Re: [HolyGeek] help please

[Know Mystery]

Hi Steve -
 
Oh my, not a fun way to spend Thanksgiving.
 
Here is what i found when i googled on second thought:
 




Second Thought Removal 



Overview:Second Thought is adware and its also a hijacker. There isn't any possible reason why you would ever want to leave this on your system. According to their terms they can contact their servers to log things like your browsing habits. They could also install additional junk on your system without your approval!
Welcome to Second Thought! We are your Internet companion to make sure you have a second opinion when you surf. We pride ourselves in broadening your knowledge of the web. Originating Website
Their Uninstaller:
Should you wish to uninstall the program at a later date, you may request the uninstallation program by downloading it from the Uninstallation page. 
Also Known As:Adware.SecondThoughtBKDR_RULEDOR.ESecond ThoughtSecondThoughtTrojan.Win32.SecondThoughtTrojan.Win32.SecondThought.aTrojan.Win32.SecondThought.cWin32/SecondThought.G
Destroy Autorun:Delete the following keys HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\adstartup HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\bokja HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\sqinstaller HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\stcloader 
Reboot your system then:
Make sure you click start --> Run and type in msconfig. Then select the startup tab. Any references to the processes below.
Unregister DLLs:
Tip: this is only a list of known files/locations. You will want to do a search by the name of the file to see if they're on your system. A while back I wrote a guide to Register/remove DLL or AX files which you will need if you don't know how to unregister these files.
Each file is in several locations so you'll need to search for them and unregister + delete them in every location you find.
2ndsrch.dlla_clearsearch.dllcdsm32.dllcsaolinst.dllcsbiinst.dllcsie.dllcsieinst.dllidleui.dllspextdll.dllswrt01.dllswin32.dllvoiceip.dll
End Processes (may or may not exist): addestroyer.exeaddestroyerinner.exeautomove.exebokja.execsaolldr.execsv5p070.exeloader[1].exeslmss.exespedia.exesq_3394_3222.exesqinstaller.exestc.exestc[1].exestcloader.exetrans.exerandreco.exe
Remove Directories:%commonprograms%\addestroyerProgram Files\addestroyerProgram Files\clearsearchProgram Files\common files\slmssProgram Files\second thoughtProgram Files\stc
Clean your Registry:
You should be back to normal IF this was your only problem. I suggest you post in our HJT forum since its not likely that this is your only bug. Read this first
You might want to google on mypcsearch and also on second thought youself before you try to follow those instructions. Here's the link where i found it...(warning, the site has a couple of popups, so that is why i pasted in the details above). http://www.iamnotageek.com/a/371-p1.php
 
Good luck!
 
love and peace,
joyce
Steve Toth <[EMAIL PROTECTED]> wrote:
Dear Geeks,     You were of great help to me in my need last year & I hope you can help again.  This morning I went to a lyric site called oldielyrics.com.  There was a popup for somethig called a browswer enhancer & I clicked no.  Then there was another popup called second thought & I clicked the close box, but as it was disappearing slowly I saw that this was something different.  It said that you had to unclick the check in a box before you closed it or it would install it.  I jumped up & unplugged by computer for an improper shut down.  But when I rebooted there were two new icons for MyPCsearch & second thought.  I got my wife & we went into control panel but neither was listed under the programs, instead MyPCsearch was on its own.  When we
 tried to delete it it said access denied.  We did a search for both & they are .exe.  It also said they are read only.  We couldn't access the general tab.  We went to stinger & ran the latest version & came up clean.  Does anyone know what these things are or how to remove them?  If they are benign, then why go to such trouble to hide where they really are?  Any help or information is greatly appreciated.Steve
		Do you Yahoo!? 
The all-new My Yahoo! � What will yours do?







Yahoo! Groups Sponsor


  ADVERTISEMENT 












Yahoo! Groups Links

To visit your group on the web, go to:http://groups.yahoo.com/group/HolyGeek/ 
To unsubscribe from this group, send an email to:[EMAIL PROTECTED] 
Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.