...DLL-t4210.html __________________ "The price of progress is trouble." (C. F. "Boss" Kettering) "50% of the American public has below-average intelligence. 70% of the American public now has regular access to the Internet. Do the math." (unknown)

08-26-2005, 08:30 AM	#3
DarkFury Secretary of the Navy Join Date: Feb 2001 Location: Chillin' N Da 'Hood Posts: 34,997	Try cleaning the viruses from "Safe Mode".. if that don't work, nuke the system, reinstall Windows and be sure to put up your Windows Security Updates, AdAware PE, Spybot, and Spyware Blaster BEFORE you go surfing the web. __________________ DarkFury's Pimptopia - Don't Hate the Playa, Hate the Game! Home of the Original OG Pimp (accept NO imitations)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

08-26-2005, 09:14 AM	#4
kimchicowboy Admiral Join Date: May 2000 Location: in the middle of the pacific ocean Posts: 5,344	thanks for the help guys. i think he's just going to reformat it since he just did it not too long ago. and DF, he can't download security updates because he can't for cough reasons cough that won't let him.

08-26-2005, 09:36 AM	#5
mechmike0034 aka the keg killer Join Date: Dec 2002 Location: Ala-effin'-bama! Posts: 2,738	AutoPatcher is a comprehensive collection of patches, addons and registry tweaks that give you peace of mind in the knowledge that your Windows system is up to date, even before you connect it to the Internet. It's designed to quickly patch a system with the most current updates and tweaks available, and requires no user interaction once you have selected what to install. http://fileforum.betanews.com/detail...P/1067103058/1

User Name
Password
Remember Me?