By orendk ยท 8 replies
Jan 3, 2009
  1. I ran SpyBot.exe and the only adware it could not remove was MyWay.MyWebSearch. I am getting the problem with popups and am blocked from many or all antispyware sites. How can I remove this MyWay.MyWebSearch?
  2. adweston

    adweston Banned Posts: 242

    Combofix eats MyWebHijack for breakfast. ;) Grab a copy of it and run it.
  3. orendk

    orendk TS Rookie Topic Starter

    Combofix - can you send the exe file?

    Awesome. I tried to download combofix, but I am blocked with a page load error. Everything that I try to download to fix the problem gets blocked by

    Can you send an attached combofix.exe file?

  4. adweston

    adweston Banned Posts: 242

    Try this one instead.

    Right click on it, click on "Save as". Do NOT left click on it, or it will show a bunch of gibberish.

    Save it to your computer, then rename it to 0209jan.exe and execute it, preferably in safe mode.
  5. orendk

    orendk TS Rookie Topic Starter

    combofix - can't download as .exe file

    I've been trying to download the file you attached. It will download only as a .txt file. I'm probably not savvy enough to do this right, but I can't rename or modify properties so it will run as an .exe file.

    Any suggestions?

    Thanks for your help.
  6. adweston

    adweston Banned Posts: 242

    When I get to the office tomorrow I'll upload it as an .exe. :)

    Those instructions are for IE, though.
  7. orendk

    orendk TS Rookie Topic Starter

    I got it - combofix

    Thanks. I used DOS to rename to an .exe file and was able to run combofix. I"ve attached the log here.

    Can you take a look? Does it appear to have fixed all issues? The PC is behaving better so far. Not getting the popups anymore.

    Thanks for the help.
  8. adweston

    adweston Banned Posts: 242

    There are still several infections there.. I'm just too tired right now. I'll tackle it tomorrow, unless someone comes to your rescue in the meantime.
  9. adweston

    adweston Banned Posts: 242

    Ok, I'm back. Sorry about that. Delete the following from your computer:

    2009-01-03 22:25 . 2008-10-08 16:29 28,672 --a------ c:\windows\SYSTEM32\DRIVERS\RKHit.sys

    2009-01-03 19:24 . 2009-01-03 19:24 72,192 --a------ c:\windows\SYSTEM32\ddcDtSkI.dll

    2009-01-03 17:07 . 2009-01-03 17:07 <DIR> d-------- c:\windows\SYSTEM32\CONFIG\systemprofile\Application Data\s_4610_fHx8fHx8fDEyNDM2NDQ4NzZ8_

    2009-01-03 15:03 . 2009-01-03 15:03 135,168 --a------ c:\windows\utigodini.dll

    2009-01-03 14:51 . 2009-01-03 14:51 40,448 --a------ c:\windows\Dfuvoceqozuz.dll

    Frankly I'd download, update and run Malwarebytes first, then deal with the stragglers afterwards.
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...