MyWay.MyWebSearch

[orendk]

I ran SpyBot.exe and the only adware it could not remove was MyWay.MyWebSearch. I am getting the sagispul.com problem with popups and am blocked from many or all antispyware sites. How can I remove this MyWay.MyWebSearch?

 

[adweston]

Combofix eats MyWebHijack for breakfast. Grab a copy of it and run it.

 

[orendk]

Combofix - can you send the exe file?

Awesome. I tried to download combofix, but I am blocked with a page load error. Everything that I try to download to fix the problem gets blocked by sagispul.com.

Can you send an attached combofix.exe file?

Thanks.

 

[adweston]

Try this one instead.

Right click on it, click on "Save as". Do NOT left click on it, or it will show a bunch of gibberish.

Save it to your computer, then rename it to 0209jan.exe and execute it, preferably in safe mode.

 

[orendk]

combofix - can't download as .exe file

I've been trying to download the file you attached. It will download only as a .txt file. I'm probably not savvy enough to do this right, but I can't rename or modify properties so it will run as an .exe file.

Any suggestions?

Thanks for your help.

 

[adweston]

When I get to the office tomorrow I'll upload it as an .exe.

Those instructions are for IE, though.

 

[orendk]

I got it - combofix

Thanks. I used DOS to rename to an .exe file and was able to run combofix. I"ve attached the log here.

Can you take a look? Does it appear to have fixed all issues? The PC is behaving better so far. Not getting the sagispul.com popups anymore.

Thanks for the help.

 

[adweston]

There are still several infections there.. I'm just too tired right now. I'll tackle it tomorrow, unless someone comes to your rescue in the meantime.

 

[adweston]

Ok, I'm back. Sorry about that. Delete the following from your computer:

2009-01-03 22:25 . 2008-10-08 16:29 28,672 --a------ c:\windows\SYSTEM32\DRIVERS\RKHit.sys

2009-01-03 19:24 . 2009-01-03 19:24 72,192 --a------ c:\windows\SYSTEM32\ddcDtSkI.dll

2009-01-03 17:07 . 2009-01-03 17:07 <DIR> d-------- c:\windows\SYSTEM32\CONFIG\systemprofile\Application Data\s_4610_fHx8fHx8fDEyNDM2NDQ4NzZ8_

2009-01-03 15:03 . 2009-01-03 15:03 135,168 --a------ c:\windows\utigodini.dll

2009-01-03 14:51 . 2009-01-03 14:51 40,448 --a------ c:\windows\Dfuvoceqozuz.dll

Frankly I'd download, update and run Malwarebytes first, then deal with the stragglers afterwards.