Country Living
Country Living, Country Skills
Country People

KountryLife.com - A Country Living Resource and Community
Community
Message Board
Country Topics
Trading Post
Memory Lane
Country Skills
Country Cooking

Channels
Gardening
Livestock
The Kitchen
Machinery
Tools

Photographs
Photo Gallery
Vintage Photos
Special Collections

Fun
Country Humor
Country Sounds
Coloring Book
Interactive Story

Farm Tractors
Pictures
Tractor Parts
Tractor Manuals

Miscellaneous
Classic Trucks
Antique Tractors
Modern Tractors
Site Map
Links Page
Contact Us

  
Country Discussion Topics
To add your comments to this topic, click on one of the 'Reply' links below.

Salmoneye please help!
[Return to Topics]

Maggie/TX    Posted 05-02-2004 at 15:14:46       [Reply]  [No Email]
I know you can help with this question, as you know a lot about computer stuff. If anybody else knows the answer, please feel free to jump right in.

A friend of mine is having computer problems with a trojan "Adware" of some sort. He writes:

"I have 2 adware trojans on my computer. Norton nor Spybot can get rid of them. Can anybody help? They are called

hh.htt and tips.ini "

I thought he could just find them and delete manually but he says they are tied up with his registry files or something. Any help will be MUCH appreciated! :)



Salmoneye    Posted 05-03-2004 at 02:32:06       [Reply]  [No Email]
hh.htt is a custom stylesheet, used by the CoolWebSearch.cpan. Located in "C:\Windows\" on Windows 95/98/ME/XP and "C:\Winnt\" on Windows NT/2000.

Here is the page that describes the trojan and has the link to the page to remove it...The real name of the Trojan is "Troj/Startpa-Z"

http://www.sophos.com/virusinfo/analyses/trojstartpaz.html

This next one is for the tips.ini:

http://securityresponse.symantec.com/avcenter/venc/data/adware.searchcounter.html

Both are insisdious, but not impossible to get rid of...

Sorry I did not reply sooner, but Mama warned me about hangin around saloons ;-)



That would be...    Posted 05-03-2004 at 02:33:32       [Reply]  [No Email]
Insidious...

Never type before coffee...

Salmoneye,


Ron,ar    Posted 05-02-2004 at 15:31:17       [Reply]  [No Email]
sounds like hijackers to me. First they infect the hosts folder and then make themselves the default hosts. The hosts folder is what tells your pc which browser, or which search engine or any number of things to use at a certain time or instance. Whatever you do, don't delete the whole hosts folder. It has to be there, it is tied in with sys. registry files and can easily be changed by accident if not careful. I will do some more thinking on this/BTDT (once)


P.S.    Posted 05-02-2004 at 15:56:53       [Reply]  [No Email]
see this link, it explains it better than I did. I doubt that he will be able to down load this, I couldn't when I had a similar problem. I had the guys at work put it on disk and I loaded it from there, they also helped me re-do the registry files. If he has a Gateway and he has a program called go-back he may be able to use it to reset all his system settings to a previous time if it has just recently happened.hope this helps


[Return to Topics]



[Home] [Search]

Copyright © 1999-2013 KountryLife.com
All Rights Reserved
A Country Living Resource and Community