Tech Support Guy banner
Status
Not open for further replies.
1 - 4 of 4 Posts

·
Registered
Joined
·
2 Posts
Discussion Starter · #1 ·
Hiya and thanks for reading my post. I'm knowledgeable enough to be dangerous to myself and others...

D/L FireFox a couple of weeks ago and love it! This evening, I'm surfing a forum I frequent and when I tried to access one of the content areas, following a post, I rec'd an odd dialog box.

Something about what do I want to do with this "php" file - save it or open it using [and select the app I want to use]. I selected Mozilla from my Programs folder and it launched 63 tabs!

I was finally able to reverse my setting selection but now FireFox won't let me access this php file to return to the forum...

I ran AdAware - nothing major there...
I ran SpyBot - again, no big deals there either...

So, I D/L HJT - ran it and the log simply confuses me to no end.

I've attached it in case it will help...

O, I tried to load the site in IE [6.02 w/SP2] and I'm getting a dialog box that asks me what I want to do with the php file! :eek:

Please and Thank you. :)

Namaste~dohdeelish
 

Attachments

·
Registered
Joined
·
16,274 Posts
Rescan once again now with hijack, insert a check next to each of the following then close all other open windows and click "fix checked"

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr/*http://www.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../*http://www.yahoo.com/ext/search/search.html

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr/*http://www.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com

R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\e.bin\MWSSRCAS.DLL

O2 - BHO: (no name) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - (no file)

O4 - Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\e.bin\MWSOEMON.EXE

O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\e.bin\MWSOEMON.EXE

O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZN

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/3061487f58aea0a1c322/netzip/RdxIE2.cab



Now go into control panel / addremove programs and uninstall mywebsearch

Also could you provide a link to the particular link that you clicked on ?
 

·
Registered
Joined
·
2 Posts
Discussion Starter · #3 ·
mobo,

Thank you very much for taking the time to reply to my post. :)

As recommended, I ran HJT & fixed the items you identified. Unfortunately, mywebsearch does not appear in my Add/Remove Programs list. Might you have a suggestion on how I might find it elsewhere on my system? Any guidance you may provide is greatly appreciated.

O, the forum... turns out the Forum owner was working in the Apache s/w on the server side last night. :eek: Whatever she did forced all users trying to access the site to receive the same 'download php file' dialog box as I. Fortunately & thankfully, it's fixed now.

Again, many thanks for your reply to my original post and for any direction you can offer me in order to remove mywebsearch from my system.

Namaste~dohdeelish
 
1 - 4 of 4 Posts
Status
Not open for further replies.
Top