MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Malware Removal
Register FAQ Members List Calendar Casino Mark Forums Read

Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient.


Closed Thread
 
Thread Tools Display Modes
  #1  
Old 03-15-05, 14:55
newmant newmant is offline
Private E-2
 
Join Date: Mar 2005
Posts: 15
Thanks: 0
Thanked 0 Times in 0 Posts
Post Hello Geeks

I hope I am doing this right. I needdddddddd Help. I have a ie hijacker, on may start page comes up-http://www.hotoffers.info/a0002/. I have went into the registry in hkey local machine and hkey users and I will delete it and it just comes right back. Then I have a microsoft security warning about port 8080 and I forget the other one. I have my microsoft internet explorer page just opens on its own and my computer tries to connect on its own. I am running Norton System Works, AVG Free Antivirus, Ad-Aware SE Personal Addition and Microsoft Antispy Ware. I dont know what else to do except maybe throw my computer away. Can you help.
Thanks Tammy
Sponsored links
  #2  
Old 03-15-05, 14:58
newmant newmant is offline
Private E-2
 
Join Date: Mar 2005
Posts: 15
Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: Hello Geeks

If I am not doing this right please let me know. Tammy
  #3  
Old 03-15-05, 15:08
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,771
Thanks: 62
Thanked 7,840 Times in 4,257 Posts
Default Re: Hello Geeks

I cannot vouch for the authenticity of this but did you see the thread a couple links down:

hotoffer.info

This user said it fixed his problem. If you feel comfortable with trying this at your own risk, do so. Otherwise see my next message.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter

Last edited by chaslang; 03-15-05 at 15:19..
  #4  
Old 03-15-05, 15:11
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,771
Thanks: 62
Thanked 7,840 Times in 4,257 Posts
Default Re: Hello Geeks

If that does not help you, follow the steps below.

To help us to best help you, please follow the steps below closely and in the order given and do not skip anything. If you have any difficulty, please post back letting us know what steps you have completed, what you found while doing the scans if anything along with details about any problems you may have encountered in completing the steps. The more details you can provide the better. Don't be afraid to ask for additional help if you don't understand something!

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus RemovalMake sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


After doing ALL of the above you still have a problem:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENTto your next message. (Do NOT copy/paste the log into your post).
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
  #5  
Old 03-15-05, 23:24
newmant newmant is offline
Private E-2
 
Join Date: Mar 2005
Posts: 15
Thanks: 0
Thanked 0 Times in 0 Posts
Unhappy newmant

Helppppppppppppp............................ I have even tried spy killer 2005 and this ie highjacker just keep coming back and my computer is trying to connect all by itself, almost like its possessed.
newmant
Sponsored links
  #6  
Old 03-15-05, 23:42
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,771
Thanks: 62
Thanked 7,840 Times in 4,257 Posts
Default Re: newmant

Why are you posting a new thread for this? We already gave a procedure to follow. You need to follow it if you want help.

I'm merging you back to your other thread!

Did you purchase SpyKiller?
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
  #7  
Old 03-16-05, 00:04
newmant newmant is offline
Private E-2
 
Join Date: Mar 2005
Posts: 15
Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: newmant

Sorry I am finding out how to work sending messages, I hope this is the right way to reply. I found it know and will follow all steps. I did purchase the spykiller. But no luck yet. But I am going to follow the steps and see if it will help. Thank You So Much I was about to pull my hair out or maybe sling my computer.
  #8  
Old 03-16-05, 00:20
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,771
Thanks: 62
Thanked 7,840 Times in 4,257 Posts
Default Re: newmant

Okay just follow the cleanup procedures I gave to you and if you still have a problem when finished with them, post the HijackThis log as requested (make sure you follow the steps correctly to avoid an additional delay).

The reason I asked about SpyKiller is that it used to be on a list of rogue/suspect spyware removal tools. It recently was taken off the list, but I don't believe anyone thinks to highly of it. What we have here for free will work just as well.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
  #9  
Old 03-16-05, 00:44
newmant newmant is offline
Private E-2
 
Join Date: Mar 2005
Posts: 15
Thanks: 0
Thanked 0 Times in 0 Posts
Thumbs up Re: chaslang

Okay I will remove the spy killer, I am not able to down load fast we only have dial up here I live so all my downloads are slow, I have a couple done. And am on the spybot now. I will probly be tommorrow with my reply. Thank You So Much newmant
  #10  
Old 03-16-05, 00:54
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,771
Thanks: 62
Thanked 7,840 Times in 4,257 Posts
Default Re: chaslang

Quote:
Originally Posted by newmant
Okay I will remove the spy killer, I am not able to down load fast we only have dial up here I live so all my downloads are slow, I have a couple done. And am on the spybot now. I will probly be tommorrow with my reply. Thank You So Much newmant
Okay! I know it can be time consuming but it will be worth it when you are done. You will have a lot of useful tools and will learn something. You do not need to uninstall SpyKiller if you like it. That is your decision. I just don't think it is worth the money. Perhaps you can get a refund!

