MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Malware Removal
Register FAQ Members List Calendar Casino Mark Forums Read

Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient.


Reply
 
Thread Tools Display Modes
  #1  
Old 01-31-06, 22:49
whicky1978 whicky1978 is offline
Master Sergeant
 
Join Date: Sep 2004
Location: Clarksville, TN
Posts: 590
Thanks: 10
Thanked 1 Time in 1 Post
Angry Charter keeps hijacking my browser, even after removing all options with Hijack This

I ran HighJack this with my browser closed, mail programs, and so forth, and restart my laptop as it requested, but still I can't change my homepage. This started the same time I started using chater cable internet. I tried googling for answers, but no luck.

I homepage won't change from chartermsn.com

I will attach my HiJack This log. I also tried just removing R0 with "chartermsn main page" before I removed them all.
Attached Files
File Type: log hijackthis.log (11.4 KB, 1 views)
Reply With Quote
Sponsored links
  #2  
Old 01-31-06, 23:07
bjgarrick's Avatar
bjgarrick bjgarrick is offline
MajorGeeks Admin - Malware Expert
 
Join Date: Oct 2004
Location: Southern Alabama
Posts: 16,069
Thanks: 0
Thanked 224 Times in 221 Posts
Default Re: Charter keeps hijacking my browser, even after removing all options with Hijack This

This entry was added from Spybot or Ad-Aware most likely, this needs to be removed.
Quote:
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

Now scan with HijackThis and check the boxes for the following entries:
( Make sure ALL browser windows are closed when you click FIX )

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://charter.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = 192.168.1.1
(Keep this if you need it)

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O14 - IERESET.INF: START_PAGE_URL=http://mirs.peoplepc.com/?offername=PeoplePC Online Accelerated&userName=whicky2003&firstName=Joseph&qs=EGHBIDJMDDLFJNKJAMLBIGNAIEMN FDLMBCNIKEEIHECEFPFDPPEIHIGJKNHHFIPAKDEPIDLBDCKIJBLNPBPNPINDNKIFCMKFHAEJGJGDDIAC CGNBGKKIEMIJNIPGPKHG|OKHPJIBDDGNMCNOPADEEAAGOBA

O18 - Filter: text/html - (no CLSID) - (no file)

Again, make sure ALL browser windows are closed when you click FIX.

[FONT="Microsoft Sans Serif"][SIZE="3"]Next, run CCleaner to clean up cookies and temp files.

After you complete the above, procede with the below...

Reset Web Settings & Default Security Settings:

To Reset Web Settings:
Right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK


To Default Security Settings:
Right click on your desktop Internet Explorer icon and select Properties. Then click the Security Tab and click Default Level for Internet, Local Intranet, Trusted Sites, and Restricted Sites.


After you complete this post, reboot and see if your problem remains.
Reply With Quote
  #3  
Old 02-01-06, 21:26
whicky1978 whicky1978 is offline
Master Sergeant
 
Join Date: Sep 2004
Location: Clarksville, TN
Posts: 590
Thanks: 10
Thanked 1 Time in 1 Post
Smile Fixed! (About:Blank issue)

I did everything you suggested bjgarrick, and it did not work. Then I realized that it was an about:blank issue :: , so I ran AboutBuster and HSRemove in Safe Mode, and the problem was fixed.
Reply With Quote
  #4  
Old 02-01-06, 21:40
bjgarrick's Avatar
bjgarrick bjgarrick is offline
MajorGeeks Admin - Malware Expert
 
Join Date: Oct 2004
Location: Southern Alabama
Posts: 16,069
Thanks: 0
Thanked 224 Times in 221 Posts
Default Re: Charter keeps hijacking my browser, even after removing all options with Hijack This

Your log showed no sign of this infection. Attach one last HJT log to confirm your clean.
Reply With Quote
  #5  
Old 02-04-06, 15:53
whicky1978 whicky1978 is offline
Master Sergeant
 
Join Date: Sep 2004
Location: Clarksville, TN
Posts: 590
Thanks: 10
Thanked 1 Time in 1 Post
Default Re: Charter keeps hijacking my browser, even after removing all options with Hijack This

about:blank seems to be a part of my Avant browser.

Here is a new log.
Attached Files
File Type: log hijackthis.log (4.6 KB, 2 views)
Reply With Quote
Sponsored links
  #6  
Old 02-04-06, 21:13
bjgarrick's Avatar
bjgarrick bjgarrick is offline
MajorGeeks Admin - Malware Expert
 
Join Date: Oct 2004
Location: Southern Alabama
Posts: 16,069
Thanks: 0
Thanked 224 Times in 221 Posts
Default Re: Charter keeps hijacking my browser, even after removing all options with Hijack This

Have HJT fix the below entry:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm

After you remove the above entry your log will be clean.

Are you having any current problems?
Reply With Quote
  #7  
Old 02-04-06, 21:32
whicky1978 whicky1978 is offline
Master Sergeant
 
Join Date: Sep 2004
Location: Clarksville, TN
Posts: 590
Thanks: 10
Thanked 1 Time in 1 Post
Default Re: Charter keeps hijacking my browser, even after removing all options with Hijack This

Quote:
Originally Posted by bjgarrick
Have HJT fix the below entry:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm

After you remove the above entry your log will be clean.

Are you having any current problems?
No, I'm not currently having any problems
Reply With Quote
  #8  
Old 02-04-06, 21:56
bjgarrick's Avatar
bjgarrick bjgarrick is offline
MajorGeeks Admin - Malware Expert
 
Join Date: Oct 2004
Location: Southern Alabama
Posts: 16,069
Thanks: 0
Thanked 224 Times in 221 Posts
Default Re: Charter keeps hijacking my browser, even after removing all options with Hijack This

Your Welcome!

You should see this article on How to Protect yourself from malware!

Surf Safely!
Reply With Quote
  #9  
Old 02-04-06, 21:59
whicky1978 whicky1978 is offline
Master Sergeant
 
Join Date: Sep 2004
Location: Clarksville, TN
Posts: 590
Thanks: 10
Thanked 1 Time in 1 Post
Default Re: Charter keeps hijacking my browser, even after removing all options with Hijack This

Quote:
Originally Posted by bjgarrick
Your Welcome!

You should see this article on How to Protect yourself from malware!

Surf Safely!
Thank you
Reply With Quote
  #10  
Old 02-04-06, 22:59
bjgarrick's Avatar
bjgarrick bjgarrick is offline
MajorGeeks Admin - Malware Expert
 
Join Date: Oct 2004
Location: Southern Alabama
Posts: 16,069
Thanks: 0
Thanked 224 Times in 221 Posts
Default Re: Charter keeps hijacking my browser, even after removing all options with Hijack This

Your Welcome!
Reply With Quote
Sponsored links
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 14:42.

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds


Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger