What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Redirected Host

91 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #61
:( Hi Tom, I've tried downloading older versions of CCLEANER. And each time I get the same error. RUNTIME ERROR 48 File not found OLEPRO32.DLL Do you have another program that I could try, the pop up window error says there's a TREEVIEW error, when I try and unzip ccleaner. And I'm sorry I uploaded the whole file from MicroWorld, I saw that part about making the copy of the LOWER window the last time I re-read that post. I'll run that after, you give me a program to do the clean up, or tell me where to get the .dll file so CCLEANER will work. Thanks EM
Post #62
Ernie,

You can download it here.
http://www.dlldump.com/download-dll-files….l/download.html

It will be a zipped file so you will have to unzip it. Unzip it to your C:\WINDOWS\SYSTEM folder.

If you need an unzipping utility, you can download the evaluation version of WinZip.
http://www.winzip.com/

I think you may be ok at this point as far as malware goes, but before we install any other spyware blocking programs, do this..
Open HJT and click on Misc. Tools, then open the Host File Editor, open it in Notepad, and copy and paste the contents of that file in your next post.
Post #63
HI Tom, I was able to complete the downloads got the Olepro32.dll unziped. I ran CCLEAN I ran MicroWorld Scanner This the list of found items. File System found infected by "Lycos Sidesearch Spyware/Adware" Virus. Action taken: No action taken. File System found infected by "180Solutions spyware/Adware" Virous. Action taken: No action taken. File System found infected by "VX2 Spyware/Adware" Virus. Action taken: No action taken. File System found infected by "mywebsearch Spyware/Adware" Virous. Action taken: No action taken. File System found infected by "dvx Spyware/Adware" Virous. Action taken: No action taken. File System found infected by "VBand VBA Program Settings Spyware/Adware" Virous. Action taken: NO action taken. Here's Hijackthis Misc., Tools, Host File contents, # Copyright © 1993-1999 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a "#" symbol. # # For example: # # 102.54.94.97 rhino.acme.com # source server # 38.25.63.10 x.acme.com # x client host # 127.0.0.1 localhost 127.0.0.1 www.igetnet.com 127.0.0.1 code.ignphrases.com 127.0.0.1 clear-search.com 127.0.0.1 r1.clrsch.com 127.0.0.1 sds.clrsch.com 127.0.0.1 status.clrsch.com 127.0.0.1 www.clrsch.com 127.0.0.1 clr-sch.com 127.0.0.1 sds-qckads.com 127.0.0.1 status.qckads.com B) Sorry for the delay… EM
Post #65
OK Tom here's the Hijackthis.log

Logfile of HijackThis v1.99.1
Scan saved at 1:00:28 PM, on 4/7/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\BILLP STUDIOS\WINPATROL\WINPATROL.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O3 - Toolbar: FDA Bar - {9595C62C-76C6-49A6-9BDA-3253DD7A34FF} - C:\PROGRAM FILES\FREE DOWNLOADS ACCELERATOR\FDABAR99.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRAM FILES\BILLP STUDIOS\WINPATROL\winpatrol.exe
O4 - HKCU\..\Run: [ccleaner] "C:\PROGRAM FILES\CCLEANER\CCLEANER.exe" /AUTO
O8 - Extra context menu item: Download with Free Downloads Accelerator - C:\Program Files\Free Downloads Accelerator\fdaie.htm
O8 - Extra context menu item: &AOL Toolbar search - res://C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL/SEARCH.HTML
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: AOL Instant Messenger (SM) - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM95\AIM.EXE
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {B91AEDBE-93DF-4017-8BB3-F1C300C0EC51} - http://www.learn2type.com/Rel092/setup.exe
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200312…meInstaller.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.av.aol.com/molbin/shared/m…83/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.av.aol.com/molbin/shared/m…,20/mcgdmgr.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www5.incredimail.com/contents/setup…p1/imloader.cab


Thanks

EM
Post #66
Ernie,

There is nothing in any of those logs that you posted to suggest that you still have malware or a virus on your system. :D Your hosts file was normal, those are the entries that we put in with Spybot. Microworld scanner isn't pointing to a specic file or folder, they may be random entries.

Reboot your PC into Safemode and go to
C:\WINDOWS\TEMPORARY INTERNET FILES select all and delete all thats in there, do the same for
C:\WINDOWS\TEMP Just contents of the TEMPORARY INTERNET FILES and TEMP folders, not the folder itself.

Now empty your RECYCLE BIN

You may want to consider browsing with the Firefox browser, it is a lot more secure and less prone to aquiring Malware. I have been useing it for about 6 months and just use IE now and then when I have to. It won't interfere with Internet Explorer, there is nothing to uninstall, you can use both browsers if you wish.

Before I have you install a couple of programs to block Malware, please post back and let me know how your system is running and if you feel that you are still having problems.
Post #67
:lol: OK that's done, safe booted. Deleted Windows System Temporary files (and) Temp files. The system is running much better, and quicker too. The last few times I've booted I got this message on the boot Dos screen. C:\ C:\ (Rem) TShoot: @ If exist C:\Wininst0400\SuWarn.bat Del C:\Wininsto0400\SuWarn.bat C:\ C:\ (Rem) TShoot: @ IF exist C:\Wininst0400\SuWarn.bat Del C:\ Wininst0400\SuWarn.bat C:\ then the system will continue to boot. I don't know why that's happening but, this is an old computer with and upgrand from windows 95 to 98. I'm using AOL 7.0 right now, can I use that Firefox browser with that? I'm unable to log on with Internet Explorer by itself. That won't connect. And I get this pop up menu, (WORK OFFLINE) while online with AOL, and internet explorer window pop up (Connect?) (Stay off line) "While online when I link to a website." I click Connect and then it'll link to the website. That never happened before all this mess started. Other then that everythings just great! :rofl: B) This has been one hell of an education many many thanks guys YOU ROCK! EM
Post #68
Ernie,

Looks like your in good shape :D

The lines your getting at startup are from when you upgraded to Win 98, they have to do with a failed installation, but the (Rem) part is blocking it from starting which is fine. You may want to inquire about this on one of the tech support boards that I suggested in a previous post, this has nothing to do with malware.

What you have to do with AOL, is to log on and then minimize the window and then start the Firefox browser.

Just a tip for future reference, I have never been a big fan of upgrades on Operating Systems, you just bring any problems you had on the old system and there still there on the new. Your always better off to back up anything you don't want to lose like photos, documents to a CD and do a clean install of the new OS.

So… at this point this is what you have to do to maintain your system in good working order.

* Run Spybot Search and Destroy,check for updates, Immunize and run the scan on a regular basis.

* Run Ad-Aware as well.

* Install Spyware Blaster, this program won't scan your system like the above programs but will sit in the background blocking most of the bad guys from getting in. Make sure that you check for updates often and enable all protection.
http://www.javacoolsoftware.com/spywareblaster.html

* Another good form of protection is to install SPYWARE GUARD, operates same as above.
http://www.javacoolsoftware.com/sgdownload.html

* It looks like you have no virus protection, you can download and install an excellent free program (been using this one myself on my second computer). Make sure to let it update and run a scan about once aweek.
http://free.grisoft.com/freeweb.php/doc/2/lng/us/tpl/v5

* You may want to install a firewall to keep the hackers out, ZONE ALARM, this is one of the best, make sure you download the free version. It may drive you crazy at first, but once it is set with all the programs that you want to let in and out, it is a life saver. It won't let anything IN or OUT without your permission.
http://www.download.com/3000-2092-10039884…page&tag;=button

* Go to START/ PROGRAMS/ WINDOWS UPDATE,and make sure to install ONLY THE CRITICAL UPDATES AND NOTHING ELSE.

* Also go to START/ PROGRAMS/ SYSTEM TOOLS and DEFRAG your hard drive once a month or so, along with running CCleaner This should keep your system nice and clean.

Well Ernie, it's been a nice ride, :D hopefully this has been a good learning experience for you, I hope you follow the above suggestions and keep your computer running well.

Thanks so much for using TOM COYOTE , and if you have problems in the future, please don't hesitate to post back. This thread will be closed so you will have to start a new one.
Post #70
If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
Include your post user name and detail why you need it reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked at.

If this is not your thread please start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI