Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Site Ticket Removal


  • Please log in to reply
6 replies to this topic

#1 BobaFett2040

BobaFett2040

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:06:46 AM

Posted 24 February 2007 - 09:57 PM

I somehow got the site-ticket browser search hijacker. I've tried just about every browser hijack repair tool on the net for download. Whenever I do a search and click on a link it redirects me to some other site. When it does that down in the status bar I see the following IP 85.22.119.188. I've tried BHO. I've tried HOSTS file. I've tried Addons. I've tried plugins. I've tried everything I can think of. I've even gone into IE options in the registry. I seriously need help with getting rid of this. I've even tried removing IE and installing IE 7 to see if that cleans things up.

Moderator Edit: Moved topic to more appropriate forum. ~ Animal

Edited by Animal, 24 February 2007 - 10:30 PM.


BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:46 AM

Posted 24 February 2007 - 10:40 PM

http://www.bleepingcomputer.com/uninstall/...SiteTicket.html

Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/

Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.
http://www.bitdefender.com/scan8/ie.html

If you need more help removing the malware:
Post a Hijack This log in the appropriate forum by following the directions in the link below.
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 BobaFett2040

BobaFett2040
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:06:46 AM

Posted 25 February 2007 - 10:47 AM

I was finally able to get rid of it. I used HijackThis.exe, freeware program by the way, and found the ip address listed. I nuked all the search entries, and the IP entries. Restarted, and I have my broswer back.

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,267 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:46 AM

Posted 25 February 2007 - 03:14 PM

Did you uninstall it per the directions in the link buddy215 provided? Hijackthis does not do that. After removing then delete its folder in Program Files.

C:\Program Files\SiteTicket\ <- this folder
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 BobaFett2040

BobaFett2040
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:06:46 AM

Posted 25 February 2007 - 04:36 PM

The uninstall method discribed doesn't work. I did that and it was still there.

#6 fozzie

fozzie

    aut viam inveniam aut faciam


  • Members
  • 3,516 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ossendrecht/The Netherlands
  • Local time:12:46 PM

Posted 25 February 2007 - 04:51 PM

Have you used the 2nd and 3rd suggestion by buddy215

#7 BobaFett2040

BobaFett2040
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:06:46 AM

Posted 25 February 2007 - 10:45 PM

No. I didn't need to.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users