also @ TechSpot: Blizzard talks Diablo 3 facts, nerfing and buffs for legendary items

TechSpot

Firefox Hijacked, IE Page Won't Display

Discussion in 'Virus and Malware Removal' started by td95ma, Oct 26, 2008.

Thread Status:
Not open for further replies.

  1. td95ma Newcomer, in training

    Help....

    My Dell Laptop has been Hijacked, everytime i Search in Firefox I get redirected to another site.

    My IE explore comes back with Page Can Not be Displayed all the time.


    I am hoping you can save the day


    Attached is my log...

    thanks
    td95ma, Oct 26, 2008
    #1

  2. kimsland Ex-TechSpotter

    kimsland, Oct 26, 2008
    #2

  3. td95ma Newcomer, in training

    here is my after Malware instruction followed log

    Followed the instructions on that other page, here is my second log
    td95ma, Oct 27, 2008
    #3

  4. kimsland Ex-TechSpotter

    Where are the other logs?

    Please follow the instructions, if you want help :confused:

    You will then need to restart, and then finally do a HJT log again
    kimsland, Oct 27, 2008
    #4

  5. Bobbye Helper on the Fringe

    There are numerous entries in your HijackThis logs that need to be removed.

    Your Java is out of date.

    You have Real Time protection running that needs to be disabled while cleaning.

    This is all covered in the instructions here, as given already:http://www.techspot.com/vb/topic58138.html

    Please follow that, then attach all logs.
    Bobbye, Oct 27, 2008
    #5

  6. td95ma Newcomer, in training

    Will Do

    Ok folks, you caught me, I was trying to take the short cut but from reading other posts, it looks like taking the right steps is the correct approach. I will work on this tomorrow.. follow the steps and post the right stuff. Wish me luck

    Tommy
    td95ma, Oct 27, 2008
    #6

  7. Bobbye Helper on the Fringe

    We're pretty sharp here! Hard to get away with shortcuts!
    Bobbye, Oct 28, 2008
    #7

  8. td95ma Newcomer, in training

    Instructions Followed 3 loggs attached

    Alright Mr Pooh Bear, I think i did everythuing right. i didn't have any of the programs listed in Step 1 running so if I missed somethimg let me know.

    After Super Anti Spyware sweep I tried to update Java and I got an invalid Registry Key message so I went to the Java site and downloaded the program again. I then ran the Hijack This thing.

    So... the redirect problem seems to be solved but after I ran the Super Anti Spyware once, I couldnt find the log so instead I just ran it again when I got home from work and saved that log. Why did it find 25 things again?

    Do I leave the Super Anti Spyware program up and running all the time now?

    Thanks for everything, I owe you guys and gals some beer.


    Tommy

    Attached Files:

    td95ma, Oct 28, 2008
    #8

  9. Bobbye Helper on the Fringe

    Mbam found and removed (Rootkit.Agent) We may need to run another program for this. We'll see.

    Have SuperAntispyware remove the Tracking Cookies.
    These two add-ons work together to prevent the Tracking Cookies form getting on the system.

    Open Firefox> Tools> Options> Privacy section> UNCHECK 'accept all Cookies'> CHECK 'accept Cookies from Sites'.

    Disable Real Time protection before running HijackThis again:
    Update Java to v6u10 here: http://java.com/en/download/manual.jsp
    Update Adobe to v9 here: http://www.adobe.com/products/acrobat/readstep2.html

    Please re-open HiJackThis and scan.*Check* the boxes next to all the entries listed below:
    Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis and reboot into Safe Mode:

    Start> Run> type in ''msconfig' without the quotes> Selective Start-up> Startup tab> UNCHECK everything EXCEPT the antivirus an firewall processes> Apply> OK. This included the Dell Printer. This does not need to start at boot- you an start it manually when needed.

    Go to Add/Remove program in Control Panel and uninstall anything to do with(if there).
    Open your Task Manager> End Task for BPGame.exe

    Start> Run> services.msc> right click> Properties on each of the following and change the Startup type to Disabled:
    ALL TrendoMicro Real Time Service
    Java QuickStart
    Change and Dell Services for printer to Manual[/B]

    Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis and reboot.
    Scan with HijackThis again-with all Real Time protection temporarily disabled. See the following for more information:
    Temporarily Disable Real Time Monitoring Programs:
    http://wiki.castlecops.com/Malware_Removal:_Temporarily_Disable_Real_Time_Monitoring_Programs
    Bobbye, Oct 29, 2008
    #9
Thread Status:
Not open for further replies.