Firefox Hijacked, IE Page Won't Display

By td95ma
Oct 26, 2008
Topic Status:
Not open for further replies.
  1. Help....

    My Dell Laptop has been Hijacked, everytime i Search in Firefox I get redirected to another site.

    My IE explore comes back with Page Can Not be Displayed all the time.


    I am hoping you can save the day


    Attached is my log...

    thanks
  2. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

  3. td95ma

    td95ma Newcomer, in training Topic Starter

    here is my after Malware instruction followed log

    Followed the instructions on that other page, here is my second log
  4. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Where are the other logs?

    Please follow the instructions, if you want help :confused:

    You will then need to restart, and then finally do a HJT log again
  5. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +35

    There are numerous entries in your HijackThis logs that need to be removed.

    Your Java is out of date.

    You have Real Time protection running that needs to be disabled while cleaning.

    This is all covered in the instructions here, as given already:http://www.techspot.com/vb/topic58138.html

    Please follow that, then attach all logs.
  6. td95ma

    td95ma Newcomer, in training Topic Starter

    Will Do

    Ok folks, you caught me, I was trying to take the short cut but from reading other posts, it looks like taking the right steps is the correct approach. I will work on this tomorrow.. follow the steps and post the right stuff. Wish me luck

    Tommy
  7. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +35

    We're pretty sharp here! Hard to get away with shortcuts!
  8. td95ma

    td95ma Newcomer, in training Topic Starter

    Instructions Followed 3 loggs attached

    Alright Mr Pooh Bear, I think i did everythuing right. i didn't have any of the programs listed in Step 1 running so if I missed somethimg let me know.

    After Super Anti Spyware sweep I tried to update Java and I got an invalid Registry Key message so I went to the Java site and downloaded the program again. I then ran the Hijack This thing.

    So... the redirect problem seems to be solved but after I ran the Super Anti Spyware once, I couldnt find the log so instead I just ran it again when I got home from work and saved that log. Why did it find 25 things again?

    Do I leave the Super Anti Spyware program up and running all the time now?

    Thanks for everything, I owe you guys and gals some beer.


    Tommy

    Attached Files:

  9. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +35

    Mbam found and removed (Rootkit.Agent) We may need to run another program for this. We'll see.

    Have SuperAntispyware remove the Tracking Cookies.
    These two add-ons work together to prevent the Tracking Cookies form getting on the system.

    Open Firefox> Tools> Options> Privacy section> UNCHECK 'accept all Cookies'> CHECK 'accept Cookies from Sites'.

    Disable Real Time protection before running HijackThis again:
    Update Java to v6u10 here: http://java.com/en/download/manual.jsp
    Update Adobe to v9 here: http://www.adobe.com/products/acrobat/readstep2.html

    Please re-open HiJackThis and scan.*Check* the boxes next to all the entries listed below:
    Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis and reboot into Safe Mode:

    Start> Run> type in ''msconfig' without the quotes> Selective Start-up> Startup tab> UNCHECK everything EXCEPT the antivirus an firewall processes> Apply> OK. This included the Dell Printer. This does not need to start at boot- you an start it manually when needed.

    Go to Add/Remove program in Control Panel and uninstall anything to do with(if there).
    Open your Task Manager> End Task for BPGame.exe

    Start> Run> services.msc> right click> Properties on each of the following and change the Startup type to Disabled:
    ALL TrendoMicro Real Time Service
    Java QuickStart
    Change and Dell Services for printer to Manual[/B]

    Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis and reboot.
    Scan with HijackThis again-with all Real Time protection temporarily disabled. See the following for more information:
    Temporarily Disable Real Time Monitoring Programs:
    http://wiki.castlecops.com/Malware_Removal:_Temporarily_Disable_Real_Time_Monitoring_Programs
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.