Spyware deleted-now no browser HJTlog

Discussion in 'Malware Help (A Specialist Will Reply)' started by cannolis, Dec 28, 2005.

  1. cannolis

    cannolis Private E-2

    Windows XP - Internet Explorer
    When opening internet "SpySherrif" appeared and put an icon in the tray. Another icon popped up that said "Your computer is infected" it changed our desktop to read "Spyware Infection". When we opened the internet browser it opened to c:\secure32.HTML instead of our usual web browser. We tried to change from the c:\secure32.HTML but it won't let us. I finally deleted it through spyware blaster and don't see it. Ran Norton Utilities in safe mode. We are now stuck as to what to do next. Attached is a HJT log. Please help us. We are not tekkies so simplicity is helpful. Thank you in advance.
     

    Attached Files:

    cannolis, Dec 28, 2005
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments. HJT logs should not be posted until the cleaning procedure given below is completed.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis

    .
    NOTE: Since you have SpySheriff problems you need to run the below which is also mentioned in the READ & RUN ME which would have been seen if you had read and run the READ ME as required before posting

    Smitfraud, SpySheriff, SpyAxe & PSGuard Removal
     
    chaslang, Dec 28, 2005
    #2
  3. cannolis

    cannolis Private E-2

    Windows XP - Internet Explorer
    I ran smitRem.exe then ran HijackThis in safe mode and selected system scan only. Attached is the PandaActiveScan log and I previously sent the smitfiles.txt as HJTlog. I have also run through the READ & RUN ME from the sticky thread. I still cannot change my home page for my internet browser - it is grayed out and cannot change my desktop background it will not let me select any other backgrounds. Thank you for any help you can give me.
     

    Attached Files:

    cannolis, Dec 29, 2005
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You must attach the log from running BitDefender's online scan.

    Also you did not attach the smitfiles.txt log. Please attach it too. Do not run it again, that would just erase the previous log. I want to see what the first run found.

    Did you configure Spybot per all the instructions in the READ & RUN ME? It does not look like it. I would expect it to fix the NewDotNet stuff if configured properly.

    Also please attach a new HJT log! Make sure you have followed step 7 of the READ ME and installed it properly now.
     
    chaslang, Dec 29, 2005
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds