TechSpot

***problem With Internet Properties***

By Flip side
Nov 30, 2005
  1. Guys,

    I recently have encountered the wonderful experience of getting infected by a series of mother-flip-floppin' viruses... first, my desktop went all weird and it displayed something like "your computed is infected with spyware - get it sorted blah blah blah." So anyway, I sorted that out by looking through some other forums for help, but now i've got another problem... whenever I try to set my internet startup page to 'default' in 'Internet Properties,' it sets it to "??????[]." I mean what the... :s

    I used to have MSN as my start page, but everytime I enter that in manually, it gets changed back to the friggin' "??????[]" thing! Consequently, a blank page appears when I open Internet Explorer.

    Come someborry please help? :(

    And also, if anyone knows where I can find the mother funkerz who put this stuff on my computer, i'd very much like to know... MAN would I like to give them a knuckle sandwich, and I don't mean a flaymin' sandwich with knuckles in it!

    Thanks in advance! :D

    The flipSTA.
     
  2. patio

    patio TS Maniac Posts: 700

    What sort of protection programs do you have installed and what steps have you taken so far to remove this baddie ? ?

    patio. :cool:
     
  3. IronDuke

    IronDuke TS Rookie Posts: 1,267

    Firstly do an online scan at Trend.

    Then download and run Ewido.
     
  4. Flip side

    Flip side TS Rookie Topic Starter

    ***

    Alright Guys?

    Patio - Protection Programs? Errmmm... pffff... I dunno :s

    IronDuke - Thanks for those links! They helped bring my browser back to normal BUT now i've got another bloody problem... it's kinda strange! Basically, when I open 'Internet Properties,' the tabs along the top and the buttons have an interface that reminds me of windows 98, whereas the dialogue box as a whole is in XP style... what's goin' on there then? (Look at the screenshot i've attached to get a better idea :D )

    Further help would be greatly appreciated! :D

    Cheers!


    P.S The following is the log which was generated when I ran HijackThis:

    Logfile of HijackThis v1.99.1
    Scan saved at 22:44:52, on 30/11/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\ewido\security suite\ewidoctrl.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    E:\Miscellaneous\HijackThis.exe

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O17 - HKLM\System\CCS\Services\Tcpip\..\{8C60EB96-B90B-4012-8901-8A97C6390197}: NameServer = 194.74.65.68 194.72.9.34
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
    O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: StuffIt Task Manager - Allume Systems, Inc. - C:\PROGRA~1\Allume\StuffIt\MXTask.exe​
     
  5. IronDuke

    IronDuke TS Rookie Posts: 1,267

  6. jobeard

    jobeard TS Ambassador Posts: 13,474   +329

    Spybot Search & Destroy has a means to protect the homepage setting.

    Also suggest you get a copy of Spywareblaster to control ActiveX usage.
     
  7. patio

    patio TS Maniac Posts: 700

    "Patio - Protection Programs? Errmmm... pffff... I dunno :s"

    I'll leave this one alone...

    patio. :cool:
     
  8. Mictlantecuhtli

    Mictlantecuhtli TS Evangelist Posts: 4,916   +9

Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.