also @ TechSpot: Razer brings the arcade experience home with the Atrox Arcade Stick

Mozilla hijacker?

Discussion in 'Virus and Malware Removal' started by ywain, Mar 22, 2005.

  1. ywain Newcomer, in training

    Hi there,

    I have a nice little registry in my ht log that seems to hijack the connection - disabling the ability to download e-mails, use the browser sometimes and update the AVG virus checker - everything really!

    Here it is......

    O17 - HKLM\System\CCS\Services\Tcpip\..\{F55AC4C9-8A2B-4EB2-884F-432BF6A4D66A}: NameServer = 80.225.253.50 80.225.253.58

    Anyone knows what it is and how to get rid of it.

    Have tried to turn off system restore and fix it in safe mode - nothing works!!

    Help plz!

    Yws
  2. dopefisher Newcomer, in training Posts: 540

    you could try to use regedit. if you don't know how, go to start, run, type regedit. go to the address (on the left hand side) you listed for the registry item (hklm...etc)
  3. RealBlackStuff Newcomer, in training Posts: 8,165

    Those IP numbers belong to our infamous foe Tiscali.
    If that is your provider, start looking around and change to another provider "mui pronto".
    If not, do a Find in Regedit for {F55AC4C9-8A2B-4EB2-884F-432BF6A4D66A} and delete all keys that have that number in it. Then let HJT fix it if still there.
    Backup your registry first, just in case!.
  4. ywain Newcomer, in training

    Did the wrong thing!!

    Hi - I have gone to Regedit and deleted a lot of keys with the {F55AC4C9-8A2B-4EB2-884F-432BF6A4D66A} thing in them (most of them where a key called 'bind' and where in registries conected to the internet - 'LAN' and 'connection' & so forth)- and now I'm not allowed to connect to the internet - it comes up as a different error every time - but the jist of it is that it has done something to the TCP/PPP or something- the computer does not agree with the remote computer on TCP/IP/PPP settings.

    Can you help? Do I need an expert? Can I copy the Bind keys back in from a mates Computer? I know I should have made a backup but didn't!! Sorry!

    Plz Help again!!!!
  5. Liquidlen TechSpot Paladin Posts: 1,646

    Did you get all instances of the ID # out of your registry .
    Use the "find next" search , and keep click that until the registry tells you there are not more. Then re install the software for your ISP if it came on a disk or rerun the wizard if you have you settings.
  6. RealBlackStuff Newcomer, in training Posts: 8,165

    Do as LiquidLen suggests, and next time, FOLLOW THE EFFING ADVICE to backup!