Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Spyware"smartpops",popups,trojan "pakes.C"


  • Please log in to reply

#16
xxlucienxx

xxlucienxx

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
In one of my prior posts, I was curious as to what these HJT log entries are:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...ario&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...ario&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.h...ario&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.h...ario&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...ario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...ario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...ario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.h...ario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.h...ario&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...ario&pf=desktop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost

View Post


Just wondering if I can or should fix them or not.
  • 0

Advertisements


#17
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,674 posts
You can fix the ie.redirect.hp entries.
They were put there by the manufacturer of your PC, but they are not necessary.

The localhost is best left alone.
It can end up giving you problems if you fix that one.

You can delete this file:
C:\WINDOWS\Digital Signature 20050113.htm

It should go without problems. Keep it in the recycle bin for a few days, just in case it does turns out to be usefull. (It shouldn't be important)

Regards,
  • 0

#18
xxlucienxx

xxlucienxx

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
Okay sounds good, now how do I clean up that SmartPops spyware?
  • 0

#19
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,674 posts
The next Spybot scan should not find it or be able to permanently remove it.

Let me know,
  • 0

#20
xxlucienxx

xxlucienxx

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
Here is the Spybot results showing that it could not fix the SmartPops spyware:

Network Essentials.SmartPops: Data (File, fixing failed)
C:\WINDOWS\Digital Signature 20050113.htm


--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2005-09-08 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2005-05-31 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2005-05-31 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2005-10-07 Includes\Cookies.sbi (*)
2005-10-07 Includes\Dialer.sbi (*)
2005-10-07 Includes\Hijackers.sbi (*)
2005-10-07 Includes\Keyloggers.sbi (*)
2005-10-07 Includes\Malware.sbi (*)
2005-10-07 Includes\PUPS.sbi (*)
2005-10-07 Includes\Revision.sbi (*)
2005-10-07 Includes\Security.sbi (*)
2005-10-07 Includes\Spybots.sbi (*)
2005-02-17 Includes\Tracks.uti
2005-10-07 Includes\Trojans.sbi (*)
  • 0

#21
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,674 posts
Can you check if that file actually came back?
I asked you to delete it manually earlier. Did that work?

Regards,
  • 0

#22
xxlucienxx

xxlucienxx

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
Okay, I failed to delete it before. I deleted it and Spybot now shows a clean run. It seems like everything is working great now.
Thanks for your help and patience!!!
  • 0

#23
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,674 posts
No problem.

Glad we could help. :tazz:

Please do have a look at my site about removing and preventing spyware.

Regards,
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP