Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

search result window; redirect IE to Yahoo; svhost.exe 100%

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby Carolyn » June 6th, 2008, 7:07 am

What does the dns client do on a personal PC- should I disable it permanently?


Hi Shelley,

Don't disable the DNS CLient service - it should be set to "Manual" if you use a hosts file.

The DNS Client caches Domain Name System (DNS) names on your computer. So if there is a large hosts file, the resulting cache will be large and potentially slow your computer. Thats why the DNS Client service should be set to "Manual" when you use a large host file.
User avatar
Carolyn
MRU Emeritus
MRU Emeritus
 
Posts: 4701
Joined: April 18th, 2007, 9:36 am
Location: Maine
Advertisement
Register to Remove

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby shelleysimon » June 6th, 2008, 11:34 am

Thank you Carolyn. My computer looks better so far. I'm having a friend let me try a USB keyboard this weekend. Right now, my keyboard seems to be OK but then sometimes it does strange things.

Thanks so much for your help and educating me on my questions.
shelleysimon
Regular Member
 
Posts: 53
Joined: May 16th, 2008, 12:42 pm

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby Carolyn » June 6th, 2008, 11:42 am

You're welcome Shelley. :)
User avatar
Carolyn
MRU Emeritus
MRU Emeritus
 
Posts: 4701
Joined: April 18th, 2007, 9:36 am
Location: Maine

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby shelleysimon » June 8th, 2008, 11:21 am

The secunia software inspector is great. I just have one question about my updates - I did them all. The java runtime is a little confusing - I don't know if I need to uninstall stuff or what?
Sun Java JRE 1.5.x / 5.x 5.0.40.5 out of date

Sun Java JRE 1.5.x / 5.x 5.0.40.5 out of date


Sun Java JRE 1.5.x / 5.x 5.0.40.5 out of date


Sun Java JRE 1.5.x / 5.x 5.0.30.7 out of date


Sun Java JRE 1.6.x / 6.x 6.0.60.2 fine
shelleysimon
Regular Member
 
Posts: 53
Joined: May 16th, 2008, 12:42 pm

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby Carolyn » June 8th, 2008, 11:25 am

Hi Shelley,

Yes, the outdated versions of Java should be uninstalled - older versions have vulnerabilities that malware can use to infect your system.

I like the Securia software inspector as well. I especially like receiving emails automatically that remind me to run the software inspector each month. :)
User avatar
Carolyn
MRU Emeritus
MRU Emeritus
 
Posts: 4701
Joined: April 18th, 2007, 9:36 am
Location: Maine

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby shelleysimon » June 11th, 2008, 5:51 pm

Do I just delete the folders? There is no uninstall in the add/remove program for those versions of the Java runtime.
shelleysimon
Regular Member
 
Posts: 53
Joined: May 16th, 2008, 12:42 pm

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby Carolyn » June 12th, 2008, 3:06 pm

Hi

These are in the uninstall list that you posted earlier:

J2SE Development Kit 5.0 Update 4
J2SE Runtime Environment 5.0 Update 3
J2SE Runtime Environment 5.0 Update 4


Those are the programs that you want to uninstall.

If you need the latest version of The Java SE Development Kit, you can download it from here:
JDK 6 Update 6
User avatar
Carolyn
MRU Emeritus
MRU Emeritus
 
Posts: 4701
Joined: April 18th, 2007, 9:36 am
Location: Maine

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby shelleysimon » June 12th, 2008, 6:34 pm

I finally uninstalled borland and it uninstalled the java. then i reinstalled java (the newest release).
shelleysimon
Regular Member
 
Posts: 53
Joined: May 16th, 2008, 12:42 pm

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby Carolyn » June 12th, 2008, 6:39 pm

okay :)
User avatar
Carolyn
MRU Emeritus
MRU Emeritus
 
Posts: 4701
Joined: April 18th, 2007, 9:36 am
Location: Maine

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby shelleysimon » June 12th, 2008, 7:25 pm

Well I thought I had uninstalled it but it is still there when I ran secunia. Add/Remove window does not have a 'remove' button:
You do not have the required permissions to view the files attached to this post.
shelleysimon
Regular Member
 
Posts: 53
Joined: May 16th, 2008, 12:42 pm

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby Carolyn » June 13th, 2008, 6:56 am

Let's remove those entries from Add/Remove programs
  • Start HijackThis
  • Click on the Config button
  • Click on the Misc Tools button
  • Click on the Open Uninstall Manager button.
  • To delete a program simply click on the program you would like to remove and then click on the Delete this entry button.
    J2SE Development Kit 5.0 Update 4
    J2SE Runtime Environment 5.0 Update 3
    J2SE Runtime Environment 5.0 Update 4


Next, delete the Java folder
Using Windows Explore by right-clicking the Start button and left clicking Explore navigate to and find C:\Java
Delete C:\Java <<Folder


Download the latest version of Java Runtime Environment (JRE) 6 Update 6.
  • Scroll down to where it says Java Runtime Environment (JRE) 6 Update 6.
  • Click the "Download" button to the right.
  • Check the box that says: "Accept License Agreement".
  • The page will refresh.
  • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Then from your desktop double-click on the download to install the newest version.
  • Note: If you don't want the Google toolbar, make sure you uncheck the option included in the installer!


Next, post an uninstall list for me to review:
Make an uninstall list using HijackThis
To access the Uninstall Manager you would do the following:

1. Start HijackThis
2. Click on the Config button
3. Click on the Misc Tools button
4. Click on the Open Uninstall Manager button.
5. Click on the Save list... button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here in your next reply. :)
User avatar
Carolyn
MRU Emeritus
MRU Emeritus
 
Posts: 4701
Joined: April 18th, 2007, 9:36 am
Location: Maine

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby shelleysimon » June 13th, 2008, 7:34 am

This is my unintall list - the JRE 5's are not in it. I did NOT uninstall anything.
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Ad-Aware
Adobe Flash Player ActiveX
Adobe Reader 8.1.2
AVG 7.5
CARD LINK (for USB) 1.00
CARD LINK (for USB) 1.20
CCleaner (remove only)
Cisco SSL VPN Client
Comcast PhotoShow Deluxe
Comcast Rhapsody
Desktop Doctor
Detto IntelliMover
Digimax Master
ERUNT 1.1j
ExamView Pro
HijackThis 2.0.2
Hotfix for Windows Internet Explorer 7 (KB947864)
hp center
hp deskjet 960c series (Remove only)
HP Instant Support
HP Learning Adventure
HP Product Detection
HP RecordNow
Inactive HP Printer Drivers (Remove only)
InterVideo WinDVD
Ipswitch WS_FTP LE
Java(TM) 6 Update 6
Kaspersky Online Scanner
KBD
KODAK Picture CD Volume 4 Issue 1
Lernout & Hauspie TruVoice American English TTS Engine
Macromedia Dreamweaver MX
Macromedia Extension Manager
Macromedia Flash Player 8
MapSource
MapSource - US Topo v3.02
MarketBrowser
Mastering Microsoft Visual Basic 6 Development Classroom View
MathPlayer
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2002
Microsoft Money 2002 System Pack
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Outlook Connector for MSN
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional 2007
Microsoft Office Professional 2007
Microsoft Office Professional Edition 2003
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Picture It! Express 7.0
Microsoft Picture It! Express 9
Microsoft Picture It! Library 9
Microsoft Visual Basic 6.0 Professional Edition
Microsoft Visual C++ 2005 Redistributable
Microsoft Works 6.0
Microsoft Works and Money 2002 Setup Launcher
MSN
MSN Encarta Plus Support Files
MUSICMATCH Jukebox
My Photo Center
NetBeans IDE 4.1
Palmcorder USB Device Driver 2.00
Panda ActiveScan 2.0
PC-Doctor for Windows
PhotoAlbum Add-In
Python 1.5 combined Win32 extensions
Python 1.5.2 (final)
RegCure 1.3.0.2
S3 Gamma
S3 Savage4 Family Display Switch2 Utility
Samsung USB Driver
Security Task Manager 1.7e
Security Update for Excel 2007 (KB946974)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB951808)
Security Update for Microsoft Office Word 2007 (KB950113)
Security Update for Office 2007 (KB947801)
Security Update for Outlook 2007 (KB946983)
Security Update for Visio 2007 (KB947590)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Shockwave
Sonic Foundry Super Duper Music Looper XPress
Spybot - Search & Destroy
Tcl 8.0.5 for Windows
TextPad 5
Update for Office 2007 (KB946691)
Update for Outlook 2007 Junk Email Filter (kb950378)
VPN Client
Windows Genuine Advantage v1.3.0254.0
Windows Media Format Runtime
Windows XP Service Pack 3
WinDriversBackup
shelleysimon
Regular Member
 
Posts: 53
Joined: May 16th, 2008, 12:42 pm

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby Carolyn » June 13th, 2008, 8:12 am

The information in Uninstall Manager should mirror what is listed in Add/Remove Programs.

Sometimes entries are left behind in Add/Remove programs even after the programs have been uninstalled. When you see a program in Add/Remove programs that does not include any option for uninstall, that is usually the explanation. In those cases, the Add/Remove entry is a "left-over", which we can delete from the list using the HijackThis Uninstall Manager.

So I need to make sure I understand what is going on here....

Are those Java entries still listed in Add/Remove programs, but not listed when you open the Uninstall Manager in HijackThis?
User avatar
Carolyn
MRU Emeritus
MRU Emeritus
 
Posts: 4701
Joined: April 18th, 2007, 9:36 am
Location: Maine

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby shelleysimon » June 13th, 2008, 1:11 pm

Yes, that is correct. They are in the add/remove program from control panel but NOT in the Hijack this uninstall list.
shelleysimon
Regular Member
 
Posts: 53
Joined: May 16th, 2008, 12:42 pm

Re: search result window; redirect IE to Yahoo; svhost.exe 100%

Unread postby Carolyn » June 13th, 2008, 5:01 pm

Hi Shelley,

Please give this a try:

Download and Install CCleaner
  • Download CCleaner from here . Choose the Slim version.
  • Double click on ccsetupXXX_slim.exe to start the installation of CCleaner. (XXX is the version number)
  • Click OK
  • Click Next
  • Click I agree
  • Click Next
  • Click Install
  • Once the installation has finished, click Finish
-----------------------------------------------------------
Retrieve the Installed Programs List from CCleaner
Open CCleaner if it's not already running.
In the Left Pane, click Tools
Verify that Uninstall is highlighted in color, or click on it.
In the lower Right, click Save to Text File.
Pull down the arrow at the top of the Save dialog and choose Desktop as the location.
You can leave the filename as install.txt
Click Save
Exit CCleaner by clicking on the X button in the upper right of the CCleaner window.

Please post the content of install.txt in your next reply.
User avatar
Carolyn
MRU Emeritus
MRU Emeritus
 
Posts: 4701
Joined: April 18th, 2007, 9:36 am
Location: Maine
Advertisement
Register to Remove

PreviousNext

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 329 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware