Having some homepage problems.

Last night everything was fine then today when I went to open IE my homepage had been changed from the default blank page, and I've been getting a ton of popups. I went through your entire Sticky: READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal post and did everything it said, but the problem still remains, any help would be appreciated, thanks in advance.

 

Hi KazSadique,

Were you able to complete the Online Scans as per the tutorial??

Please go ahead and send us a HijackThis Log. Please be sure to follow the instructions below:

Note that your HijackThis should be up-to-date (v1.99) and MUST be extracted to its own safe folder – C:\Program Files\HijackThis!

If you need a Fresh Download of HJT, get it HERE: HijackThis v1.99

Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

Please save your HJT Log as a .txt File and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

I’ve been pretty busy with work lately, but somebody will try to take a look when they get a chance.

Best luck
PP

 

While waiting for a reply I returned to safemode and ran the entire procedure from start to finish again, again with no problems at all. I then rebooted back to normal, and when I checked my homepage it seems to no longer be messed up, and its starting as blank again. At any rate just to be safe ill post my HJT log file, to make sure everything is in the good.

 

Hi Kaz,

I suggest that you make sure to keep items out of your Trusted Zone and dump a few of those 016s in order to prevent further headaches. You ought to fix the following with HJT:

R3 - Default URLSearchHook is missing

O2 - BHO: (no name) - {8B01EAC7-A0C9-5910-0FD2-A47C18F4C174} - (no file)

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {E9173ECA-1F4F-41ed-AF1F-8F723DFE3458} - (no file)
O9 - Extra button: (no name) - {E9173ECA-1F4F-41ed-AF1F-8F723DFE3458} - (no file) (HKCU)

O15 - Trusted Zone: *.awmdabest.com
O15 - Trusted Zone: *.awmdabest.com (HKLM)
O15 - Trusted IP range: 206.161.125.149
O15 - Trusted IP range: (HKLM)

O16 - DPF: {12F7F128-B36C-4843-8AA4-A5F71A969331} (Launcher Control) - https://horizons.istaria.com/controls/launcher.ocx
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab

Other than these, things look OK.

PP