BJ's TechnoBlog

Got popups out the wazzoo, a bunch of "Missing Shortcut" boxes at startup and all sorts of gibberish programs running in your task list? You've got the latest spyware/adware scourge. Use these instructions to rid yourself of the pest. You'll need a copy of HijackThis and a strong cocktail before you start. I also ran Ad-aware 6 before and after the process.

** You can follow the below steps. A workable shortcut is also to remove autorun entries, and especially browserhelper.dll! **



Since morze1.exe disappears soon after it morphs into random selected 600K files...

Let's name this tool the "MORZE1 REMOVAL TOOL"

Removal:

Right-Click on the Yahoo stocks task bar icon, choose remove (while being online!). A web page from Adtomi should appear "uninstall was successful!"



Restart computer in safe mode ONLY!




Make a new text file in Notepad, copy and paste this inside:


REGEDIT4

[-HKEY_CURRENT_USER\Software\adtomi]

[-HKEY_CLASSES_ROOT\CLSID\{B549456D-F5D0-4641-BCED-8648A0C13D83}]

[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{B549456D-F5D0-4641-BCED-8648A0C13D83}]

Save it (Change to "all files" in Files of Type drop-down box) as Remove.reg Double-click and hit yes on the prompt! (If you want to save yourself the hassle of creating this file, download it here.)




In HijackThis or similar startup manager, delete any entries with the following pattern:

With random, unknown .exe files, ending with "/dk" - Example: (C:\WINDOWS\IH5B0AKB.EXE /dk )

Delete any such entries in HKCU....\Software\Microsoft\Windows\CurrentVersion\Run

Delete any such entries in HKLM....\..run......



In HijackThis fix the 02 line BHO -if present: C:\WINDOWS\BrowserHelper.dll

posted by The LoneStranger rides again! @ 5:03 PM