8 Steps Completed, Logs Attached

By michelwl
Dec 11, 2009
  1. Symptoms: search engine links (mozilla & internet explorer browsers) are being redirected to other sites.

    Actually, after completing the steps, the problem appears to be fixed. What do you suggest?
  2. Bobbye

    Bobbye Helper on the Fringe Posts: 16,334   +36

    Welcome to TechSpot Michel. I'll help with the malware.

    You should update the AVG program. You have v8, must have missed v8.5 because current version is v9!

    Please reopen HijackThis to 'do system scan only'. Check the following if present:
    Note: Optional removals are in Green:

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=laptop
    O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (file missing)> See Optional 1
    O3 - Toolbar: Foxit Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (file missing)> See Optional 1

    Optional 1: Foistware> AskBar
    You have the Ask Toolbar installed. It looks you either got an update or installed FoxIT and didn't realize the AskBar was pre-checked. I would recommend you uninstall it - decide after taking a look at this article:
    http://www.benedelman.org/spyware/ask-toolbars/ You can have HJT remove
    the entries, then follow full removal instructions below.

    Close all Windows except HijackThis and clik on "FixChecked."

    IF you have decided to remove the AskBar, proceed with below:
    You can easily uninstall the Toolbar using the instructions below for Windows Vista:

    • [1]. Close all open Web browsers
      [2]. From the "Start" menu in Windows, select "Control Panel"
      [3]. Under the "Programs" icon, select "Uninstall a program"
      [4]. Select the program with the Ask logo and the text "Ask Toolbar" (or our partner’s brand for a custom Toolbar)
      [5]. Click "Uninstall" and then "Continue" to remove the Toolbar

      If you reopen your Web browser and still see the Toolbar, you may need to restart your computer for the uninstall process to be completed.

      I'd like you to do an online AV scan:
      Run Eset NOD32 Online AntiVirus Scanner HERE

      Note: You will need to use Internet Explorer for this scan.
      • Tick the box next to YES, I accept the Terms of Use.
      • Click Start
      • When asked, allow the Active X control to install
      • Disable your current Antivirus software. You can usually do this with its Notification Tray icon near the clock.
      • Click Start
      • Make sure that the option "Remove found threats" is Unchecked, and the option "Scan unwanted applications" is checked
      • Click Scan
      • Wait for the scan to finish
      • Re-enable your Antivirus software.
      • A logfile is created and located at C:\Program Files\EsetOnlineScanner\log.txt. Please include this on your post.

      Please leave the Eset log in your next reply. If i is clean and the original problem is resolved, I'll have you remove the cleaning tools.
  3. michelwl

    michelwl TS Rookie Topic Starter

    the ESET results state that no threats were found.

    the attachment doesn't really contain any information, so i hope i ran the scan correctly...
  4. Bobbye

    Bobbye Helper on the Fringe Posts: 16,334   +36

    No, it doesn't look like it scanned. Please delete this log and run Eset again.

    Follow with new scan by HijackThis- attach both logs to next reply.

    Are you still getting the redirects? Any other malware related problems?
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...