a hijacker keeps reappearing with each S&D scan

about your last instructions

Hi Ken,

When I went into safemode to go delete what ever was in The Temp folder. I only saw two empty folders that have nothing to do with ImInstaller and it was not even there. I did not fix it with spybot since you wanted me to go into Safemode and delete it there. What I found in the Temp folder was a bunch of languages like french.bin and the like. Do you still want me to delete everything in that Temp folder? I am confused as to where the ImInstaller is since spybot did detect it.:confused: let me know what you think, K :thanks:
 
Go ahead and run TFC (Temp File Cleaner ) and then run Spybot and see if it still picks it up
 
All Clear

Hi Ken

Ran the TFC in safemode and then Spybot and nothing showed up. I have to run my computer and surf a bit and will run spybot again to see if it showes up again. Because I did get rid of it before and then the next day I ran spybot again and it came back so if it does not come back then I am good to go and want to thank you for all your help:bigthumb:

Linda
 
Hi Linda,

Lets take another look,


Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2


  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    Code:
    :folderfind
    Incredimail
    :filefind
    Incredimail
    :regfind
    Incredimail
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
 
Help can't use the SystemLook

when I click on the Mirror #1 and #2 it won't let me save to desktop only to save to C:\Documents and Settings\Authorized User\My Documents\Downloads then I clicked on run a box comes up and nothing happens. I click on Look then system Look Error Script required shows up. What do I do now?
 
Right click on it and select CUT, then paste it on your desktop

C:\Documents and Settings\Authorized User\My Documents\Downloads\SystemLook

If it still wont run try it in Safemode but still keep it on your desktop

To Enter Safemode
  • Go to Start> Shut off your Computer> Restart
  • As the computer starts to boot-up, Tap the F8 KEY somewhat rapidly,
    this will bring up a menu.
  • Use the Up and Down Arrow Keys to scroll up to Safemode
  • Then press the Enter Key on your Keyboard
 
Still does not work

I did as you asked but it still does not work. you know there really is no icon. It is as if the download did not complete. I have tried several times the icon that shows is like a little box with a blue bar with 3 dots on the right side but no systemlook icon if there is suppose to be. Anyway, It did the same thing as I stated above.
 
Hi Linda,

There may be something wrong with the download, I moved my copy to the trash and tried downloading from both links and got the same thing you did :oops:


So lets hang off on that for the moment, I am going to check and see whats going on with it. In the meantime just do like you said and surf a few days and then run Spybot and lets see if it comes back.
 
Good Morning Linda,

Six of the helpers on the forums downloaded and it, no icon but the program ran just fine. Drag your copy to the trash and lets use Internet Explorer to download it again to your desktop. When the box opens thats asks you if you want to run it or save it , save it to your desktop.

Try this link
http://downloads.malwareremoval.com/SystemLook/SystemLook.exe

Lets cut back on the search and see what happens this time

Input this script

:filefind
Incredimail


When you open Systemlook, are you copying the script and pasting it it the box ?
 
Last edited:
Hi,

I reopened this thread for you, so glad your back up and running and everything is good :cool:


We need to update your Java to keep you more secure
  1. Go to your Control Panel and click on the Java Icon ( looks like a little coffee cup ) click on About and you should have Version 7 Update 21, if not proceed with the instructions.
  2. Go to the update Tab and update it
  3. Important, during the upgrade UNCHECK ASK TOOL BAR. ( you do not need or want this )
  4. Then go to your Add Remove Programs (WIN XP) or Programs and Features (Vista / Win 7) in the Control Panel and uninstall all previous versions.

You can verify the installation Here






Open OTL and click on Clean Up and it will remove programs we used to clean your system along with there backups, any programs that where not removed you can just drag to the trash.


Malwarebytes is the free version and yours to keep and will not be removed




Safe Surfn
Ken
 
Back
Top