In need of Major HELP.

So the famed "your-searcher.com" has seemed to taken over my computer. I have downloaded the HiJacked program. I've run it about 10 times, and it seems like after deleting every "your-searcher" related line, when I open up my Internet Browser, it comes back to haunt me. Any help would be greatly appreciated, specifically if I should take something out that I haven't.

And this just in> I have recieved an "error" message when I have just tried to run HiJACK again. It says "An unexpected error has occured at procedure: cmdFix_click() Error #75 - Path/File access error (37 items in results list)." it goes on to tell me to email merijn@spywareinfo.com with what i was doing and scan log... wel maybe this will help to help me with my problem!


[LOG FILE REMOVED: PLEASE THIS FIRST
http://forums.majorgeeks.com/showthread.php?t=35407 ]

 

Welcome to Major Geeks.
Please read the rules on posting log files
http://forums.majorgeeks.com/showthread.php?t=35407

 

I can however help you since you posted it anyways. The problem I am seeing is located here:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://your-searcher.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://your-searcher.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://your-searcher.com/index.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://your-searcher.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://your-searcher.com/index.htm

Delete those lines and it should go back to normal.

Edit: Darn you Kodo, you beat me to it!

 

Thanks for the heads up. I'll be sure to follow the rules next time.

I have tried deleting the
"R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://your-searcher.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://your-searcher.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://your-searcher.com/index.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://your-searcher.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://your-searcher.com/index.htm "

in previous times before (like 9 times already), but it seems to keep coming back (opening up the web browser again, and when i scan again). This most current time, I got the error report, and so i sent merijn an email. Could there be anyway that the "your-searcher" keeps coming back?

I appreciate all your help. Much thanks!

 

No problem you can download the tool to get rid of the about: stuff here on MG.

http://majorgeeks.com/download.php?det=4289

That should get rid of it for good. If you have another problem just come back to us.

 

please RE-READ the content in the link I provided paying special attention to #5

 

hmm.... that includes the about:buster also. yes i beat you to it!