About:Blank Hijacker

This beast is on my computer. I am running win 98, also downloaded spybot s&d but it's still there. I've read "When all else fails" already but it doesn't seem to be a lot of help for me since I'm using 98. Can I get some help from someone, please?
TIA,
Trish

 

First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

After doing ALL of the above if you still have a problem:


http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

 

here is the log

 

The first thing I notice is that your IE version is out dated. You need to install IE 6 SP1. After you do this fix below I want you to install it, I will include a link for you.

Please print out these instructions so that you can operate with All Browser Windows CLOSED.

Please make sure System Restore is OFF and the Viewing of Hidden Files & Folders is Enabled as per the tutorial.


Now, look in Task Manager (Ctrl-Alt-Del) for the following running processes and, if you see any of them, try to END them:

IEPA32.EXE

ptsnoop.exe

NETHI.EXE

Now scan with HijackThis and Check the Boxes for the following:

Make sure All Browser Windows are Closed when you Click FIX.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\rhorv.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\rhorv.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\rhorv.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\rhorv.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\rhorv.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\rhorv.dll/sp.html#28129
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\rhorv.dll/sp.html#28129

R3 - Default URLSearchHook is missing

O2 - BHO: Class - {C7710D45-C73D-61A5-9D49-3C396EE9411B} - C:\WINDOWS\MSJL.DLL

O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe
O4 - HKLM\..\Run: [NETHI.EXE] C:\WINDOWS\NETHI.EXE
O4 - HKLM\..\RunServices: [IEPA32.EXE] C:\WINDOWS\IEPA32.EXE /s
O4 - Startup: Reboot.exe

Again, make sure All Browser Windows are Closed when you Click FIX.

NOW:
Please boot into Safe Mode with the Viewing of Hidden Files & Folders Enabled and navigate to and DELETE the following if they should remain:

C:\WINDOWS\IEPA32.EXE

C:\WINDOWS\ptsnoop.exe

C:\WINDOWS\NETHI.EXE

C:\WINDOWS\rhorv.dll

C:\WINDOWS\MSJL.DLL

Reboot.exe ←–– Search for this file and delete if found!

NEXT:
Run CCleaner and Spybot S&D and have Spybot fix what it finds.
Note: Dont forget to update Spybot S&D by selecting "Search For Updates"

Reboot to Normal Windows , Scan with HijackThis and attach the new log.
Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now.

Good Luck!

 

Download and Install This Before Posting A new HJT Log! Microsoft Internet Explorer 6.0 SP1

 

I got this error while running Spybot. Then it completely stopped.
Error during check! Winpup 32 ("Cungultiger Datentyp fur")
Also this: DSO Exploit

 

Download & Install:
Spybot - Search and Destroy DSO Exploit Fix 1.3.1 TX

After this try it again, let me know how it goes this time.