isafetypage hijack! Did I get it all?

Bruce N · Oct 17, 2006

In a nutshell, isafetyepage hijacked the browser. I followed ALL the instructions and sucessfully ran all the scanners.

Having fixed other malware before I decided to jump ahead and run the SmitfraudFix (by S!Ri) tool. It seems to have sucessfully removed the malware. I cleaned up some other things while I was at it.

After that I went back to the beginning and reran all the scanners. Here are my log files after my repairs. I think I got most everything but if someone could look them over I would be very grateful.

Bruce

Bruce N · Oct 17, 2006

Next group of files.

Bruce N · Oct 17, 2006

Here are the rapport files from before and after my repairs.

chaslang · Oct 19, 2006

Welcome to Majorgeeks!

You are in pretty good shape! Only a few minor things to do.
Goto Add/Remove Programs and uninstall My Way Search Assistant

Now Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

After clicking Fix, exit HJT.

If you are not having any other malware problems, it is time to do our final steps:

If you are running Windows XP or Windows ME, do the below:

go back to step 8 of the READ & RUN ME to Disable System Restore which will flush your Restore Points.

Then reboot and enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Bruce N · Oct 19, 2006

Thank you sir! (salute!)

All steps are complete and the appropriate protections are installed and updated.

Major Geeks rules!
Bruce

chaslang · Oct 20, 2006

You're welcome. Surf safely!

Log in or Sign up

isafetypage hijack! Did I get it all?

Bruce N Private E-2

Attached Files:

bdscan.txt

Activescan.txt

Bruce N Private E-2

Attached Files:

runkeys.txt

newfiles.txt

hijackthis.txt

Bruce N Private E-2

Attached Files:

rapport1.txt

rapport2.txt

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Bruce N Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member