1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Being redirected when I click search results

Discussion in 'Malware and Virus Removal Archive' started by fortunateden, 2008/01/02.

  1. 2008/01/08
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    No

    The instruction may be a little different, Not sure if it say Unlock All any more.
    Download Unlocker
    Once installed:
    Locate the file - C:\WINDOWS\system32\ехplorer.exe
    Right-click and select 'Unlocker'
    In the window that appears select 'Unlock All'
    In the drop down menu select 'delete'.

    Let me know if it deletes

    Geri
     
  2. 2008/01/09
    fortunateden

    fortunateden Inactive Thread Starter

    Joined:
    2008/01/02
    Messages:
    47
    Likes Received:
    0
    Geri,
    I downloaded Unlocker, and it first it said no locking handle found. Then asked if I wanted to deleted next time I rebooted. I clicked yes, rebooted, and it is still here...
     

  3. to hide this advert.

  4. 2008/01/09
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    :mad:
    OK, Lets do this.

    Please download the Killbox by Option^Explicit.

    Note: In the event you already have Killbox, this is a new version that I need you to download.
    • Save it to your desktop.
    • Please double-click Killbox.exe to run it.
    • Select:
      • Replace on Reboot
      • then Put a Check on the Use Dummy box.
    • Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):

      C:\WINDOWS\system32\ехplorer.exe

    • Return to Killbox, go to the File menu, and choose Paste from Clipboard.
    • Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt.

    After doing the above go back to the file C:\WINDOWS\system32\ехplorer.exe right click on it and click delete

    Let me know if it deletes.

    If it deletes, Then reboot and then go back and check to make sure it's still gone.

    Geri
     
  5. 2008/01/12
    fortunateden

    fortunateden Inactive Thread Starter

    Joined:
    2008/01/02
    Messages:
    47
    Likes Received:
    0
    Geri,
    Sorry for not being here for a few days..Anyways, I did the Killbox process of tring to delete that explorer file as you directed. No luck. Thought I should make mention when I when went to the file tab, and selected Copy from Clipboard,
    C:\WINDOWS\system32\ехplorer.exe would not paste to the field of "Full Path file of field to Delete ", so I also manually pasted it in there. C:\WINDOWS\system32\??plorer.exe is how it appeared, Even though I copied it as it appeared in your directions (C:\WINDOWS\system32\ехplorer.exe). It did say "changes have been made, asked if I wanted to reboot, and I did. Still there.:mad:
     
  6. 2008/01/12
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    Did you try right clicking on ехplorer.exe and deleting it? If not please do so.
    KillBox said it made changes it should delete.

    let me know.
    Geri
     
  7. 2008/01/12
    fortunateden

    fortunateden Inactive Thread Starter

    Joined:
    2008/01/02
    Messages:
    47
    Likes Received:
    0
    just tried to do it again....this is was is says now


    Pending file rename operations registry data has been removed by external process..
     
  8. 2008/01/12
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    OK, lets see if killbox will remove it, you may have to manually paste it in, but try the other way first.
    These instructions are a little different the the last one so make sure you follow these.

    • Please double-click Killbox.exe to run it.
    • Select:
      • Delete on Reboot
      • then Click on the All Files button.
    • Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):

      C:\WINDOWS\system32\ехplorer.exe

    • Return to Killbox, go to the File menu, and choose Paste from Clipboard.
    • Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click OK at any PendingFileRenameOperations prompt (and please let me know if you receive this message!).

    If your computer does not restart automatically, please restart it manually.

    Let me know.
    Geri
     
  9. 2008/01/13
    fortunateden

    fortunateden Inactive Thread Starter

    Joined:
    2008/01/02
    Messages:
    47
    Likes Received:
    0
    Geri,
    I followed the last post to the T, and explorer is still there. Still had to manually Paste the path C:\WINDOWS\system32\ехplorer.exe, and it asked me if I wanted to reboot now. I clicked yes, and it DID give me the prompt about PendingFileRenameOperations , but this time in did not even rebootautomatically. I had to reboot.
     
  10. 2008/01/13
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi fortunateden

    OK let's try this.

    Highlight and copy the contents of the code box below.

    Code:
    attrib -r -h -s c:\windows\system32\??plorer.exe
    ren c:\windows\system32\??plorer.exe junk.exe
    Click Start>Run and type cmd then hit enter to open a command window. Right click and paste the copied text then hit enter.

    Close the command window then navigate to C:\Windows\system32 and see if the explorer.exe still exists or if renaming it to junk.exe was successful.

    Thanks
    Geri
     
  11. 2008/01/13
    fortunateden

    fortunateden Inactive Thread Starter

    Joined:
    2008/01/02
    Messages:
    47
    Likes Received:
    0
    geri,

    still there as explorer:mad:
     
  12. 2008/01/13
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    OK, Lets try taking ownership of the file.

    How to take ownership of a file
    Note You must be logged on to the computer with an account that has administrative credentials.

    To take ownership of a file, follow these steps:
    1.Right-click the file that you want to take ownership of, and then click Properties.
    2.Click the Security tab, and then click OK on the Security message (if one appears).
    3.Click Advanced, and then click the Owner tab.
    4.In the Name list, click Administrator, or click the Administrators group, and then click OK.


    Now Do this again.
    Highlight and copy the contents of the code box below.

    Code:
    attrib -r -h -s c:\windows\system32\??plorer.exe
    ren c:\windows\system32\??plorer.exe junk.exe
    Click Start>Run and type cmd then hit enter to open a command window. Right click and paste the copied text then hit enter.

    Close the command window then navigate to C:\Windows\system32 and see if the explorer.exe still exists or if renaming it to junk.exe was successful.

    Reboot, and check again please, to make sure it's still junk.exe

    Thanks
    Geri
     
  13. 2008/01/14
    fortunateden

    fortunateden Inactive Thread Starter

    Joined:
    2008/01/02
    Messages:
    47
    Likes Received:
    0
    Hi Geri,
    No security tab after I click properties for explorer.exe. Also is it normal I dont have sound now either?..
     
  14. 2008/01/14
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    No sound? I don't think that's normal. When did that start?

    Lets try again, this way. Print or save this to txt file so you can get to it in safe mode.

    Reboot into safe mode.
    Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.

    How to take ownership of a file
    Note You must be logged on to the computer with an account that has administrative credentials.

    To take ownership of a file, follow these steps:
    1.Right-click the file that you want to take ownership of, and then click Properties.
    2.Click the Security tab, and then click OK on the Security message (if one appears).
    3.Click Advanced, and then click the Owner tab.
    4.In the Name list, click Administrator, or click the Administrators group, and then click OK.


    Now Do this again.
    Highlight and copy the contents of the code box below.


    Code:
    attrib -r -h -s c:\windows\system32\??plorer.exe
    ren c:\windows\system32\??plorer.exe junk.exe
    Click Start>Run and type cmd then hit enter to open a command window. Right click and paste the copied text then hit enter.

    Close the command window then navigate to C:\Windows\system32 and see if the explorer.exe still exists or if renaming it to junk.exe was successful.


    Thanks
    Geri
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.