Home > Please Help > Please Help Me Remove FakeMSN8Beta And Microsoft.Windows.RedirectedHost:

Please Help Me Remove FakeMSN8Beta And Microsoft.Windows.RedirectedHost:

koochman, Jul 22, 2006 #38 Shadow_Puter_Dude MG Authorized Malware Fighter You're welcome Shadow_Puter_Dude, Jul 23, 2006 #39 (You must log in or sign up to reply here.) Show Ignored Content That may cause it to stall ------------------------- Download Deckard's System Scanner to your Desktop. koochman Private E-2 I have tried all I can myself, and I think it is time for help. I deleted the specified values using Registrar Lite, then verified that they were in fact deleted. his comment is here

All rights reserved. Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! No, create an account now. Anytime I open the program, it is immediately closed so I am unable to run any scans.

Shadow_Puter_Dude, Jul 22, 2006 #33 koochman Private E-2 Ok I will have him start a thread after we run through the Read Me first thread. For any program that doesn't have an add/remove entry, you will have to do this:re-install the program -> reboot -> uninstall## Do NOT proceed with the rest of the fix until Logfile of Trend Micro HijackThis v2.0.0 (BETA) Scan saved at 6:46:03 PM, on 21/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe E-Ventures N.V.FWNToolbar E-Ventures N.V.PCSkinsBrowser EverAd EverestPoker Evil Pop Ups EvilEye EvilEye Evil-VNC Evirgola EvolutionHTTP eXact Advertising.BargainsBuddy eXact Advertising.BargainsBuddy eXact Advertising.eXactSearchbar Excite EXDialer Exolon Expedioware ExpertAntivirus Exploit.Anifile ExPup EyeSpyNow EzCyberSearch ezCyberSearch.SureBar EZ-Searching

Didn't even get to thank him again. Does it run?Click to expand... Also, my friend who's malware problems first started mine has the same symptoms as I did. Also opens but closes almost immediately.

I found it simply by changing the folder options to show hidden files and folders. Please help me remove FakeMSN8Beta and Microsoft.Windows.RedirectedHost: Discussion in 'Virus & Other Malware Removal' started by GMcP, Jul 11, 2007. Could I attempt to solve his problems with what we did here, or would it be better to start a new thread with the proper logs from his PC? https://support.microsoft.com/en-us/help/10555/microsoft-account-how-to-turn-off-family-features I am at a loss at this point.

Install version 1.5.0_07 available from http://www.java.com/en/download/manual.jsp. What DSS will do: create a new System Restore point in Windows XP and Vista. If it works, try to use that registry patch I gave a while pack. I received no error.

So I opened MSconfig, which now runs stable! https://forums.spybot.info/showthread.php?28747-fakeMSN8beta-and-Redirectedhosts/page2 International.Downloader E2Give eAcceleration Easi Mp3 Easy CD Creator EasyInstall EasyKeylogger Easy-Spyware-Killer EazyDial EbayBill.F eBayToolbar.v1 eCommerce EditPad Lite EES-Gateway EffectiveBandToolbar EGDAccess EGDAccess EGen E-Gold eGroup eGroup.InstantAccess Eicar-AV-Test Electronic.Group.Porn Element Elite Keylogger Elitec CWShredders finds a MSconfig problem file. I would appreciate any help.

Do one of the below based on which version Win XP you have. this content Uninstall all older versions of Java on your computer, before installing the latest version of Java. >> Lets flush all your restore points and create a new clean one for your Any ideas? False Positive.

By continuing to use this site, you are agreeing to our use of cookies. My father has XP Media Edition, could I take the file from that disc, or no? It has since infected my computer and I am struggling to get rid of it. weblink Help Home Top RSS Terms and Rules All content Copyright ©2000 - 2015 MajorGeeks.comForum software by XenForo™ ©2010-2016 XenForo Ltd.

This will open a command prompt window. Run it in Normal Boot mode. Attached Files: newfiles.txt File size: 8.9 KB Views: 4 koochman, Jul 17, 2006 #14 chaslang MajorGeeks Admin - Master Malware Expert Staff Member koochman said: I also ran regedit in safe

It is mostly just a scanning tool to provide lists of new files if a few folders.

I was allowed to create a new user account with no problem. Even immediately after malware removal, I cannot get into the Bitdefender site. While in safe mode click Start, Run, and enter cmd and click OK. Also do the below: Run the below procedure and attach the runkeys.txt log.

The logs you posted thus far show no problems at all. Spybot finds 62 Windows.RedirectedHosts, FakeMSN8Beta which contains 6 entries. The program will open and stay open in both normal and safe mode.Click to expand... check over here I can't run it though.

Save it as fixme.reg to your desktop. Paste the below filenames into KILL BOX one at a time. Attached Files: newfiles.txt File size: 9 KB Views: 4 exefiles.txt File size: 15.5 KB Views: 2 runkeys.txt File size: 11.2 KB Views: 5 koochman, Jul 18, 2006 #16 chaslang MajorGeeks Admin Just work around them and delete all others.

They are just new. The registry editor will open in safe mode however. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry. Does the registry editor now open?Click to expand...

Attached Files: newfiles.txt File size: 22.4 KB Views: 1 runkeys.txt File size: 11.4 KB Views: 3 koochman, Jul 16, 2006 #10 chaslang MajorGeeks Admin - Master Malware Expert Staff Member koochman If Killbox does not reboot or you get a Pending Operations type error message just reboot your PC yourself. StartPage.NK Startpage-AP StartPage-EH StartPage-N StartSurfing Starware StarWare Statblaster.All files7 Statblaster.Fixit Statblaster.Installer Statblaster.MemoryWatcher.b Statblaster.tracker7 StatCounter Stealth Keylogger Stealth Web Page Recorder StealthWebsiteLogger Stickypops.com STR.WMF Stration Stration.C Stration.ICQ Stud.A Stukach SubSearch SubSeven Subseven215 Then run ShowNew again and attach a new log.

When I delete the 2 values you said to delete, they appear to be deleted, but if I open the Policies\System folder again, they remain there. OK! I have included a log as well. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

Your firend should start his own thread; starting by running through the Read Me First. My Norton virus protection will not work, virus/spyware help sites are blocked, and msconfig will not function or stay open for more than a couple seconds. REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentVersion\Run] "csrss"=-Click to expand... PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics) Social:

In the command prompt windows enter the below command strings each followed by the enter key (note there are spaces between the -h and the -s arguments) cd c:\windows\system32 attrib -h AbbySue, Jul 21, 2006 #27 koochman Private E-2 Thanks for the explanation AbbySue! I would just like to add that if I try deleting the 2 values with Reg Lite in safe mode, they will delete and remain so until I restart to normal