My issue

Discussion in 'Malware Help (A Specialist Will Reply)' started by satmanII, May 23, 2005.

  1. satmanII

    satmanII Private E-2

    Not sure what the problem is here.

    My situation involves my IE Browser popping up with this url on its own.

    /http://202.87.42.150/timesync.asp

    It will stay as this or go to panicsearch or google.ca

    I Followed all the tutorials here in Major Geeks on my own without posting any HJT txts.

    I cannot find the source of this hijacker. Im wondering if my Iexplorer is corrupt.

    I have given up after exhausting your resources on my own. Now im coming to you experts hoping your experiences will help me.
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

    http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

    http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     
  3. satmanII

    satmanII Private E-2

    Thank you for your fast repsonse.

    Find attached my HJT log file. All browsers were closed and MSN turned off.
     

    Attached Files:

  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your HJT log is clean!

    I do not see any problems, however you do have a restriction from Spybot S&D you will need to remove.

    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present


    Copy the contents of the Quote Box below to Notepad. Then click File and then Save As. Change the Save as Type to All Files. Name the file iefix.reg and then click save. (make sure you save it somewhere you can find it. Saving it to your Desktop may make that easy.)

    Double-click on the iefix.reg file on your desktop (or locate it with Windows Explorer and double click on it if not saved to the Desktop) and when it prompts to merge, click YES!


    After doing the above, reboot and see if problems remains!
     
  5. satmanII

    satmanII Private E-2

    So far so good no reoccurance of this nag. Interesting

    If nothing returns I thankyou very much. I will post back if it does.

    Kudos to you
     
  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Good! Yes, let me know if anything comes back.

    You should now follow the steps in this article on How to Protect yourself from malware!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds