A removal tool for Home Search Assistant, ie; res://random.dll/index.html#12345
Symptoms:
- IE Hijacked to res://.dll/index.html#37049 PopUps
- Specific Words on webpages link to search pages.
Important steps to getting this tool to work properly:
1: Boot into safe mode by tapping the f8 key as your computer boots. You should do this before you see the Windows splash screen.
2: Also, make sure you can see hidden files; Open My Computer and choose Tools, then click on Folder Options, click on the View tab and under Advanced Setting, choose Show Hidden Files and Folders, then click on OK and close My Computer.
3: Right-click on My Computer, Choose Manage, Double-click on Services and Applications, Click on Services. In the righthand column find "Network Security Service", and double-click on it. (In Safe Mode this may already be stopped) Choose Stop and then write down the name and path of the file in the "Path to Executable" section. Set the Startup Type to Disabled. Click Ok. Close the Computer Management window.
4: Remove any lines that relate to res://.dll/index.html#37049 with Hijack This.
5: Delete the dll file that was in the place of the word random; res://.dll/index.html#37049
6: Verify there is nothing out of place in your hosts file.
[License: Freeware| Requires: Win All | Size: 24 Kb]
Read more
Symptoms:
- IE Hijacked to res://.dll/index.html#37049 PopUps
- Specific Words on webpages link to search pages.
Important steps to getting this tool to work properly:
1: Boot into safe mode by tapping the f8 key as your computer boots. You should do this before you see the Windows splash screen.
2: Also, make sure you can see hidden files; Open My Computer and choose Tools, then click on Folder Options, click on the View tab and under Advanced Setting, choose Show Hidden Files and Folders, then click on OK and close My Computer.
3: Right-click on My Computer, Choose Manage, Double-click on Services and Applications, Click on Services. In the righthand column find "Network Security Service", and double-click on it. (In Safe Mode this may already be stopped) Choose Stop and then write down the name and path of the file in the "Path to Executable" section. Set the Startup Type to Disabled. Click Ok. Close the Computer Management window.
4: Remove any lines that relate to res://.dll/index.html#37049 with Hijack This.
5: Delete the dll file that was in the place of the word random; res://.dll/index.html#37049
6: Verify there is nothing out of place in your hosts file.
[License: Freeware| Requires: Win All | Size: 24 Kb]
Read more
