system
December 1, 2010, 8:18pm
1
Hey all!
New user here, but have read the forums before. I will start off saying I know there is a thread about this already, and have read it, but I have different circumstances.
I’ve been given a netbook by a friend, asking to fix it up since it wouldn’t connect to the internet, and kept having a pop-up every time you opened something. I subsequently found “Search Setting v1.2.3” by Spigot, Inc.
Now, my dilemma is this:
It has no access to internet due to this, so can’t download HJT or Malware programs.
Since it’s a netbook, it has no CD drive and I don’t have an external HDD to put programs above on.
The specs of the computer are:
Also, I found Dealio Toolbar previously, and removed it since I saw several toolbars and figured that so many were lagging the system. I found a website that showed the registry keys for Spigot,Inc services via Google, but I can’t find them on here.
Any help with this problem will be much appreciated!!
Well, do you have access to a flash drive? You could use that to get some cleanup programs on the machine.
In the meantime, you could search the registry under HKLM\Software\Microsoft\windows\CurrentVersion\Run and delete anything that looks suspicious or that you know is part of the spigot or dealio software.
You could try starting the computer in safe mode with networking, looking at the internet options applet in control panel, then the connections tab, then “LAN” settings to see if there is a proxy server set (if there isn’t supposed to be one).
Oh, and welcome to the forums!
system
December 1, 2010, 9:56pm
3
Thanks for the quick reply!
Here are corresponding MBAM and HJT logs.
MBAM:www.malwarebytes.org
Database version: 5214
Windows 6.1.7600
01/12/2010 21:05:36
Scan type: Quick scan
Memory Processes Infected: 0
Memory Processes Infected:
Memory Modules Infected:
Registry Keys Infected:
Registry Values Infected:
Registry Data Items Infected:
Folders Infected:
Files Infected:
system
December 1, 2010, 9:58pm
4
Logfile of Trend Micro HijackThis v2.0.4
Running processes:
system
December 1, 2010, 9:58pm
5
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 http://search.bearshare.com/ http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://home.sweetim.com @C :\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll@C :\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll@C :\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm@C :\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
–
system
December 1, 2010, 10:02pm
6
I see
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\4.3.0.5\ccSvcHst.exe
You have to remove Norton before you can run avast!.
system
December 1, 2010, 10:08pm
7
I intend to do this once I have internet back and running on it. The 2 Desktops and 2 Laptops in the household run Avast.
