• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Rogue Anti Spyware
    • Virus
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

My AntiSpyware

Free antispyware software, Online Scanners, Instructions on how to remove spyware and malware.

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Rogue Anti Spyware
    • Virus
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools
Home › Browser Hijacking › Malware removal › Tutorials - HowTo › How to remove savetheinformation.com and secirityonpage.com hijackers

How to remove savetheinformation.com and secirityonpage.com hijackers

Myantispyware team November 18, 2007     3 Comments    

Symptoms:

  • IE pop-up windows, mostly to a site called www.savetheinformation.com but also to some other sites
  • Yellow baloons from taskbar prompting to download antispyware software.
  • Grey pop-ups, like error messages, also prompting to download antivirus/spyware software.
  • 2 programs added to start menu program list: online security guide and live safety center
  • when you open an IE window it goes to www.savetheinformation.com

Download VundoFix and save the file to your desktop.
Download HijackThis and save the file to your desktop. Double click on the file for install.
Download CCleaner. Double click on the file for install.

Disable your Anti-Spyware Program, once your PC is clean you can re-enable.

Double-click VundoFix.exe to run it.

When VundoFix opens, click the Scan for Vundo button.
Once it’s done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will reboot your computer, click OK.

If you still have a problems, the follow steps:

Download FixSTI.reg to your desktop.

Double-click on the FixSTI. When it asks if you would like to merge the information, press the Yes button and then the OK button when it is done.

Run HijackThis, Close all programs leaving only HijackThis running. Place a check against each of the following if found, making sure you get them all and not any others by mistake:

O2 – BHO: (no name) – {33BF7E26-185B-46C7-87FB-A8F94C7E696C} – C:\WINDOWS\system32\pmnlk.dll
O2 – BHO: (no name) – {5a2e9fa3-5acd-4013-961b-aae311cdb902} – C:\WINDOWS\system32\****.dll (file missing)
O2 – BHO: (no name) – {60D97635-E582-E002-F541-EA2B589ED998} – C:\WINDOWS\system32\****.dll (file missing)
O2 – BHO: (no name) – {89AD4D75-2429-462e-BD4E-443F233F6033} – C:\WINDOWS\system32\****.dll
O2 – BHO: (no name) – {A95B2816-1D7E-4561-A202-68C0DE02353A} – C:\WINDOWS\system32\****.dll
O2 – BHO: (no name) – {BACEB7AF-8D88-456E-82D0-7BEB9A4410FE} – C:\WINDOWS\system32\****.dll
O3 – Toolbar: Security Toolbar – {11A69AE4-FBED-4832-A2BF-45AF82825583} – C:\WINDOWS\system32\****.dll
O20 – Winlogon Notify: **** – C:\WINDOWS\SYSTEM32\****.dll

Where **** a random chars, for example: xjegktl, nuyix, ldbvcpwu, khcmkrws …

Now close all others windows except for HijackThis, and click “Fix Checked” to have HijackThis fix the entries you checked.

Run CCleaner.

Click Analyze button. After scan your system, click Run Cleaner.

If you still have a problems with your PC or cannot remove hijackers follow the steps outlined in the topic linked below:
Spyware removal – Read Before Posting.
savetheinformationcom & secirityonpagecom-hijackers

Don`t forget, we want help you, make logs and post to spyware removal forum!

Browser Hijacking Malware removal Tutorials - HowTo

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

3 Comments

  1. Ben
    ― November 19, 2007 - 3:59 pm  Reply

    VundoFix seemed to work for me. Had to manually delete online security guide and live safety center after reboot.

  2. juan fernando arroyo
    ― November 19, 2007 - 10:07 pm  Reply

    Let me check The information.

  3. Patrik
    ― November 20, 2007 - 6:12 am  Reply

    if you still have any problems, don`t forget to ask help at my forum!

Leave a Reply Cancel reply




New Guides

Willgetitfr.fun
How to remove Willgetitfr.fun pop-ups (Virus removal guide)
unwanted ads
How to uninstall AphroditeTechResults from Mac (Virus removal guide)
14AhgtTrXKHGcUsWJRsshN3HPu64rLdxB6
14AhgtTrXKHGcUsWJRsshN3HPu64rLdxB6 Bitcoin Email Scam
Spleasedon.fun
How to remove Spleasedon.fun pop-ups (Virus removal guide)
Important Defender update available SCAM
Important Defender update available POP-UP SCAM (Virus removal guide)

Follow Us

Search

Useful Guides

Iphone Calendar virus spam
Iphone Calendar Virus/Spam (Removal guide)
How to reset Google Chrome settings to default
How to remove pop-up ads [Chrome, Firefox, IE, Opera, Edge]
adwcleaner
AdwCleaner – Review, How to use, Comments
This setting is enforced by your administrator (Removal guide)

Recent Posts

VundoFix – freeware removal tool for Trojan.Vundo
October malware toplist by viruslist.com
How to remove Pcsecuritylab.com Hijacker
Some new fake codecs
How to remove xlavra (Trojan-Downloader.Win32.Agent) and Wintools adware

MYANTISPYWARE.COM

  • About Us
  • Contact Us
  • Privacy Policy

NEED A HELP ?

If you're seeing unwanted pop-ups or ads in your web-browser, you might have an adware installed on your computer. Use the following guide to stop pop-up ads and remove malicious software. Or ask for help here.

Links

  • Downloads
  • Instructions
  • Questions and Answers
  • Free Malware Removal Tools
Copyright © 2004 - 2020 My AntiSpyware - Free antispyware programs and Spyware Removal Instructions.