Over 1 million tech questions and answers.

CWS and Shopping Wizard?

Q: CWS and Shopping Wizard?

Please can anyone help, seem to have a big problem with Cool Web Search and no anti virus programmes can get rid of it .. I have also come across a programme Shopping Wizard which I cannot get rid of .. im not sure if these two items are connected.Will paste my hijack this log below to see if anyone can shed any light .. i got a feeling most of the R1 files need to go, but do not have enough knowledge to just start deleting them.Thanks in advance for any help you can giveLogfile of HijackThis v1.98.2Scan saved at 22:22:59, on 05/02/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\sdkff32.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exeC:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\PROGRA~1\BTBROA~2\SMARTB~1\BTHelpNotifier.exeC:\WINDOWS\system32\atlfh32.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\System32\r?ndll32.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\Program Files\BT Broadband Help\bin\mpbtn.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Documents and Settings\Boy blunder\Desktop\hijackthis\HijackThis.exeC:\Program Files\MSN Messenger\msnmsgr.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\gyanx.dll/sp.html#28129R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\gyanx.dll/sp.html#28129R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blankR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\gyanx.dll/sp.html#28129R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\gyanx.dll/sp.html#28129R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\gyanx.dll/sp.html#28129R3 - Default URLSearchHook is missingO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {B8532A5D-D53A-4914-4F85-64FE19CB58F7} - C:\WINDOWS\sysze32.dllO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [DSLSTATEXE] C:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe iconO4 - HKLM\..\Run: [DSLAGENTEXE] C:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\BTBROA~2\SMARTB~1\BTHelpNotifier.exeO4 - HKLM\..\Run: [atlfh32.exe] C:\WINDOWS\system32\atlfh32.exeO4 - HKLM\..\Run: [9.tmp] C:\DOCUME~1\BOYBLU~1\LOCALS~1\Temp\9.tmp.exe 1 28129O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /backgroundO4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimizedO4 - HKCU\..\Run: [Utzccl] C:\WINDOWS\System32\r?ndll32.exeO4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\\Steam.exe -silentO4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exeO4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /1O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: BT Broadband Help.lnk = C:\Program Files\BT Broadband Help\bin\matcli.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dllO15 - Trusted Zone: *.05p.comO15 - Trusted Zone: *.awmdabest.comO15 - Trusted Zone: *.clickspring.netO15 - Trusted Zone: *.flingstone.comO15 - Trusted Zone: *.frame.crazywinnings.comO15 - Trusted Zone: *.mt-download.comO15 - Trusted Zone: *.my-internet.infoO15 - Trusted Zone: *.scoobidoo.comO15 - Trusted Zone: *.searchbarcash.comO15 - Trusted Zone: *.searchmiracle.comO15 - Trusted Zone: *.static.topconverting.comO16 - DPF: {1230CB21-C88D-11CF-B347-000000000000} - http://www.eingang69.de/EroticAccess/cabs/1808018.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{15079722-971D-42BA-B318-0542B056B0DE}: NameServer = 194.74.65.87 194.72.9.39

RELEVANCY SCORE 200
Preferred Solution: CWS and Shopping Wizard?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: CWS and Shopping Wizard?

You are using an outdated version of hijackthis. Please download the newer version.Download HijackThis from:HijackThis Download SiteDownload the attached zip file and unzip it to your desktop.http://www.mvps.org/winhelp2002/DelDomains.infRight-click on the deldomains.inf file and select 'Install'Download cwshredder 2.12 from here:http://cwshredder.net/bin/CWShredder.exeRun the file after it is downloaded and click on the fix button. Let it do its thing and when its done, even if it crashes.When its done run hijackthis again post a new log

Read other 3 answers
RELEVANCY SCORE 65.6

I cant delete this from Add Remove program files.. I saw someone else had this problem and i tried that mehod but it didnt work.

I am running Windows Xp.
here is my hijack log

Logfile of HijackThis v1.98.2
Scan saved at 9:36:29 PM, on 8/22/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\WINDOWS\System32\EXSHOW95.EXE
C:\WINDOWS\System32\EXSHOW.EXE
C:\WINDOWS\crqy32.exe
C:\WINDOWS\system32\atlwe32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Downloads\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\yuiyv.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\yuiyv.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\yuiyv.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\yuiyv.dll/sp.html#... Read more

A:Shopping wizard

Read other 8 answers
RELEVANCY SCORE 65.6

On advice from Steve Abelow of Counterspy I am requesting help in reclaiming my computer. I have three programs that I understand are spyware. Shopping Wizard, Search Extender, and Home Search assistant all show only on Add or Remove Programs, and when I attempt to remove them I am referred to aa uninstall program that does not remove them. I also have a Windsock layered service provider that showed on a Counterspy scan, which I would like to delete. I am attaching a Hijackthis scan, and am hoping that someone can advise me as to how to solve these problems.
Thanks,
Alan R

Logfile of HijackThis v1.99.1
Scan saved at 10:57:25 PM, on 5/9/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\STOPzilla!\SZServer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\STOPzilla!\Stopzilla.exe
C:\Program Files\Sunbelt Software\CounterSpy Client\sunasServ.exe
C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
... Read more

A:Shopping Wizard etc.

Do a couple online scans from this list (Post #1)

http://forums.techguy.org/t110854.html

One entry releates to istbar so

Istsvc http://securityresponse.symantec.com/avcenter/FxIstbar.exe

From Symantec
Note:
· The date and time displayed will be adjusted to your time zone, if your computer is not set to the Pacific time zone.
· The removal tool may terminate Internet Explorer and Windows Explorer. It is recommended that users save their work and log out of these programs before running the removal tool.
· The removal tool will reset the Internet start page to a blank page. The start page can be modified by clicking on Tools > Internet Options in Internet Explorer.
· The removal tool will not delete some harmless Temporary Internet files, which Adware.Istbar created, in C:\Documents and Setings\Administrator\Local Settings\Temporary Internet Files.
These can be manually deleted using the following steps:
a. Start Internet Explorer.
b. Click Tools > Internet Options.
c. In the Temporary Internet Files section, then click the Delete Files button.
d. Check Delete all offline content, and then click OK.
Get these

SpywareBlaster 3.3 http://majorgeeks.com/download2859.html
AdAware SE 1.05 http://www.majorgeeks.com/download506.html
SpyBot V1.4 http://www.majorgeeks.com/download2471.html

DL them (they are free), install them, check each for their
definition updates and then run AdAware and Spybot, fixing anything
they say.

In SpywareBlaster - Always enabl... Read more

Read other 1 answers
RELEVANCY SCORE 65.6

I have tried everything to get rid of this spyware/trojan/whatever it is called shopping wizard. Here is my HJT log:

Logfile of HijackThis v1.97.7
Scan saved at 8:27:33 PM, on 5/24/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\mIRC\mirc.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\AIM\aim.exe
C:\Pro... Read more

A:shopping wizard

Looks like I got it fixed!!! =D Thx anyway!!

Read other 2 answers
RELEVANCY SCORE 64.8

please tell me what to do! HSA and Shopping wizard is annoying! =.=Logfile of HijackThis v1.99.1Scan saved at 7:02:46 PM, on 5/14/2005Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\PROGRA~1\COMMON~1\Stardock\SDMCP.exeC:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\Program Files\Yahoo!\browser\ybrwicon.exeC:\Program Files\BroadJump\Client Foundation\CFD.exeC:\Program Files\Winamp\winampa.exeC:\PROGRA~1\Yahoo!\browser\ybrowser.exeC:\WINDOWS\d3wo32.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Microsoft IntelliType Pro\type32.exeC:\Program Files\Microsoft IntelliPoint\point32.exeC:\WINDOWS\System32\RUNDLL32.EXEC:\Program Files\CursorXP\CursorXP.exeC:\Program Files\AI... Read more

A:hijack this log. HSA and Shopping wizard

Download cwshredder 2.12 from here:http://cwshredder.net/bin/CWShredder.exeRun the file after it is downloaded and click on the fix button. Let it do its thing and when its done, even if it crashes.When its done run hijackthis again post a new log

Read other 6 answers
RELEVANCY SCORE 64.8

Hey my names marty, I need help removing Shopping wizard, Search Extender, and Home search assistant. Lately my AIM has been crashing, so i went to aim.com and they said it was probably because these programs were installed. I'm not much of a computer person so if you can help me please make it as specific as posible .

Thanks,
Marty
 

A:Need Help removing Shopping wizard...

Read other 16 answers
RELEVANCY SCORE 64

I've had a lot of pop ups lately that have the title 'only the best' in the top left corner, and my internet explorer starts on 'about:blank' no matter how many times i reset it in properties. So, I looked in my add/remove programs, and I have these that i think are trojans (maybe?) Home Shoping Assistant (HSA), Search Extender, and Shopping Wizard... and perhaps more which I'm not aware of as being bad. My computer overall is incredibly slow and my memory tends to get low even when I'm not using any programs, or just Microsoft word.

Help!

A:Search Extender, HSA and Shopping Wizard!

Sounds like you've been hijacked.Are you using these basic programs?a? freeAd-AwareSpybot S&DSpywareBlasterSpywareGuardIf not, you need to. These programs, updated and used regularly, will do a lot to keep your computer clean of spyware, trojans, keyloggers, browser hijackers, etc...Download them, update them, and then run them.Important:Please read this tutorial on Spybot S&D before using it. Spybot can do SERIOUS damage if not used properly.If that doesn't help, then:Download the latest version of HijackThis (HJT), from here.Put HijackThis in a Permanent folder:Click My Computer / C: / File / New / Folder / name the folder; HijackThisPut HijackThis.exe, in this folder.This is a mandatory step, for the backup and restore functions, of HijackThis, to be able to work.Read the pinned post in the HJT forum, hereFollow the directions, EXACTLY! This is important!Then, run a log, and post it in the HJT forum here. Do not fix anything, yet.A member, of the HJT Team, will help you out.Please, be patient, these people are volunteers. They will help you out, as soon as possible.

Read other 3 answers
RELEVANCY SCORE 64

Ok,

So I've read the posts on getting rid of shopping wizard and search extender and I thought I've followed the directions to a T, but I still have the same problem. So If anyone can walk me through it, I'd really appreciate it. Here is my most recent Hijack This Log:

Logfile of HijackThis v1.98.2
Scan saved at 9:45:11 AM, on 9/15/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\EZSP_PX.EXE
C:\WINDOWS\System32\TPWRTRAY.EXE
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
C:\WINDOWS\System32\TFNF5.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\Program Files\Analog Devices\SoundMAX\PmProxy.exe
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Nikon\NkView\EvLstnr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\00THotkey.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\RUNDLL32.exe
C:\Program Files\support.com\bin\tgcmd.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\WINDOWS\sysfi.exe
C:\Program Files\Winad Client\Winad.exe
C:\Program Files\BullsEye Network\bin\bargains.exe
C:\Program Files\Winad Cli... Read more

A:Need More Help Getting Rid of Shopping Wizard/Search Extender

Welcome to TSF.

Please print out or copy this page to Notepad. You should not have any open browsers when you are following the procedures below.

Go to My Computer->Tools->Folder Options->View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing/visible also.

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer. After we are finished with your log file and verified that it's clean, you may turn it back on and create a new restore point.

Please download Ad-aware SE and install it if you don't have it already. Make sure it's the newest version and check for any updates before running it. Go to this site to get the plug-in for fixing VX2 variants. Also make sure to customize the settings in Adaware for better scan results. Run the scan and fix everything that it finds.

Download AboutBuster and unzip it to a folder on your the Desktop. Do not run it yet.

Reboot into Safe Mode (hit F8 key until menu shows up).

Hopefully Adaware has removed some entries for you already. So if you see that something doesn't exist anymore, Adaware probably fixed/deleted it already. Just continue on with the other fixes/deletions.

Make sure to close any open browsers. Go into HijackThis->Config->Misc. Tools->Open process manager. Select the ... Read more

Read other 1 answers
RELEVANCY SCORE 64

Seems like a lot of people have gotten this lately. Mine arrived Thursday night the 10th of Nov.
1st is the about:blank homepage that can't be changed. It's a generic Search Page.

I run msconfig and in the Start Menu is: D3KC.EXE
uncheck it, restart and it's back.

Next I have Home Search Assistent(sp!), Search Extender and Shopping Wizard. Try to uninstall each and get--

Unable to open ""http://looking-for.cc/uninstall/ShoppingWizard.html""
and
Unable to open ""http://looking-for.cc/uninstall/HomeSearchAssistent.html""
and
Unable to open ""http://looking-for.cc/uninstall/SearchExtender.html""

(I notice double quotes)

Also in Favorites 3 Folders were added, 'Free porn for 7 days' etc.

here's my HTJ(I hope) never done this before:

Logfile of HijackThis v1.99.1
Scan saved at 8:07:59 PM, on 11/12/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SYMTRAY.EXE
C:\PROGRAM FILES\COMMON FILES\EPSON\EBAPI\SAGENT2.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\IPSG32.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\ATIC... Read more

A:D3KC.EXE, about:blank, Shopping Wizard etc

Read other 10 answers
RELEVANCY SCORE 64

can anyone help me remove search extender & shopping wizard please. when i try to uninstall on add remove programs it just redirects me to some website that tells me to download a file to remove search extender & shopping wizard which will probably just give me more spyware. im stuck ive tried all the best spyware removal programs but they dont pick them up does anyone know of any programs to remove it or can someone tell me how to remove it with hijackthis as i have it installed and it would be easy for me to post a scan on this thread thanks.

A:search extender & shopping wizard (please help)

here is my hjt scan results

Logfile of HijackThis v1.99.1
Scan saved at 14:43:17, on 22/05/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\UAService7.exe
C:\WINNT\srvany.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Funk Software\Proxy Host\ph32svc.exe
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\WINDOWS\system32\gsicon.exe
C:\WINDOWS\system32\dslagent.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Funk Software\Proxy Host\phtray.exe
C:\WINDOWS\system32\00THotkey.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\WINDOWS\system32\javapy32.exe
C:\Program Files\Hewlett-Packard\Digital Im... Read more

Read other 2 answers
RELEVANCY SCORE 64

HiI'm not sure what should be running after start up and I would like to be able to end any unnecessary processes if I could.ThanksHere's the log:Logfile of HijackThis v1.98.2Scan saved at 1:24:27 PM, on 12/12/2004Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\ScanSoft\OmniPageSE\opware32.exeC:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exeC:\Program Files\Messenger\msmsgs.exeC:\WINDOWS\System32\??rss.exeC:\PROGRA~1\THEWEA~1\DWHeartbeatMonitor.exeC:\Program Files\Microsoft Office\Office10\WINWORD.EXEC:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasDtServ.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\Program Files\Analog Devices\... Read more

A:Shopping Wizard and Search Extender

You are using an outdated version of hijackthis. Please download the newer version.Download HijackThis from:HijackThis Download SiteThen post a new log

Read other 1 answers
RELEVANCY SCORE 64

help please.. i really need to get rid of these things..heres my logLogfile of HijackThis v1.99.0Scan saved at 2:06:34 PM, on 12/20/2004Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\DRIVERS\CDANTSRV.EXEC:\WINDOWS\System32\CTsvcCDA.exec:\PROGRA~1\mcafee.com\vso\mcvsrte.exeC:\WINDOWS\system32\netclnd.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\MsPMSPSv.exec:\PROGRA~1\mcafee.com\vso\mcshield.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\mcafee.com\vso\mcvsshld.exec:\progra~1\mcafee.com\vso\mcvsescn.exeC:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\ISTsvc\istsvc.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exec:\progra~1\mcafee.com\vso\mcvs... Read more

A:help need to get rid of search extender,shopping wizard,HSA

Thanks for sending your HijackThis log.You have a very nasty infection called About:Blank.To start with, I'll need you to gather some additional information. Once we start, please do not reboot unless instructed, since this infection will change its filenames on every reboot,a ndthe fix instructions will not work.Step #1First, use "Control Panel > Add/Remove Programs' and delete any of these you find:'MS AUpdate' 'MS Updates' 'ISTbar'Step#2:1. Download Service Filter2. Extract it to it's own folder.3. Click on ServiceFilter.vbs4. A text file called POST_THIS will be created in the same folder5. Please use 'Edit>Select All' then 'Edit>Copy' to obtain the contents6. Please Paste them into this thread using 'Add Reply'.Also send a fresh HijackThis log, and then do not reboot until instructed to in my replyI will follow up with the next set of instructions for knocking down the About:Blank infection.Thanksdaveai

Read other 1 answers
RELEVANCY SCORE 63.2

I just got Hijackthis, I copied my log, and I want help knowing what to get rid of. Here's my log:Logfile of HijackThis v1.98.2Scan saved at 8:57:03 PM, on 12/4/2004Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\WINDOWS\appkp32.exeC:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exeC:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exeC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\WINDOWS\System32\hkcmd.exeC:\WINDOWS\system32\rundll32.exeC:\Program Files\DIGStream\digstream.exeC:\WINDOWS\system32\RUNDLL32.exeC:\Program Files\Messenger\msmsgs.exeC:\Valve\Steam\Steam.exeC:\Documents and Settings\Owner\Application Data\ttuh.exeC:\Program Files\Spyware Doctor\spydoctor.exeC:\PROGRA~1\AWS\WEATHE~1\Weather.EXEC:\Progra... Read more

A:Bleeping shopping wizard/hsa/ search extender

Read the pinned post in the HJT forum, herePost your log in the HJT forum here. Do not, fix anything, yet.A member, of the HJT Team, will help you out.Please, be patient, these people are volunteers. They will help you out, as soon as possible.

Read other 2 answers
RELEVANCY SCORE 63.2

Hello, I have tried to remove both these from the add/remove programs section in windows, but to no avail. they are screwing up my computer a lot. Can anyone here help at all?

I have a log from Hijackthis but i am not sure what exactly to remove and what not to. Any help would be much appreciated.

Logfile of HijackThis v1.98.2
Scan saved at 7:47:41 PM, on 9/11/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
C:\WINDOWS\system32\apirm32.exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\SETUPAPI.LOG:hlggh
C:\WINDOWS\System32\svchost.exe
C... Read more

A:Can't remove search extender/shopping wizard!

Hi and welcome to TSF

First, some downloading:

Download FixAgent from Trend Micro. Save it to your desktop, so it will be easy to access.

Download home mssing, to your desktop.

Download Ad-aware SE from this site.

Run FixAgent. If it finds an infection, then open home_missing and double-click on the bat file to run it.

Launch Adaware > Start > Programs > Lavasoft Adaware.

Firstly, in the main window, look toward the bottom right corner and click on Check for updates now and download the latest reference files.

Now, we need to configure Ad-aware for a full scan.

Click on the Gear icon (second from the left at the top) to access the preferences/settings window

In the General window make sure the following are selected:

> Automatically save log-file
> Automatically quarantine objects prior to removal
> Safe Mode (always request confirmation)

Click on the Scanning button on the left and select:

> Scan Within Archives
> Scan Active Processes
> Scan Registry
> Deep Scan Registry
> Scan my IE favorites for banned URL?s
> Scan my Hosts file
> Under Click here to select drives + folders, choose:
> The hard drive(s) you want scanned

Click on the Advanced button on the left and select:

> Include additional process information
> Include additional file information
> Include environment information

Click the Tweak button and select:

Under the Scanning Engine:
... Read more

Read other 5 answers
RELEVANCY SCORE 63.2

Greetings,

Somehow spysherif was maliciously installed on my computer and I now have a red X icon in my icon display in the right corner. I uninstalled spysherif in my add/remove programs from my control panel. After doing so it still hasn't taken away the popups. I am also unable to change my desktop wallpaper. I am also infected by Home Search Assistant, Shopping Wizard, and Search Extender (these are all listed in my add/remove programs). The following is my HJT log and Panda activescan incident report.


Logfile of HijackThis v1.99.1
Scan saved at 10:34:40 AM, on 12/31/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C... Read more

A:HSA, Search Extender, Shopping Wizard, and Spysherif

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted.

Please read this post completely before begining the fix. If there's anything that you do not understand, kindly ask your questions before proceeding. Please ensure that there aren't any any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.


* * * * * * ADDITIONAL DOWNLOADS * * * * * * * * * * * * * *


Download & install - CleanUp.exe (not recommended for WinXP64)

Download & extract it to it's own folder - About Buster.zip.

Download & extract it to it's own folder - smitRem.exe

Download and install Ewido Security SuiteWhen installing, under "Additional Options",uncheck - Install background guard

Have Ewido update itself & then exit the program.
If you are having problems with the updater, you can use this link to manually update Ewido


'UNPLUG'/DISCONNECT your computer from the Internet when you have finished downlaoding.
It is IMPORTANT that you don't miss a step & perform everything in the correct order.


* * * * * * RESTART WINDOWS IN SAFE MODE * * * * * * * * * *


1. Restart your computer
2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3. Instead of Windows loading as normal, a menu should appear
4... Read more

Read other 4 answers
RELEVANCY SCORE 62.8

Hi, I have posted on this before but have not any success in removing this program from my computer.

THis is the thing that changes my homepage when I open IE. about:blank shows up in yhe address box and a whole bunch of colums with link show up on the screen.
I have tried all spybot...adware, hijackthis. But it just keeps coming back. I have also triedn deleting the registry but they just come right back too.
Does anyone have a way to get rid of this??

here is my hijack log..
Logfile of HijackThis v1.98.2
Scan saved at 10:28:13 AM, on 8/25/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\crqy32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\WINDOWS\System32\EXSHOW95.EXE
C:\WINDOWS\system32\atlwe32.exe
C:\WINDOWS\System32\EXSHOW.EXE
C:\Program Files\AIM\aim.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Downloads\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\xqrfo.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\xqrfo.dll/sp.html... Read more

A:How can I remove Home Search Assistant and Shopping Wizard???

You seem to have a new variant of the about:blank virus/trojan.

Here is flrman's recent posting on the subject--

http://forums.techguy.org/showthread.php?p=1884657#post1884657
 

Read other 1 answers
RELEVANCY SCORE 62.8

Somehow got infected with the Home Search Assistent virus. Been working on the problem for 8 hours now without results. here is my log generated by hijackthis:Logfile of HijackThis v1.98.2Scan saved at 11:23:08 AM, on 10/24/2004Platform: Windows ME (Win9x 4.90.3000)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\SYSTEM\KERNEL32.DLLC:\WINDOWS\SYSTEM\MSGSRV32.EXEC:\WINDOWS\SYSTEM\SPOOL32.EXEC:\WINDOWS\SYSTEM\MPREXE.EXEC:\WINDOWS\SYSTEM\MSTASK.EXEC:\WINDOWS\SYSTEM\STIMON.EXEC:\WINDOWS\SYSTEM\JAVADR.EXEC:\WINDOWS\D3LN.EXEC:\WINDOWS\IPUP.EXEC:\WINDOWS\IEME.EXEC:\WINDOWS\MSRX32.EXEC:\WINDOWS\SYSTEM\mmtask.tskC:\WINDOWS\EXPLORER.EXEC:\WINDOWS\SYSTEM\SYSTRAY.EXEC:\PROGRAM FILES\ADAPTEC\DIRECTCD\DIRECTCD.EXEC:\WINDOWS\LOADQM.EXEC:\WINDOWS\SYSTEM\USBMONIT.EXEC:\WINDOWS\SYSTEM\QTTASK.EXEC:\PROGRAM FILES\COMMON FILES\KODAK\KODAK_DR\KODAKCCS.EXEC:\WINDOWS\SYSTEM\WMIEXE.EXEC:\WINDOWS\SYSTEM\HPZTSB04.EXEC:\WINDOWS\SYSTEM\HPHMON03.EXEC:\WINDOWS\SYSTEM\APPZP32.EXEC:\PROGRAM FILES\CYBERMEDIA\CMAGENT.EXEC:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXEC:\WINDOWS\SYSTEM\TKCYYIO.EXEC:\PROGRAM FI... Read more

A:Problem: Home Search Assistant, Shopping wizard

btt

Read other 5 answers
RELEVANCY SCORE 62.8

Hey, please help me analyze this log, i have some spyware that i need some help getting rid of. "Home Search assistant, "Shopping Wizard" are two that I see in the add-remove programs list.Logfile of HijackThis v1.99.1
Scan saved at 2:19:09 PM, on 5/21/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\atlgs.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINNT\system32\drivers\KodakCCS.exe
C:\Program Files\kodak\Kodak EasyShare software\bin\ptssvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\ScsiAccess.EXE
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explo... Read more

A:Log to analyze: "Home Search assistant, "Shopping Wizard"

Hello outer and welcome to the BC forums. After reviewing your log I see a few items that require our attention. Please print these directions and then proceed with the following steps in order.Step #1Download Cwshredder.exe and save it to a folder of its own. Start the program and click on the Check for Update button. If an update is available then download and install it. Close the program (do not run it yet).Download CCleaner and install it but do not run it yet.Now we need to remove a service.Part 1Click Start>Run, type services.msc into the Open editbox and click the Ok button.Locate the Workstation NetLogon Service service and click the Stop button.In the Startup type dropdown select Disabled.Click the Apply button and then the Ok button.Close the Services windowPart 2Click Start>Run, type cmd into the Open editbox and click the Ok button.Copy/paste the line below into the Command Prompt window and press the Enter key:sc delete 11F?#???`IClose the Command Prompt windowStep #2Restart in Safe ModeRestart the computer.As soon as the BIOS is loaded begin tapping the F8 key until the boot menu appears.Use the arrow keys to select the Safe Mode menu item.Press the Enter key.Step #3Start HijackThis and click the Scan button to perform a scan. Look for the following items and click in the checkbox in front of each item to select it:R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINNT\kpdty.dll/sp.html#28129R... Read more

Read other 3 answers
RELEVANCY SCORE 62.8

Recently my computer has been displaying diet patch adds (and they talk, urgh). But now, a few weeks later, I have been getting program like Shopping Wizard on my computer. I have run Hijack this and have tried to clean up the clearly faulty info, but it keeps coming back. Could someone please help me?

CWShredder found nothing, nor did Mcaffee. I tried running SPybot, but it freezes one me. I reinstalled it and added the patch from MajorGeeks.com, but it still freezes on me when I try and fix the problems it finds.

Here is my Hijack this log: I twould be great if someone could tell me what to delete.

Logfile of HijackThis v1.99.0
Scan saved at 10:38:46 PM, on 1/16/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\SpellCheckAnywhere\sa.exe
C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\Program Files\Winamp\Winampa.exe
C:\WINDOWS\System32\smtray.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Fi... Read more

A:Diet Patch, Shopping Wizard, and other problems-Please Help Me With a Hijack This Log

Welcome to TSF.

Please don't post your email address in the forum since we have lots of spammers here.

Make sure to update Windows and Internet Explorer at http://windowsupdate.microsoft.com.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that Display the contents of System Folders' is checked. Windows XP's search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that Search system folders, Search hidden files and folders, and Search subfolders are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart you... Read more

Read other 6 answers
RELEVANCY SCORE 62.8

please help me fix this!!! my aim keeps crashing and there seem to be so many other problems with my computer! i don't know what to do anymore!here is my hijackthis log:Logfile of HijackThis v1.98.2Scan saved at 1:10:32 PM, on 12/10/2004Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\msya.exeC:\Program Files\iPod\bin\iPodService.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\wscntfy.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exeC:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exeC:\WINDOWS\system32\F1REFOX.EXEC:\WINDOWS\addov32.exeC:\Program Files\Messenger\msmsgs.exeC:\PROGRA~1\COMMON~1\tsa\tsm2.exeC:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exeC:\Documents ... Read more

A:PLEASE HELP! I HATE SHOPPING WIZARD AND HOME SEARCH ASST!

I dont see an anti-virus running so lets get you fixed up.Go here to download the free version of Grisoft's AVG AntiVirus program.Install the program, check for updates and scan your system allowing it to remove whatever it finds.Please download AIMFix HereRun the program allowing it to fix what it finds.Then post a new log.

Read other 17 answers
RELEVANCY SCORE 62

i seriously need help with this..
i have been trying to delete these three programs above(title)..
i tried almost EVERYTHING!
i tried hsremover and the one that u delete stuff on safe mode thing..
i seriously need to delete these programs...
they r ticking me off...
what should i do first?
 

A:Solved: home assistent, search extender, shopping wizard

Read other 16 answers
RELEVANCY SCORE 62

Logfile of HijackThis v1.97.7Scan saved at 11:22:46 AM, on 12/8/2004Platform: Windows ME (Win9x 4.90.3000)MSIE: Internet Explorer v5.50 (5.50.4134.0100)Running processes:C:\WINDOWS\SYSTEM\KERNEL32.DLLC:\WINDOWS\SYSTEM\MSGSRV32.EXEC:\WINDOWS\SYSTEM\SPOOL32.EXEC:\WINDOWS\SYSTEM\MPREXE.EXEC:\WINDOWS\IPBO.EXEC:\WINDOWS\SYSTEM\SYSEO.EXEC:\WINDOWS\ADDQL.EXEC:\WINDOWS\JAVAKX.EXEC:\WINDOWS\SYSTEM\APPBQ.EXEC:\WINDOWS\JAVAOW.EXEC:\WINDOWS\SYSTEM\CRNJ.EXEC:\WINDOWS\SYSTEM\NETOH.EXEC:\WINDOWS\SYSTEM\MFCUQ.EXEC:\WINDOWS\SYSTEM\CREU.EXEC:\WINDOWS\CRYZ.EXEC:\WINDOWS\SYSTEM\IECC.EXEC:\WINDOWS\JAVATU.EXEC:\WINDOWS\MSEH.EXEC:\WINDOWS\SYSTEM\NTJY.EXEC:\WINDOWS\ATLSG.EXEC:\WINDOWS\MSOJ32.EXEC:\WINDOWS\SYSTEM\SDKJY32.EXEC:\WINDOWS\APPQK.EXEC:\WINDOWS\SYSTEM\RESTORE\STMGR.EXEC:\WINDOWS\SYSTEM\mmtask.tskC:\WINDOWS\SYSTEM\SYSTRAY.EXEC:\WINDOWS\SYSTEM\WMIEXE.EXEC:\WINDOWS\SYSTEM\DDHELP.EXEC:\WINDOWS\SYSTEM\APPBQ.EXEC:\WINDOWS\ADDQL.EXEC:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXEC:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WMPLAYER.EXEC:\WINDOWS\SYSTEM&... Read more

A:seach extender shopping wizard home search assistante

HiSorry for this delay.If you still have problems post please a new hijackthis log.You are running an outdated version of HijackThis.. Delete the copy you have and download the latest version of HijackThis!: Download here HJT 1.98.2. Save it on your Desktop. You will need now to unzip hijackthis.exe to a permanent folder, such as c:\hjt . This has to be done as HijackThis creates backups. You may need to use these backups.First create a new folder:A. Click My Computer icon on your desktopB. Click C: driveC. Click the File menu --> New --> Folder, a folder "New folder" will be created.D. Rename it HJTUnzip hijackthis.exe to the c:\HJT folder.

Read other 1 answers
RELEVANCY SCORE 56.4

I am having major problems. In my add/remove program the shopping wizard and search assistant are listed. When I try to remove them my computer freezes up and nothing happens. I have to shut down and start up again. Computer is running really slow and many programs won't even open. I have run ad-aware and removed what it found, spy sweeper and removed it's findings and mcafee virus scan. I don't know what else to do! Please help me! Thanks in advance! Oh and everynow and then a pop up comes up and the only title it has is "only the best"
 

A:Pleaz help me remove shopping wizard, search assistant, and cool web search!

Read other 12 answers
RELEVANCY SCORE 56.4

Please hijack this log...

Logfile of HijackThis v1.99.1
Scan saved at 8:12:27 AM, on 6/2/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\APITG32.EXE
C:\WINDOWS\SYSTEM\CRJT.EXE
C:\WINDOWS\SYSTEM\D3EB32.EXE
C:\WINDOWS\SYSTEM\SYSAR32.EXE
C:\WINDOWS\SYSTEM\MSGE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\MIXER.EXE
C:\WINDOWS\SYSTEM\KHOOKER.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\HPZTSB09.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\WINDOWS\SYSTEM\NTYS.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\MSGE.EXE
C:\WINDOWS\SYSTEM\MSGE.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
C:\WINDOWS\APITG32.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\APITG32.EXE
C:\WINDOWS\SYSTEM\D3BV32.EXE
C:\WINDOWS\APITG32.EXE
C:\WINDOWS\SYSTEM\WINDO32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\MSGE.EXE
C:\WINDOWS\SYSTEM\MSGE.EXE
C:\WINDOWS\SYSTEM\CRNJ32.EXE
C:\WINDOWS\SYSTEM\CRJT.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGW.EXE
C:\WINDOWS\APITG32.EXE
C:\WINDOW... Read more

A:Uninstall Shopping Wizard, Home Search Assistent, Search Extender

Please help me... Okay... There are links that always appears when I'm starting Internet Explorer... Like "seven days of free porn", "search the web", "only sex website" and "sites about"... Oh! Also, my homepage change to about:blank....

Um.... Also! There is a site that always appears out of the blue!!! The site's name is HARD MOVIES... Also! There is a pop-up sort of... That contains weird no. Then a balloon appears near the clock saying your computer might get infected... Then when you double click it... A Help Browser appears... Mmmmm... It's title is Fight Spyware...
 

Read other 1 answers
RELEVANCY SCORE 56.4

Just got this laptop back from Gateway reformatted. Haven't had it a week and today AIM stopped working. Whenever an IM window opened whether I was sending or being sent a message it would crash. I also get lots of pop-ups when opening IE. I found out it was Search Extender/Shopping Wizard/Home Search Assistent and tried using AdAware, NoAdware, SpySubtract, and CWShredder. Nothing has worked so far. Those three programs are still in my programs list, the pop-ups persist, and AIM still doesn't work. Any help on the matter would be greatly appreciated. Included is a Hijack This log:

Logfile of HijackThis v1.99.1
Scan saved at 4:23:38 AM, on 4/26/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\nettq32.exe
C:\WINDOWS\system32\msed32.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\WINDOWS\system32\wscntfy.exe
c:\Program Files\interMute\SpySubtract\SpySub.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ooelw... Read more

A:Home Search Assistent / Search Extender / Shopping Wizard problem

Read other 6 answers
RELEVANCY SCORE 56.4

I cannot get rid of these programs no matter what I do. Simply trying to remove the programs from Control Panel/ Add/Remove programs , I'm told they can't be found. I followed instructions from another post and used SpyBot, Ad-Aware SE, Hijack This, a Squared trojan remover and About:Buster, but nothing has worked. I figure that maybe the instructions were based on his computer files exactly. So I've posted the logfile from my computer. If anyone can help, I'd greatly appreciate it!

Logfile of HijackThis v1.99.1
Scan saved at 3:24:19 PM, on 3/20/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\ati2evxx.exe
C:\WINDOWS\System32\Atiptaxx.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
C:\Program Files\Microsoft Money\System\mnyexpr.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\system32\mspr32.exe
C:\WINDOWS\System32\wuauclt.e... Read more

A:How do I remove Home Search Assistant, Search Extender and Shopping Wizard?

First of all, you have to unzip Hijack This and save it to a folder of its own in programs files so it can create proper back-ups and function properly.

First click: http://forums.techguy.org/attachment.php?attachmentid=44318

to download cwsserviceremove.zip and unzip it to your desktop and have it ready to run later.
___________________________________________________________________________

Click http://www.intermute.com/spysubtract/cwshredder_download.html to download CWShredder. Do Not run it yet. Download it to the desktop and have it ready to run later.

____________________________________________________________________

Click: http://www.downloads.subratam.org/AboutBuster.zip to download AboutBuster created by Rubber Ducky.

Unzip AboutBuster to the Desktop then click the "Update Button" then click "Check for Update" and download the updates and then click "Exit" because I don't want you to run it yet. Just get the updates so it is ready to run later in safe mode.
_____________________________________________________________________

Now go ahead and set your computer to show hidden files like so:

Because XP will not always show you hidden files and folders by default, Go to Start > Search and under "More advanced search options".
Make sure there is a check by "Search System Folders" and "Search hidden files and folders" and "Search system subfolders"

Next click on My Computer. Go ... Read more

Read other 1 answers
RELEVANCY SCORE 56

I'm trying to work on my Moms machine and I se these three progs installed and they will not go away. I do know they are some kind of malacious spyware. How in the world do I get rid of these? Everything I have done has failed. Can someone please help me out? This is the current log from Hijackthis:

Logfile of HijackThis v1.99.0
Scan saved at 1:09:15 AM, on 12/25/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\GEARSec.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINNT\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\mslb.exe
C:\Program Files\Common Files\Symantec Shared\SymTray.exe
C:\Progr... Read more

A:Home Search Assistant, Search Extemder & Shopping Wizard

http://forums.techguy.org/t110854.html

Have a look in Control Panel > add/remove or in all programs and uninstall them
Go to the above link and download SpyBot Search and Destroy and AD-Aware SE UPDATE and do a scan with both of them getting rid of all they find

Do a scan with Panda and Housecall

After doing ALL th eabove post another Hijack This log here please
 

Read other 3 answers
RELEVANCY SCORE 56

These three nasty things have been bugging me for the past couple of weeks: Shopping Wizard, Search Extender, and Home Search Assistant. Everytime I try to delete them off my add/remove programs it doesnt work. I have tried a number of anti-spyware programs and non of them seem to be able to delete them or even detect them. I would really appreciate if you could help me out and make my life easier. Here is my log from HijacktThisLogfile of HijackThis v1.99.0Scan saved at 12:46:27 AM, on 1/25/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\Program Files\Symantec AntiVirus\DefWatch.exeC:\WINDOWS\system32\HPConfig.exeC:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Symantec AntiVirus\Rt... Read more

A:Shopping Wizard, Search Extender, and Home Search Assistant

Hi Download System Security Suite here:System Security Suite Download & Tutorial. Unzip it to your desktop.Install the program. Don't use it yet.Please print or copy these instructions because you are not able to access the Internet in SafeMode.Make sure you are set to show hidden files and folders: A. On the Tools menu in Windows Explorer, click Folder Options.B. Click the View tab.C. Under Hidden files and folders, click Show hidden files and folders.D. Uncheck Hide extensions for known filetypes and Hide protected operating system files.How to see hidden files in WindowsREBOOT into SafeMode by tapping F8 key repeatedly at bootup: Starting your computer in Safe modeRun HijackThis!, press Scan, and put a check mark next to all these:R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = http://fastsearchweb.com/srh.php?q=%sR3 - Default URLSearchHook is missingO2 - BHO: (no name) - {322B3263-4125-83BC-EA0A-3B07AB10E29B} - C:\WINDOWS\d3yw.dllO17 - HKLM\System\CCS\Services\Tcpip\..\{B7C1C985-C58A-486E-9395-8549A97277A3}: NameServer = 69.50.166.94,69.31.80.244O17 - HKLM\System\CCS\Services\Tcpip\..\{EF25E273-7575-40CD-835E-3AC69DCC4152}: NameServer = 69.50.166.94,69.31.80.244O17 - HKLM\System\CS1\Services\Tcpip\..\{02F8669E-0851-4979-8B37-47F45CB16AD2}: NameServer = 69.50.166.94,69.31.80.244Close all other windows and browsers, and press the Fix Checked bu... Read more

Read other 5 answers
RELEVANCY SCORE 56

ok my hubby picked em up browsing free porn sites
went to many lanks to do what i can to get rid of em....restored to be4 he browsed,ran ad aware,ran norton antivirus 2005,tried the remove program thing...now i did the hijack this thing like i saw everyone talking about...now my confused self needs to know what it all is....what needs to go and so on....
 

A:the home search and his amigoes shopping wizard and search extender

Hello and welcome to Techspot.

Go HERE and follow the instructions carefully. Print them out if you can.

Once you have done that post a new Hijackthis log.

Regards Howard :wave: :wave:
 

Read other 22 answers
RELEVANCY SCORE 56

Three programs called shopping wizard, home search assistant, and search extender are on the add/remove programs list. when i attempt to uninstall them i get an error message. when i load up IE it starts on auto:blank and i get a lot of popups. ive read some threads about this but they have solutions for windows XP operating system and i have wndows 98, the first few steps about turning off system restore, see hidden files and folders appear to be different. here is my hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 20:19:00, on 07/04/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSRTE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHLD.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\PROGRAM FILES\BROADJUMP\CLIENT FOUNDATION\CFD.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://wind-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Expl... Read more

A:Shopping Wizard, Search Extender, Home Search Assistant

ive got mcaffee on my computer, but it keeps crashing after its scanned
 

Read other 1 answers
RELEVANCY SCORE 56

I can't seem to uninstall or even locate Homesearch assistant, searchextender or shopping wizard, even though they are present in my control panel. Please view the following log and make suggestions! I am computer literate, all I need is directions as what to do with this information. Thank you in advance for your assistance. Logfile of HijackThis v1.99.1Scan saved at 22:34:58, on 10-12-2005Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Symantec Shared\ccProxy.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Norton Internet Security\ISSVC.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exeC:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exeC:... Read more

A:Help: Home Search Assistant, Search Extender & Shopping Wizard

Download the trial version of Ewido Security Suite http://www.ewido.net/en/download/ (W2K/XP Only)? Install ewido.? During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".? Launch ewido? It will prompt you to update click the OK button and it will go to the main screen? On the left side of the main screen click update? Click on Start and let it update.? DO NOT run a scan yet. You will do that later in safe mode.Restart your computer into safe mode now. Perform the following steps in safe mode:(Start tapping F8 at the first black screen after power up)Run Ewido:? Click on scanner? Click Complete System Scan and the scan will begin.? During the scan it will prompt you to clean files, click OK? When the scan is finished, look at the bottom of the screen and click the Save report button.? Save the report to your C: DriveThis will take some time to run!Boot to normal modePost that log and a new HiJack log - but do this before the HiJackThis log====================DownLoad EasyCleaner http://www.majorgeeks.com/download414.htmlUse the clear files and Unnecessary files buttons - I do not recommend using the Duplicates files button as many dupes are there on purpose.Not all tmp files will delete ? that is normal.In the unnecessary button I check the top 4 entries

Read other 11 answers
RELEVANCY SCORE 55.6

Thus, far Tech Support Guy has been fantastic in helping me get rid of a bunch of malware. I've run Smitrem, Cleanup!, etc. and all have helped bring my computer back to normal.

However....I still can't get rid of 3 programs that are still in my Add/Remove programs list. These are: Home Search Assistent, Search Extender and Shopping Wizard. All three are sitting in my Add/Remove programs but whenever I try to remove them I get redirected to a site called:

looking-for.cc/smartfinder/uninstall/HomeSearchAssistant.html

and it tells me to download a file. I doubt that's a good idea.

How can I ever get rid of these three programs? My HJT file is below for your review...

Logfile of HijackThis v1.99.1
Scan saved at 11:40:29 PM, on 12/28/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program F... Read more

A:Can't Get Rid of Search Extender/Search Assistent/Shopping Wizard!! Help!!!

Please do not start a new thread for the same problem.

Closing duplicate.

Continue here:

http://forums.techguy.org/security/428762-got-hit-hard-please-help.html
 

Read other 1 answers
RELEVANCY SCORE 48.8

Hi People.,

I have a friend who has a Mac notebook. He wants to buy a USB drive for it. I have a PC desktop. He's asked me for help. I don't know what to do. Is shopping for a mac notebook HD any different from a PC notebook HD?
 

Read other answers
RELEVANCY SCORE 41.6

Over the last year, all the new hardware devices I have bought will not work on my laptop. When I plug in the devices, they just bring up the found new hardware wizard and never does it work. I even have the disc for all of them and it still just doesn't work. Specifically, I have a lexmark printer. I have downloaded the drivers on their website but I still cannot install the printer because halfway through installation, I have to plug in the printer to the computer and it cannot be recognized. I went to Sony Vaio's website and updated a few things. I believe I'm working on SP3 right now. any advice or suggestions?

I need to add that I cannot find the XP disc. I'm not sure whether it came with my computer when I bought it but I just can't find it.

A:Found New Hardware Wizard and Add Printer Wizard do nothing

Some USB devices...need to have the drivers installed/available...before the device can be recognized.

Whatever printer you are using...are you following the installation instructions provided by the printer manufacturer?

Louis

Read other 4 answers
RELEVANCY SCORE 40

I am trying to find a way to be able to use sysprep without the
mini-wizard or welcome wizard!?

A:sysprep without the mini-wizard or welcome wizard

Hello,

Not sure if this is what you are looking for but have a look at at the following article

http://support.microsoft.com/kb/287506

Read other 2 answers
RELEVANCY SCORE 39.6

I'm pulling out my hair please help. Here's my HJT logfile.

Logfile of HijackThis v1.99.1
Scan saved at 7:16:48 PM, on 7/31/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
f:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
C:\WINDOWS\MXOALDR.EXE
F:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
F:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\sobrado.AOA1\My Documents\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Soft... Read more

A:Malicious Software Removal Wizard, Spyware Removal Wizard, System Integrity Scan Wiz

Please do not start more than one thread for the same problem.

Closing duplicate.

Please continue here:

http://forums.techguy.org/security/488003-hjt-logfile.html
 

Read other 1 answers
RELEVANCY SCORE 36.4

Okay, so I'm building a machine for a classmate [I ain't complaining, he pays p&s up front, I get $50] but its been a little while since I've been parts shopping. I've always been kinda leery of "off-brand" products. I know Asus is good, but, Does this seem safe?
He's a little "slow" and insists on a dual-core Intel, yet he wants something cheap. And I'll have a hot popsicle, please.
Anyway... he basically wants the PC for music, movies, and web surfing. So, I was thinking this processor with that mobo, a decent gpu [64 - 128 meg AGP; something cheap but reliable] and a reasonably nice sound card. Oh, and a trustworthy PSU.
Anywho. Thoughts on the mobo, and maybe a sound card suggestion? I've never actually bought one, myself....
 

A:More shopping

Read other 16 answers
RELEVANCY SCORE 36.4

I am about to "go shopping" for a new ISP. Presently my provider's service varies from satisfactory to poor. When calling tech support, I sometimes think I know more than they do, for each time I am told something different and each time they change my "extra settings." At present it is working but have a terrible time getting my mail in Outlook Express. If any files come in containing pictures they take forever. I have timed 350kbs taking a half hour or more and large files 2 megs or more, sometimes "clog" and I have to keep closing OE out and reopening to get. Of course they blame my settings or my modem.
I have A Gateway PC with Windows ME. My modem is 56K PCI Voice Modem SF-11561VR9A. It has the latest updated driver and I have ran multiple tests on modem and they can find nothing wrong. Also I had other providers in past and had no problems with these things. I discontinued service from them for aother reasons.
My question is:
What questions should I ask when calling new providers? Is there a way to pin them down about connection speeds, speed of email downloading ect?
 

A:Shopping for New ISP

Read other 8 answers
RELEVANCY SCORE 36.4

Hi guys

Not posted on here for a while now, the new look is great.

Anyhow, was just wondering if there are any web-sites that sell to the UK. If there are, can savings be made due to the current low value of the $ when compared to the £. Or will customs add vat, tax etc making it pointless.

Just curious, any answers appreciated.
 

Read other answers
RELEVANCY SCORE 36.4

Okay, I'm in the market for a new graphics card - the old one's showing signs of age... 128 MB Radeon 9200 PCI...

So, I only wanna put $50 or so into this, but I want something that'll be okay for gaming. Not anything spectacular, obviously. Hell, I ran HL2 on my current one...
 

A:Who wants to go shopping??

Read other 16 answers
RELEVANCY SCORE 36.4

I have a mach speed board modle is mk8-939a and I would love to put a new cpu in it that doesn't run over $35 not sure what to get if anyone could help thank u. It has a amd sempron modle # sda3000di02bi would like something faster.
 

A:Shopping for CPU (max $35)

eBay - socket 939 processors X2

I'm not sure which CPU's the motherboard will support, without seeing a support list. I did a quick search and didn't see a support list. Good luck.

Personally, I think its a waste of money unless you are replacing a faulty component. Keeping the machine going is one thing but spending money on a upgrade for such an outdated socket design is another.
 

Read other 3 answers
RELEVANCY SCORE 36.4

HI

I’m looking to buy a USB 2/Firewire External Hard Drive Enclosure, meaning it will be an external case with both Firewire and USB 2 port with an Oxford911 chipset (bridge based Firewire drives) that will let me plug in any hard drive of my preference.

So far this is the one I have found that has all the specifications above
http://www.centuryglobal.com/Product/product1.html?Enclosures/IC1394USB2.js
What I need is to see if you guys know any corner of the internet where some store is selling this item or similar, for a good price (I already looked on eBay)

Thanks

Alex
 

A:Shopping help :)

There seem to be a few if you search Google. I found these examples:

http://www.firewiredirect.com/firewire/products/drivekit.shtml#47007

http://www.esbuy.com/enclosures.html

http://www.firewiremax.com/usbfir13come.html

http://www.cooldrives.com/firen.html

Gram
 

Read other 2 answers
RELEVANCY SCORE 36.4

I'm trying to upgrade this Yugo, I mean Gateway. I need a video card PCI, 32-bit, +3.3v PME, i2c/smbus; hell if I know what any of that means. Will the PROLINK MVGA-NVG34P Geforce FX5200 128MB DDR PCI Video Card fit the bill?

Wrong place but same project, I also want to up to 1gig ram using 2 512k cards, I need ddr-sdram. This is what I am looking at pqi POWER Series 512MB 184-Pin DDR SDRAM DDR 400 (PC 3200) Unbuffered System Memory Model MD4412UOE, same question.
Also with these upgrades will I need a case fan? Probebly get one anyway, they're fairly cheep. And a cpu cooler? again. not a very pricey item.
I'm trying to get this in under $250, looks like it wont be much of a problem.

Oh, ya, Hello
 

A:***** shopping

gateway, says you? it's an oem build, don't waste your time trying to upgrade it. my advice is to get yourself a standard machine instead.

TS could be a much bigger help if you filled us in on what you plan to use the machine for, the specs of the gateway, and how much money you're willing to spend.
 

Read other 11 answers
RELEVANCY SCORE 36.4

Hi again.. as mentioned in my last post, I'm shopping for a new comp.. I don't think I want to build it myself.. I have no idea how and I fear I'll screw it up.. Now, I read before that Dell is nearly considered profanity here, but I'm considering them- Don't flame!

I'm a little confused on a couple of the options available..

questions I have are: what would the performance difference between a 400MHz and 533MHz front side bus?

Gateway advertises Processor: Intel® Celeron® Processor 2.8GHz with 128K cache- what is that 128K cache for? They don't list the front side bus, is the cache the same thing or does the Celeron processor not need it? If it's the same thing, which is higher, or how do I covert?

finally, a lot of the processers list at 2600, 2200, ect.. how to I convert that to GHz?
 

A:Shopping..

Read other 9 answers
RELEVANCY SCORE 36.4

I have an Aspire M5640, it's been treating me well for a while now, have an upgraded graphics card and sound card, but I haven't touched anything else. I'm looking into upgrading the processor now. Just wondering what anyone would suggest. Just trying to get the most out of the system.
 

Read other answers
RELEVANCY SCORE 36

We are looking for laptop users to weigh in on our search for my wife's new laptop.

She will be using it (almost) exclusively at home, therefore it will be plugged into an outlet most everywhere she takes it around the house. She will be using the laptop for minor business applications but mostly enjoyment. Vista appears to pretty much be what the "big box" stores and everyone else is selling, so it looks like that will inevitably pre-loaded.

She would like a minimum 15 inch screen, and from what I know (which isn't a ton), she will want a processing speed of at least around 1.7 or above and a RAM of at least 2GB (since we have been told by several people that Vista alone will take about 1GB and will slow anything less than 2 GB down). We have looked at Toshibas, HP's, and Sonys, etc, but would consider anything anyone has a strong feeling about. This would include Acers (which we know nothing about) and pretty much any other manufacturers out there with a reliable product. I have not highly considered Dell because we have owned a few (desktop and laptop) and I have not always been happy with them for a variety of reasons(just a personal thing I guess). But I would not want to "cut off my nose to spite my face" if they (Dell) have a laptop out there to consider. We would like to keep things in the range of no higher than $900 or so.

After wending my way through the dual cores, AMD vs. Pentium, Centrinos, etc, I thought it would make sens... Read more

Read other answers