TechSpot

***problem With Internet Properties***

By Flip side
Nov 30, 2005
  1. Guys,

    I recently have encountered the wonderful experience of getting infected by a series of mother-flip-floppin' viruses... first, my desktop went all weird and it displayed something like "your computed is infected with spyware - get it sorted blah blah blah." So anyway, I sorted that out by looking through some other forums for help, but now i've got another problem... whenever I try to set my internet startup page to 'default' in 'Internet Properties,' it sets it to "??????[]." I mean what the... :s

    I used to have MSN as my start page, but everytime I enter that in manually, it gets changed back to the friggin' "??????[]" thing! Consequently, a blank page appears when I open Internet Explorer.

    Come someborry please help? :(

    And also, if anyone knows where I can find the mother funkerz who put this stuff on my computer, i'd very much like to know... MAN would I like to give them a knuckle sandwich, and I don't mean a flaymin' sandwich with knuckles in it!

    Thanks in advance! :D

    The flipSTA.
     
  2. patio

    patio TS Maniac Posts: 482

    What sort of protection programs do you have installed and what steps have you taken so far to remove this baddie ? ?

    patio. :cool:
     
  3. IronDuke

    IronDuke TS Rookie Posts: 856

    Firstly do an online scan at Trend.

    Then download and run Ewido.
     
  4. Flip side

    Flip side TS Rookie Topic Starter

    ***

    Alright Guys?

    Patio - Protection Programs? Errmmm... pffff... I dunno :s

    IronDuke - Thanks for those links! They helped bring my browser back to normal BUT now i've got another bloody problem... it's kinda strange! Basically, when I open 'Internet Properties,' the tabs along the top and the buttons have an interface that reminds me of windows 98, whereas the dialogue box as a whole is in XP style... what's goin' on there then? (Look at the screenshot i've attached to get a better idea :D )

    Further help would be greatly appreciated! :D

    Cheers!


    P.S The following is the log which was generated when I ran HijackThis:

    Logfile of HijackThis v1.99.1
    Scan saved at 22:44:52, on 30/11/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\ewido\security suite\ewidoctrl.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    E:\Miscellaneous\HijackThis.exe

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O17 - HKLM\System\CCS\Services\Tcpip\..\{8C60EB96-B90B-4012-8901-8A97C6390197}: NameServer = 194.74.65.68 194.72.9.34
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
    O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: StuffIt Task Manager - Allume Systems, Inc. - C:\PROGRA~1\Allume\StuffIt\MXTask.exe​
     
  5. IronDuke

    IronDuke TS Rookie Posts: 856

  6. jobeard

    jobeard TS Ambassador Posts: 8,958   +587

    Spybot Search & Destroy has a means to protect the homepage setting.

    Also suggest you get a copy of Spywareblaster to control ActiveX usage.
     
  7. patio

    patio TS Maniac Posts: 482

    "Patio - Protection Programs? Errmmm... pffff... I dunno :s"

    I'll leave this one alone...

    patio. :cool:
     
  8. Mictlantecuhtli

    Mictlantecuhtli TS Evangelist Posts: 4,345   +11

Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...