C clickjam Jun 2, 2006 #1 My homepage has been hijacked (safetyuptodate.com). I would appreciate any help or info. Hijackthis logfile text is attached. Thanks.
My homepage has been hijacked (safetyuptodate.com). I would appreciate any help or info. Hijackthis logfile text is attached. Thanks.
H howard_hopkinso Posts: 21,238 +17 Jun 2, 2006 #2 Hello and welcome to Techspot. Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there). O2 - BHO: Nothing - {f79fd28e-36ee-4989-aa61-9dd8e30a82fa} - C:\WINDOWS\System32\hp574F.tmp Fix all 016-DPF entries. O20 - Winlogon Notify: igfxcui - igfxsrvc.dll (file missing) Click on the fix checked button. Close HJT. Locate and delete the following bold files(if there). C:\WINDOWS\System32\hp574F.tmp Reboot into normal mode and turn system restore back on. Regards Howard :wave: :wave:
Hello and welcome to Techspot. Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there). O2 - BHO: Nothing - {f79fd28e-36ee-4989-aa61-9dd8e30a82fa} - C:\WINDOWS\System32\hp574F.tmp Fix all 016-DPF entries. O20 - Winlogon Notify: igfxcui - igfxsrvc.dll (file missing) Click on the fix checked button. Close HJT. Locate and delete the following bold files(if there). C:\WINDOWS\System32\hp574F.tmp Reboot into normal mode and turn system restore back on. Regards Howard :wave: :wave:
