MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Malware Removal
Register FAQ Members List Calendar Casino Mark Forums Read

Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient.


Closed Thread
 
Thread Tools Display Modes
  #1  
Old 01-22-13, 10:28
richelle richelle is offline
Private E-2
 
Join Date: Jan 2013
Posts: 23
Thanks: 3
Thanked 0 Times in 0 Posts
Default Removal of Hao123 from IE homepage

Hi,

I've followed the instructions in the Malware Removal Guide. But hao123 (http://www.hao123.com/?tn=29065018_181_hao_pg) webpage seems to keep being the default homepage even though I changed it to google. Pls help.
Thanks!
Attached Files
File Type: txt RKreport[1]_S_01222013_02d2151.txt (1.5 KB, 3 views)
File Type: log HitmanPro_20130122_2228.log (3.0 KB, 3 views)
File Type: zip MGlogs.zip (261.4 KB, 5 views)
File Type: txt mbam-log-2013-01-22 (22-57-09).txt (1.9 KB, 2 views)
File Type: txt TDSSKiller.2.8.15.0_22.01.2013_22.20.01_log.txt (137.1 KB, 2 views)
Sponsored links
  #2  
Old 01-22-13, 11:18
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 47,051
Thanks: 459
Thanked 4,740 Times in 4,475 Posts
Default Re: Removal of Hao123 from IE homepage

Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Attach JRT.txt to your next message.
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
  #3  
Old 01-22-13, 17:41
richelle richelle is offline
Private E-2
 
Join Date: Jan 2013
Posts: 23
Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: Removal of Hao123 from IE homepage

attached is the log
Attached Files
File Type: txt JRT.txt (3.1 KB, 16 views)
  #4  
Old 01-23-13, 15:08
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 47,051
Thanks: 459
Thanked 4,740 Times in 4,475 Posts
Default Re: Removal of Hao123 from IE homepage

Did that clear it up or are you still having issues?
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
  #5  
Old 01-23-13, 17:58
richelle richelle is offline
Private E-2
 
Join Date: Jan 2013
Posts: 23
Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: Removal of Hao123 from IE homepage

still having the problem
Sponsored links
  #6  
Old 01-24-13, 10:57
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 47,051
Thanks: 459
Thanked 4,740 Times in 4,475 Posts
Default Re: Removal of Hao123 from IE homepage

Please download ComboFix to your desktop. Turn off any AV software you have before you run it. Attach the log when finished. Do not do anything while it is running or it may stall the program.
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
The Following User Says Thank You to TimW For This Useful Post:
richelle (01-25-13)
  #7  
Old 01-25-13, 08:25
richelle richelle is offline
Private E-2
 
Join Date: Jan 2013
Posts: 23
Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: Removal of Hao123 from IE homepage

Seems like the problem is solved! Thanks so much for ur help
  #8  
Old 01-25-13, 08:29
richelle richelle is offline
Private E-2
 
Join Date: Jan 2013
Posts: 23
Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: Removal of Hao123 from IE homepage

here's the log
Attached Files
File Type: txt Combo fix log.txt (19.9 KB, 5 views)
  #9  
Old 01-25-13, 14:09
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 47,051
Thanks: 459
Thanked 4,740 Times in 4,475 Posts
Default Re: Removal of Hao123 from IE homepage

Let me know if you have any more issues. In the meantime:

If you are not having any other malware problems, it is time to do our final steps:
  1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
  2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
    • Press and hold the Windows key and then press the letter R on your keyboard. This opens the Run dialog box.
    • Copy and paste the below into the Run box and then click OK. Note the quotes are required
    • "%userprofile%\Desktop\combofix" /uninstall
      • Notes: The space between the combofix" and the /uninstall, it must be there.
      • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
  3. Go back to step 4 oof the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
  4. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
  5. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
  6. Goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
  7. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others) and running MGclean.bat did not remove, you can delete these files now.
  8. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
  9. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
    • Refer to the cleaning procedures pointed to by step 6 of the READ ME
      for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
    • Then reboot and Enable System Restore to create a new clean Restore Point.
  10. After doing the above, you should work thru the below link:

Malware removal from a National Chain = $149
Malware removal from MajorGeeks = $0
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
hao123 Removal. Please help with the Logs Natt Malware Removal 25 10-21-12 17:34
Hi I also have problem with this Hao123 when i start up my google chrome browser. CoVeS84 Malware Removal 5 10-10-12 12:14
Hao123 Removal Evil Commissar Malware Removal 12 08-26-12 22:41
Homepage aumaker Software 2 07-03-07 11:57
Exlorer resets homepage after reboot and CWS.Yexe removal tcfanatik Malware Removal 1 01-25-05 15:32


All times are GMT -5. The time now is 15:35.

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds


All content Copyright MajorGeeks.com source code Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger