Re: "Only the Best" popup ads

From: Jan Il (abuse_at_localhost.com)
Date: 06/29/04 

Date: Tue, 29 Jun 2004 11:03:22 -0700

Hi Monica :-)

Yes, the error messages you are getting in trying to update the MacAfee are
due to the scumware on your system. SpyBot and AdAware Free are safe to
use, just be sure to follow directions for the programs carefully. :-)

Try this first and see if you can regain access to the Internet.

Tools > Internet Options > Advanced > Browsing
Uncheck the Enable 3rd party browser extensions

Then do the following to clean the cause from your system:

Download and install, then you *MUST* update the programs prior to running
to be sure they have the latest definitions, then run the programs below.
They are free and very effective. Be sure to run both SpyBot and Adaware,
as what one does not detect the other may. It is important that you do all
the steps and follow all
directions carefully:

IMPORTANT:
Before trying to remove spyware, download a copy of LSPFIX from
the URL below - some malware may kill your internet connection when it is
removed, this program will enable you to regain your connection.
http://www.cexx.org/lspfix.htm

It is important that you run the programs in the order that they are listed
here. The first three programs will clear your machine of all other items so
that you can have a clear HiJackThis Log for the experts to read and analyze
for you.

(NOTE: If you can not download these programs from the Internet, if your PC
has CD read capabilities, go to another computer with CD-ROM burning
capabilities. Create a folder on the hard drive of the other computer called
HOLD, download the programs to that folder, then burn that folder to a CD.
Copy the HOLD folder to your HD and then install the programs from there
and run them. After you have IE access again, update all programs where
possible to get the latest definitions and run them again to be sure there
are no lingering items on the system.

CWShredder: Free
http://tinyurl.com/2l9kl

SpyBot Search & Destroy: Free
http://download.com.com/3000-8022-10289035.html?tag=lst-0-2

AdAware: Free
http://www.lavasoftusa.com/support/download/

HiJackThis: - Free

Go to
http://computercops.biz/downloads-cat-14.html ,
or
http://tinyurl.com/2oce8
and download HiJackThis. Unzip to a folder other than your Desktop or the
Temp folder, doubleclick HiJackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button. Press that, save the log some place you remember where it is.
Most of what it lists will be harmless or even required, so DO NOT fix
anything yet.

Open the copy of your log in NotePad and make a copy. Then you can go here
to post you log:

Jim Eshelman's site here:
AumHa Forums - HiJackThis section:
http://forum.aumha.org/

Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/

or Net-Integration here:
http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi?s=d3c2c886d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949

or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx

<<DO NOT POST YOUR LOG FILE TO THIS NEWSGROUP>>

You will need to register to open a new thread to post you log. It is free,
and no one will Spam you, it is one of many that provides this service. Once
registered, go to the HiJackThis section on the forum list and click to
open. Then start a new post and post your log. The experts there will
analyze the log and report back the results. Please allow at least a few
hours or a days time for a response, depending on when you post the log

Remember, you must return to the HJT site to get your answer. It is a good
idea to click the "Notify" box so that you will get an electronic
notification by e-mail to let you know when a response has been posted.
But, you must still return to the site of your answer

Hope this helps.

Jan :)

> It seems I have become victim to the spyware/adware
> demons. (I can tell by reading the discussion board that I
> am not alone). I was having the same problem with my home
> page and my search page changing. I ran SpySweeper which
> found a program called SubmitHook.dll on my computer. I
> uninstalled it and solved my home page problem but ever
> since then I have been getting pop-up ads from "Only the
> Best" and "Search-777". I am too scared to install either
> Adaware or Spybot because of the reviews that were given
> on Cnet. I have tried countless times to update my McAfee
> virus definitions but I keep getting an error page. (Is
> this related somehow?) I was wondering if anyone has
> figured out a way to remove this adware or if anyone has
> had any luck in removing it with McAfee VirusScan?
> Thanks,
> Monica