search assistant uninstall - harmltc

[ltcharm]

hi

the spyware on my computer is starting to irritate me and i was wondering if you guys could help me.
the main problem is that my homepage is always directed to 'about:blank', a problem from which you guys already heared, looking at the posts in the forum. i can't be deleted by uninstalling it from the install/uninstall function in the configuration.....(i don't know the exact english word for this because i'm dutch but i hope that you guys can understand me)
i followed your instructions by updating and running spybot and ad-aware which were already on my computer and ran hijackthis after that. but when i clicked the scan button it lists a few files and then it gives this error message:
An unexpected error has occurred at procedure: modMain_FixUNIXHostsFile()
Error #62 - Input past end of file

Please email me at merijn@spywareinfo.com, reporting the following:
* What you were doing when the error occurred
* How you can reproduce the error
* A complete HijackThis scan log, if possible

Windows version: Windows 9x 4.90.3000
MSIE version: 6.0.2800.1106
HijackThis version: 1.98.2

This message has been copied to your clipboard.
i didn't send an e-mail to this guy, because i'm not sure what to say in that e-mail and i can't send him an hijackThis scan log, because when ik click the ok button underneath the message, the message is appearing again and i have to quit the program by pressing ctrl+alt+delete and quit the program.

i hope that you guys understand my bad english and that you can help me get rid of this really annoying program which doesn't even let me read my hotmail inbox.

thanks
harm

[Crunchie]

Try downloading this hijackthis.exe https://ssl.perfora.net/tools.radiosplace.com
There is a link on the left of the page for the executable version.

[ltcharm]

my computer won't let me download the program, because of security things. i don't know how to say this exactly, i'm sorry. the security adjustments won't let me download it. how do i change these?

thanks
harm

[Crunchie]

Internet Options\Security & set it to the default setting.

[ltcharm]

i downloaded the .exe file but again it gives this message while scanning, and again i can exit the program only by pressing ctrl+alt+delete

An unexpected error has occurred at procedure: modMain_FixUNIXHostsFile()
Error #62 - Input past end of file

Please email me at merijn@spywareinfo.com, reporting the following:
* What you were doing when the error occurred
* How you can reproduce the error
* A complete HijackThis scan log, if possible

Windows version: Windows 9x 4.90.3000
MSIE version: 6.0.2800.1106
HijackThis version: 1.98.2

This message has been copied to your clipboard.

[Crunchie]

Sorry, but I have no answer for you. You could try renaming the hijackthis file or moving it to a different folder. Other than that I do not know :(.

[ltcharm]

ok, but still thanks for the things you did
do you think that system restore would help?
if it doesn't i'm going to ask my dad to bring the computer to the computer service in town. He will reinstall windows i guess...

[Crunchie]

If you have the about:blank, you can try running about:buster & also the latest CWShredder. http://www.intermute.com/spysubtract/cwshredder_download.html

Download About:buster from http://malwarebytes.biz/AboutBuster.zip and unzip it to your desktop.

Boot up in safe mode by tapping f8 whilst booting.

Run About:buster, click OK, Start, and OK again to start the scan. Let it scan and fix everything it finds.

Reboot your computer in normal mode.

Run CWShredder & hit *fix.*

[ltcharm]

thank you....thank you
i'm grateful for the things you did.
i have my normal homepage again and i can check my hotmail again.
for that reason i used my dad's e-mail adress and now he's getting porn mails. i hope this isn't a result of registering at this forum?
thank you for helping me..

harm

[ltcharm]

but i have an other question. a program called webrebates....
i is listed in my configurations>software list and if i press ctrl+alt+delete i can see it too. i can delete it from the software list but it is there again when i reboot my computer.
do you know what kind of program this is?
harm

[Crunchie]

It is a program that you do not want. You should be able to uninstall it from add\remove programs in the control panel.
Find the favorites folder and check to see if there are any porn sites listed there and delete them if found.
Are you able to run hijackthis now? If so, post a log that is taken straight after a reboot.

[Trogan]

Hi, I had used to have the same error message with HiJackThis but that was with the old version (can't remember what version) but when I clicked OK it gave me the Log from the scan.

I think you are using the old version but go here http://short-media.com/download.php?dc=69 and download HiJackThis v1.98.2. Hopefully that should work. Also download OmegasearchSM v1.2 and run that.

Hope that helps :)

[ltcharm]

also with this version i get the same error message as before.. too bad.

[Trogan]

What happens after you click OK after the error message? do you get a report?