HiJackThis Log

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by AliceInChains02, Jul 22, 2005.

  1. AliceInChains02

    AliceInChains02 Private E-2

    I recently had AZESearch take over my internet browsers as well as Explorer windows with a Search bar and it also appears that I get redirected to a fake google site when I try to go to Google. I ran Hi Jack This and got a log, but I'm really horrible with computers and if anyone could help me with this it would be greatly appreciated because I love my google. Thanks

    -Brian
     
  2. AliceInChains02

    AliceInChains02 Private E-2

    I should probably also mention I got rid of the AZEsearch bar and now Google is the only problem....sorry - just woke up. Thanks.
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    HijackThis is far from the first thing to use especially for people that do not know much about PCs. Are normal cleanup processes need to be followed.

    Please follow the steps below:

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  4. AliceInChains02

    AliceInChains02 Private E-2

    Edit by chaslang: Inline log attached
     

    Attached Files:

    Last edited by a moderator: Jul 22, 2005
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please read the directions I gave you again. You must run ALL the steps in the READ ME FIRST. You have not done that. For one example, you did not run the first step of the cleaning process with the BitDefender and RavAntivirus online scans.

    Also as stated before about HijackThis logs:
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Why are you running your PC without an antivirus application and without a real firewall? This is equivalent to swimming with sharks without a steel cage. You must see the below link and follow the steps in it after fixing your current problems.

    How to Protect yourself from malware!

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    O1 - Hosts: 213.219.251.78 www.google.com
    O1 - Hosts: 213.219.251.78 google.com
    O1 - Hosts: 213.219.251.78 www.google.co.uk
    O1 - Hosts: 213.219.251.78 google.co.uk
    O1 - Hosts: 213.219.251.78 www.google.ca
    O1 - Hosts: 213.219.251.78 google.ca
    O1 - Hosts: 213.219.251.78 www.google.es
    O1 - Hosts: 213.219.251.78 google.es
    O1 - Hosts: 213.219.251.78 www.google.de
    O1 - Hosts: 213.219.251.78 google.de
    O1 - Hosts: 213.219.251.78 www.google.fr
    O1 - Hosts: 213.219.251.78 google.fr
    O1 - Hosts: 213.219.251.78 www.google.com.au
    O1 - Hosts: 213.219.251.78 google.com.au
    O1 - Hosts: 213.219.251.79 www.yahoo.com
    O1 - Hosts: 213.219.251.79 yahoo.com
    O1 - Hosts: 66.218.75.184 mail.yahoo.com
    O1 - Hosts: 213.219.251.80 www.msn.com
    O1 - Hosts: 213.219.251.80 msn.com
    O1 - Hosts: 213.219.251.80 search.msn.com
    O1 - Hosts: 213.219.251.80 www.search.msn.com
    O1 - Hosts: 213.219.251.80 go.com
    O1 - Hosts: 213.219.251.80 www.go.com
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/029cf61...ip/RdxIE601.cab
    O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/serials/azesearch.cab


    After clicking Fix, exit HJT.

    Now reboot in normal mode and post a new HJT log as an attachment. And tell us how things are working.
     
  7. AliceInChains02

    AliceInChains02 Private E-2

    hey i just wanted to say i followed your instructions and it worked, of course. Thanks for the help. I greatly appreciate it.
     
  8. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Chaslang is on vacation so I will be helping you from here. Are you having any further Malware problems?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds