View Single Post
Old 06-19-2004, 03:35 AM  
Mutt
Too lazy to set a custom title
 
Mutt's Avatar
 
Industry Role:
Join Date: Sep 2002
Posts: 34,431
sorry i got your name mixed up with another person who posts here.

ok gName: phantasm40
Date: June 17, 2004 at 17:10:41 Pacific
Subject: Home Search Assistent

Reply:
I had the pervasive little creation of some moron's making and could not eliminate it with any virus software or spyware removal prog. It also messed up my search programs. This put three new apps in my Add/Remove list...Home Search Assistent, Search Extender, and Shopping Wizard. To remove it I kinda got an idea from this forum of what to look for (thanks!!!), ran a 'Find' using the date feature (I had a clear idea of how far back to go because it was hijacking my browser) and found 16 exes, 8 dlls, 28 dats (all in either Windows or Windows/System) and a suspicious folder named 'ieki'. Most files were 5 digit jibberish, but some were longer ie 'ywnyqa.dat'. I highlighted all of them straight from the Find window and used a shredder to delete and wipe (not all were removed!) and went straight to my registry prog to clean out obsolete entries. Ran a new 'Find' and was left with three exes...iexm32.exe, apizo32.exe and ntcj.exe. I had to use an uninstaller (Cybermedia) that cleans the registry at the same time as deleting these files and reboots after each deletion because they were set in start-up (kill first with Ctrl-Alt-Del). You also have to be careful to view what is being deleted because it attached itself to other registry settings, one of which was my virus protection program...I just clicked off the deletion of those particular entries. Last I used 'Your Uninstaller' to 'force' delete the entries in Add/Remove for Home Search Assistent etc and used Spybot S&D to reset entries for seach engines...the bad ones were 'res:\\...dll'. Phew...no more problems or hijacking! PS: I also had a similar file named 'd3ym32.exe, but it's completely gone...all I have left is to reinstall my search program because it was rendered useless.
__________________
I moved my sites to Vacares Hosting. I've saved money, my hair is thicker, lost some weight too! Thanks Sly!
Mutt is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote