TechSpot

Browser Hijacked with www.quicknavigate.com. Help please!!!

By Littlejim
May 11, 2005
Topic Status:
Not open for further replies.
  1. I am trying to get a temp job and my flaming browser 'IE' has been hijacked by something. I have tried the route as suggested on this website but these little blighters are resilient.

    I have the latest upgrades for Ad-Aware, Spybot, CWShredder the VXcleaner and AVG but the following keep coming back and letting other things in.

    Fixing them in HJT does not work. :confused:

    I can post my HJT log but thought I would ask first if there is any point seeing as it does not seem to have any effect.

    The following keep coming back:

    http://www.quicknavigate.com/ (a contiually annoying browser hi-jack)
    CoolWWWSearch.ToonComics
    n_Case
    I also seem to have a load of registry entries that cannot be HJT fixed...!...?

    I did have some other struff but managed to use killbox to eradicate some stuff including a blue background with warning in the middle, and a yellow flashing triangle in my tray icon area.

    If you can help, please do, cheers.
    J.
  2. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 8,165

    No offense meant, but are you sure you 'fixed' ALL of the nasties?
    Attach your HJT-log as per instructions How to post your Hijackthis log-files.
    I have yet to come across one I couldn't fix!
  3. Littlejim

    Littlejim TS Rookie Topic Starter

    No offence taken....

    Hi RBS. Firstly, thank you for replying; and I apologise for not explaining myself clearly.

    You are right....I HAVE NOT fixed all of the nasties. Your teachings in other threads worked for me in the past but this time it would seem I need some stronger medicine.

    Using your advised standard cleaning approach I have been unsuccesful in disinfecting my computer. Although I have eradicated a number of nasties. Several remain including the browser hijack that takes me to "quicknavigate".
    I also have the following in my Task Manager Process List:
    shnlog.exe
    vsmon.exe
    intmon.exe

    I appreciate you do not really want HJT logs here (my sincere apologies for making a mess :blush: ) but I am not sure if I would cause more annoyance if I was to start another thread in the correct HJT.Log thread, having started my question here.

    With thanks,
    James.
  4. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 8,165

    It's perfectly OK to continue here with your log. Rather one log per thread, than 50!
    I should have never allowed that to go on as long as it did! Maybe I'll close that thread and force people to open a fresh thread per case, LOL.

    BTW, vsmon.exe belongs to Zonealarm firewall
    The other two are part of a REAL nasty!.

    You are quite 'fashionable' in that you have the 'latest' infection on the web!
    Go to this forum:
    http://www.geekstogo.com/forum/The_Old_quicknavigatecom_Problem-t23175.html
    and scroll down until you see (on the right) post #11 by ~kat~
    Follow the instructions from there.
    Good luck!
  5. Littlejim

    Littlejim TS Rookie Topic Starter

    Always new I was stylish...only the latest virus' for me!

    Hi RBS, I think you might have found the perfect solution :grinthumb although I do not understand the results from ActiveScan. It says "Disinfected" for three entries and "No disinfected" for the rest. I have attached it in case you are interested......

    ....Although looking at my HJT.log things seems to be looking up. Please would you do me the honour of a final scout through my latest HJT log and give me your thoughts on what Active Scan has found?

    With happy regards,
    James.
  6. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 8,165

    Your HJT-log is clean. Glad I could help you there

    Panda's strange and cryptic explanation of 'No disinfected' should actually read: 'NOT disinfected'.
    In other words, you still have a bunch of critical files on your PC (as per the scan-list) that need to be taken care off.
    Panda obviously can't (is it that bad, or what?)

    Out of curiosity I had my own PC scanned by them as well.
    The filecount went way OVER half a million files (I have 2x W2K and 1x XP Pro on this PC).
    Result: 1 measly, questionable file!
    Spyware:Spyware/Aveo-Attune No disinfected H:\Downloads\Hardware-Stuff\Modems\3COM Modems\ControlCtr\cc_4_00_034_Uk.exe[atmdlusr.exe]
    Scanned it with AVG, nothing found!

    I sold that modem last year, so I just deleted the file.
    Don't think I ever even installed it, because in my dial-up 'past' I always used only the drivers, never any modem-software.
  7. Littlejim

    Littlejim TS Rookie Topic Starter

    Cheers for fixing www.quicknavigate.com

    Great help RBS.

    I will bid you farewell and hopefully not have to bother you for a very long time except maybe to drop in now and again and have a read through the forums.

    Cheers, its Friday let's go to the pub and enjoy a Guiness. :approve:
    James.
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.