browser hijack

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by marjesway, Dec 28, 2004.

  1. marjesway

    marjesway Private E-2

    First off, thank you for having this forum. I have been experiencing problems with home page hijack. I currently have and run Norton Internet security, lavasoft adaware and spybot. I still get the hijack. I did download the hijack this and ran the scan and saved the results, can you assist with fixing this problem and how to keep it from recurring?
    Thank You,
    Mark LeBlanc
     
  2. marjesway

    marjesway Private E-2

    Since completing the above post I also ran hijackthis.de whick explained the lines on the log file. I checked the ones that were not correct and hit fix, then rebooted when done and went to my internet browser and the web page came up "about:blank" any suggestions?
    Thanks,
    Mark
     
  3. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    You should not attempt to remove anything with HJT unless you have a lot of experience with the enties because removing the wrong entry could create worse problems than when you started. Always before fixing anything with Hijack this you ask someone who knows exactly what there doing. Sounds like you have about:blank hijacker.

    First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.


    After doing ALL of the above if you still have a problem:

    Make sure you have HijackThis 1.99 and follow the guidelines on where to install it and how to post a log as an attachment. This is all covered in the sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting


    Now post a HijackThis as a .txt file attachment to your message. All running programs should be closed, including your web browser, e-mail. Close before running Hijack This!

    Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT
     
  4. marjesway

    marjesway Private E-2

    I believe I have followed each of your suggestions correctly. I did go line by line on "Read me first before asking for support". I did the safe mode, the normal mode turned off everything it said and so forth. I should note that the computer is faster now, I just have the about:blank for the page. I thank you very much for the assist and I am trying my best to understand. The logfile is attached using the manage attachments.
    Thank You,
    Mark
     

    Attached Files:

  5. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    This process should NOT be running while using HJT. Please close all browsers before running Hijack this.

    C:\Program Files\Internet Explorer\IEXPLORE.EXE


    Also please move Hijack this from its current location into its on program directory, for example: C:\Program Files\HJT

    Please read ALL steps before posting logs. Its VERY important to run HJT from the right location.


    Complete these 2 task and run HJT again, Post new log once complete!
     
  6. marjesway

    marjesway Private E-2

    I believe I now have hijack this in the proper location. I reran hijack this and checked to make sure iexplore.exe was off, according to processes running and application running, it was not. attached is the new log file. Thanking you again.
    Mark
     

    Attached Files:


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds