Followed the basic spyware removal thread but no luck (HJT log inside)

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by brad8873, Aug 12, 2004.

  1. brad8873

    brad8873 Private E-2

    I'm getting the homepage hijack as well as toolbar popups at the top and bottom of my screen in IE. I followed the thread at the top of the page (READ THIS FIRST) but the problems remain. I also dl'ed AdAware SE but still no luck. If someone can analyze my HJT report or offer some advice, I'd appreciate it. Thank you.

    ps- I'm running XP.
     

    Attached Files:

    • 2.txt
      File size:
      7.4 KB
      Views:
      3
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    No! You did not follow all the steps in the thread! If you had, you would not be running an old HijackThis version. Also, you would not have HijackThis on your Desktop had you read and followed the threads. And you would have shutdown unnecessary applications too. Like all the printer stuff, Winword, Firefox, iPod, etc.

    A brief look tells me you have a stubborn one though. You really need to make sure you have done all those other steps with update versions of each program and I need a new HJT log with version 1.98.2.

    Go back and do all the steps and verify you have all the correct versions too.
     
    Last edited: Aug 12, 2004
  3. brad8873

    brad8873 Private E-2

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Meaning????

    We are ready to help! Just follow the guidelines please! This makes it easier for us to help you. The sooner you run the stuff I gave you and post a new HijackThis log (with proper version), the sooner we can get started.
     
  5. brad8873

    brad8873 Private E-2

    Okay I think I got it now. Thanks for the help.
     
  6. brad8873

    brad8873 Private E-2

    Here's the file
     

    Attached Files:

    • 2.txt
      File size:
      5.4 KB
      Views:
      2
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    It does not look like you ran the TrendMicro scan. Are you sure you ran everything? You did not tell me anything that you did. You just posted a log.
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You also still have your browser running (two instances of it):
    C:\progra~1\intern~1\iexplore.exe
    c:\progra~1\intern~1\iexplore.exe

    The guidelines specifically request you exit browsers before scanning.
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Run HijackThis and have it fix the following lines:
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search200.com/passthrough/index.html?http://www.google.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://xfxhdhjjwefcoau.com/CqL/eDNUntbPTjnRqAykR4kvZL9lysSaBRbhA7n8l_0/IqjMGnWRtpo8ubKEil6U.html

    Then Reset Web Settings by opening Internet Explorer. Then click Tools, Internet Options, Programs, and click the Reset Web Settings button. Then go back to the General tab and set your home page back to what you like (i.e., www.majorgeeks.com).

    Let me know if this resolves your problems. If not, reboot your PC and immediately after reboot (do not run anything else) get a fresh HijackThis log. Now run your browser and post the log back here as an attachment.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds