Hya xmetalxheartsx_, welcome to PCHF.
First look in your add/remove programs for any of these:
Ezula
popupwithcast
Oin
OuterInfo
Yazzle by OIN
Cowabanga by OIN
PuritySCAN By OIN
Snowballwars by OIN
ipwins
Zolero
Tizzletalk
MediaTickets
Forethought
Quicklinks
PSLister
or anything similar with Oin or Outerinfo in it.
If any of those names are found, click on it, and click remove.
Reboot and delete this folder if found:
C:\Program Files\PurityScan
If not listed, download and run this uninstaller:
http://www.outerinfo.com/OiUninstaller.exe
Tutorial for the uninstaller if needed:
Uninstaller
Reboot when done and delete this folder if found:
C:\Program Files\PurityScan
Run
HijackThis , select to do a "system scan only" and then place a check beside each of the following:
(if still present)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
Windows Live
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
Windows Live
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?Link...cid={SUB_CLCID}
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost;
R3 - URLSearchHook: (no name) - {9A4892AE-2F6A-07B8-1CF6-00E2EA077BB5} - C:\WINDOWS\system32\mvbs.dll (file missing)
O2 - BHO: SSL encrypt - {746455FE-D059-47e7-AF0E-140E03F5A447} - C:\WINDOWS\system32\nsyB8.dll
O2 - BHO: (no name) - {9A4892AE-2F6A-07B8-1CF6-00E2EA077BB5} - C:\WINDOWS\system32\mvbs.dll (file missing)
O4 - HKLM\..\Run: [septpop06apsept] C:\program files\popupwithcast\septpop06apsept.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c =Q106&bd=presario&pf=laptop
O16 - DPF: {5526B4C6-63D6-41A1-9783-0FABF529859A} - mk:@MSITStore:C:\DOCUME~1\Amanda\LOCALS~1\Temp\mma .chm::/joysavsht.cab
Now first close all windows and browsers other then HijackThis , then click
Fix checked and close HijackThis.
Then manually delete these files and folders if present:
C:\WINDOWS\system32\mvbs.dll
C:\WINDOWS\system32\nsyB8.dll
C:\program files\popupwithcast
C:\Documents and Settings\Amanda\Local Settings\Temp\pre.exe
C:\Documents and Settings\Amanda\Local Settings\Temp\mma.chm
After that reboot your pc, and post a new HijackThis log please.
And do you know these yourself:
O3 - Toolbar: 977 Music Toolbar - {e63ee7fe-8e20-48fd-91d2-99e179860d38} - C:\Program Files\
977_Music\tb977_.dll
and:
C:\Program Files\
Evrsoft First Page 2006\Iscripts\Page Details\crazy-window.izs -> Not-A-Virus.BadJoke.JS.RJump : No action taken.
PC Help Forum
» Security & Safety
» [Fixed] Hijackthis! Logs
»
[Fixed] Adware please help!
[Fixed] Adware please help!
Linear Mode