Note you will not be able to run the online scans in safe mode since you are on dial-up. So try running them in normal boot mode. This can take quite awhile. He it becomes a problem. Just skip the two online scanners and continue.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Sponsored links
  #11  
Old 03-16-05, 01:07
newmant newmant is offline
Private E-2
 
Join Date: Mar 2005
Posts: 15
Thanks: 0
Thanked 0 Times in 0 Posts
Talking Re: Hello Geeks

Okay I will follow step by step and if I have any questions when I get to the remove microsoft java part can I post reply's with my questions to you? I will just tell everybody that normally calls to call my cell all day Ha Ha Cause it will probly take this dial up that long.. Thanks again
  #12  
Old 03-16-05, 01:09
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,771
Thanks: 62
Thanked 7,840 Times in 4,257 Posts
Default Re: Hello Geeks

Don't worry about doing the removal of MS Java and install of Sun Java right now. Just do the 4 steps of the Getting Prepare section and the first 4 steps of the clean up. The next step would be to post the HijackThis log as I requested (that is if you still have a problem).
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
  #13  
Old 03-16-05, 01:12
newmant newmant is offline
Private E-2
 
Join Date: Mar 2005
Posts: 15
Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: Hello Geeks

okay will do.
  #14  
Old 03-16-05, 01:18
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,771
Thanks: 62
Thanked 7,840 Times in 4,257 Posts
Default Re: Hello Geeks

I know this will take a while to do an while running these scans you will be offline (in safe mode). So just complete everything as best as you can and note what you find and clean and do not clean. Tell us the results when you come back.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
  #15  
Old 03-16-05, 05:56
newmant newmant is offline
Private E-2
 
Join Date: Mar 2005
Posts: 15
Thanks: 0
Thanked 0 Times in 0 Posts
Talking Re: Hello Chaslang

I am clean of all...... Thanks to you. I dont need the hijack this file. I only had trouble running the online virus and security scans it came up that my active x was not ready and it just kept saying that? But, the downloads and the other items took care of my problems. Below I will list what they showed.
Spybot:
Double Click 1 entry; Avenue A,Inc 1 entry; Dso Exploit 5 entries; MediaPlex 1 entry

Stinger:
Number of cleaned files 54757

Kill2me: look to me I think was the name it removed

CCcleaner: 27.6 mb removed

Ad Aware vx2 cleaner: system clean

Ad Aware SE: 2 registry keys cleaned and corrected.

HS Remove: 8 items removed

and the other thread with hotoffers worked to fix my reappearing ie highjacker.

I had one question though I am running Avg free addition and Norton System Works that I bought a month and 1/2 ago. Should I have both or would you go with just one of them. I think they maybe a conflict between the 2???

Thank You Again
newmant
Sponsored links
  #16  
Old 03-16-05, 11:00
TheOldThug's Avatar
TheOldThug TheOldThug is offline
First Sergeant
 
Join Date: Dec 2004
Location: Illinois
Posts: 718
Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Hello Geeks

Newmant

Chas will probably want you to submit a HJT log anyway. He will want to make sure you are clean.

Please try to turn OFF any applications that are not needed It makes it much easier to look at the HJT log.
Make sure you have HijackThis 1.99.1 and follow the guidelines on where to install it and how to post a log as an attachment. This is all covered in the sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

Now post a HijackThis log as an attachment to your message (Do not post the log inline). All running programs should be closed, INCLUDING YOUR WEB BROWSER, e-mail. Close before running Hijack This!

To repeat: Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder for example C:\Program Files\HJT

Good Luck
  #17  
Old 03-16-05, 11:47
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,771
Thanks: 62
Thanked 7,840 Times in 4,257 Posts
Default Re: Hello Geeks

Yes! I would still like to see the HJT log! And only one AV should be installed. Take your pick!
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
  #18  
Old 03-16-05, 13:22
newmant newmant is offline
Private E-2
 
Join Date: Mar 2005
Posts: 15
Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: Hello Geeks

I dont see where to go advanced, I want to make sure I send the log file the right way... can you help me find the go advanced
  #19  
Old 03-16-05, 13:34
newmant newmant is offline
Private E-2
 
Join Date: Mar 2005
Posts: 15
Thanks: 0
Thanked 0 Times in 0 Posts
Question Re: Hello Geeks

okay found it, I am sending the log file as a word file, is that ok?? I dont want mess anything up.
Attached Files
File Type: doc Logfile of HijackThis v1.doc (28.5 KB, 2 views)
  #20  
Old 03-16-05, 13:38
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,771
Thanks: 62
Thanked 7,840 Times in 4,257 Posts
Default Re: Hello Geeks

You should just be attaching the .log file that HJT creates. You should not be creating a Word Document. Log files are easier for us to deal with and smaller in size.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Sponsored links
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 01:19.

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds


All content Copyright MajorGeeks.com source code Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger