Hijacked websites

Discussion in 'Malware Help (A Specialist Will Reply)' started by the_hammer, Sep 29, 2010.

  1. the_hammer

    the_hammer Private E-2

    IE has been hijacked. I also keep getting a spooler system app failure. I have started the XP Cleaning procedure. I had to access SuperAntiSpyware from the exe file in the program files. It would not load by normal procedures. I am attaching the Log from that.

    I am not able to get Malwarebytes going at all. It wont respond. So that is why I am sending this log file before I continue.

    Thank you in advance. You guys are awesome.:)
     

    Attached Files:

    the_hammer, Sep 29, 2010
    #1
  2. the_hammer

    the_hammer Private E-2

    I managed to get the remaining items complete. Combofix would not run.

    Attached are my logs.

    Thanks
     

    Attached Files:

    the_hammer, Sep 29, 2010
    #2
  3. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Currently reviewing your logs and will get back to you with a set of inctructions ASAP.
     
    Kestrel13!, Sep 30, 2010
    #3
  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    What exactly are you using for antivirus??

    You need to rename combofix.exe to 123.com and then try running it again, if normal mode does not work then please reboot into safe mode to try. If successful attach the C:\combofix.txt

    Go to TDSSKiller and Download TDSSKiller.zip to your Desktop

    • Extract its contents to your Desktop so that you have TDSSKiller.exe directly on your Desktop and not in any subfolder of the Desktop.
    • Now double click the TDSSkiller.exe file to run it ( if using Vista or Windows 7 do not double click on it but rather, right click and select Run As Administrartor.
    • Allow the application to run and a window will open showing that it is TDSSkiller from Kaspersky
    • Click Start scan
    • It will run rather quickly and will notify you of whether anything is found or not.
    • Follow the instructions to delete/quarantine if asks you what to do when if finds something.
    Whether an infection is found or not, a log file should be created on your C: drive ( or whatever drive you boot from) in the root folder named something like TDSSKiller.2.1.1_27.12.2009_14.17.04_log.txt which is based on the program version # and date and time run. Please attach this log to your next reply. (See: HOW TO: Attach Items To Your Post )

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file that will be created by running this.

    How is Internet Explorer behaving now?
     
    Kestrel13!, Oct 1, 2010
    #4
  5. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Also, if after that you are still experiencing redirects:

     
    Kestrel13!, Oct 1, 2010
    #5

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds