***problem With Internet Properties***

[Flip side]

Guys,

I recently have encountered the wonderful experience of getting infected by a series of mother-flip-floppin' viruses... first, my desktop went all weird and it displayed something like "your computed is infected with spyware - get it sorted blah blah blah." So anyway, I sorted that out by looking through some other forums for help, but now i've got another problem... whenever I try to set my internet startup page to 'default' in 'Internet Properties,' it sets it to "??????[]." I mean what the... :s

I used to have MSN as my start page, but everytime I enter that in manually, it gets changed back to the friggin' "??????[]" thing! Consequently, a blank page appears when I open Internet Explorer.

Come someborry please help?

And also, if anyone knows where I can find the mother funkerz who put this stuff on my computer, i'd very much like to know... MAN would I like to give them a knuckle sandwich, and I don't mean a flaymin' sandwich with knuckles in it!

Thanks in advance!

The flipSTA.

 

[patio]

What sort of protection programs do you have installed and what steps have you taken so far to remove this baddie ? ?

patio.

 

[IronDuke]

Firstly do an online scan at Trend.

Then download and run Ewido.

 

[Flip side]

***

[LEFT]Alright Guys?

Patio - Protection Programs? Errmmm... pffff... I dunno :s

IronDuke - Thanks for those links! They helped bring my browser back to normal BUT now i've got another bloody problem... it's kinda strange! Basically, when I open 'Internet Properties,' the tabs along the top and the buttons have an interface that reminds me of windows 98, whereas the dialogue box as a whole is in XP style... what's goin' on there then? (Look at the screenshot i've attached to get a better idea )

Further help would be greatly appreciated!

Cheers!


P.S The following is the log which was generated when I ran HijackThis:

Logfile of HijackThis v1.99.1
Scan saved at 22:44:52, on 30/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\Miscellaneous\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O17 - HKLM\System\CCS\Services\Tcpip\..\{8C60EB96-B90B-4012-8901-8A97C6390197}: NameServer = 194.74.65.68 194.72.9.34
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: StuffIt Task Manager - Allume Systems, Inc. - C:\PROGRA~1\Allume\StuffIt\MXTask.exe[/LEFT]

 

[IronDuke]

That's how mine looks.

Read: How to post your Hijackthis log-file as an ATTACHMENT.

 

[DelJo63]

Spybot Search & Destroy has a means to protect the homepage setting.

Also suggest you get a copy of Spywareblaster to control ActiveX usage.

 

[patio]

"Patio - Protection Programs? Errmmm... pffff... I dunno :s"

I'll leave this one alone...

patio.

 

[Mictlantecuhtli]

How about stop using IE? Use Opera, Mozilla or Firefox instead.