Home > Hijackthis Log > Hijackthis Log - Nasty CWS About:blank Hijacker

Hijackthis Log - Nasty CWS About:blank Hijacker

His browser keeps getting redirected to, errr, unpleasant sites of various kinds and he's hit with continuous popups. I'll wait to see a new Hijack log before posting instructions. Not sure if these were the same as some quarantined in first.4. Spybot S&D . http://agileweb.org/hijackthis-log/need-help-for-hijackthis-log.php

Homepage on browser set to "About:blank" An error on boot saying "unable to find bridge.dll" Frequent browser redirects to "coolsearch.biz" References to "Cool Web Search" in the Ad-Aware output References to If you know of a good tool to download or a trustable anti-hijack forum, please let me know. Sorry if I sound a little paranoid: this is getting to me. :mad: Detail: Here are some of the things I've seen on the infected laptop. Click: http://www.majorgeeks.com/AboutBuster_d4289.html to download AboutBuster created by Rubber Ducky.

Just click on the cwshredder.exe then click "Fix" (Not "Scan only") and let it do its thing. If they have been changed, reset your active x security settings in IE as recommended here: http://www.jfitz.com/tips/ie_security_config.html Reboot and post another HijackThis log please. If CWShredder can't fix the problem, download hijackthis, and post the log in the forums at Spywareinfo.com (http://www.spywareinfo.com). Scanning . . . . . . . . . . . . . . . . .

Back to top Back to Resolved or inactive Malware Removal 0 user(s) are reading this topic 0 members, 0 guests, 0 anonymous users Reply to quoted postsClear SpywareInfo Forum → Subsequent Ad-Aware scans show all the same hijackers in place. Do not run any of them until instructed to do so: Download KillBox here: http://www.downloads.subratam.org/KillBox.zip Save it to your desktop. I have not attempted to downlaod them yet.

Just paste your complete logfile into the textbox at the bottom of this page. Advertisement Tech Support Guy Home Forums > Security & Malware Removal > Virus & Other Malware Removal > Home Forums Forums Quick Links Search Forums Recent Posts Members Members Quick Links Make sure your Windows Explorer Folder Settings are as follows: (To access them, go "Tools" > "Folder Options" > "View") a. "Show hidden files and folders" should be checked. Click Yes.

Reboot 7. Cookiegal, Oct 3, 2005 #9 Cheeseball81 Moderator Joined: Mar 3, 2004 Messages: 84,310 Cookiegal said: Sorry, wrong thread. Select the View Tab. Export the same "Windows" Key again, this time as a "hive" file using the name "windows.hiv" (without the quotes). 4.

My computer has been infected for awhile, so yes it could have been from mid-June. c. "Hide protected operating system files" should be unchecked. 13. Cheeseball81, Sep 30, 2005 #6 jp.in.vt Thread Starter Joined: Sep 30, 2005 Messages: 8 ok I did all three things just now, Ad-Aware 1.06 and delete, the SpyBot and delete all Download, install, and update CWShredder and Ad-aware.

I used the link you provided and removed MSJava from my computer. news Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy Log in With the help of this automatic analyzer you are able to get some additional support. Advertisements do not imply our endorsement of that product or service.

Unzip AboutBuster to the Desktop then click the "Update Button" then click "Check for Update" and download the updates and then click "Exit" because I don't want you to run it HJT creates backup files which may be needed later, and by leaving HJT in the temporary folder, HJT and its backup files may accidentally be deleted by a clean-up program or Please see here.http://www.spywarewa...nti-spyware.htmO4 - HKCU\..\Run: [Spyware Begone] C:\FREESCAN\FREESCAN.EXE –FastScan PowerReg Scheduler is a registration reminder used by many companies. have a peek at these guys This may take a couple of attempts, so stay patient. 1.

ForgottenLore05-11-2004, 11:11 AMI pulled up geeks.com. I wanted a scan with Ad-Aware and Spybot to be done first before suggesting any fixing to the log. Double-click the AppInit_DLLs name in the right pane.

Run Hijack This and put a check by these entries: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\rcqrd.dll/sp.html#93256 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\rcqrd.dll/sp.html#93256 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1

HijackThis . Straight Dope Message Board > Main > General Questions > Need recommendation on spyware/hijack removal PDA View Full Version : Need recommendation on spyware/hijack removal ForgottenLore05-11-2004, 09:45 AMOne of our sales Use hijackthis and delete entries that refer to bridge.dll. Now, restart back into Windows normally and do the following: Go here and do an online virus scan: http://housecall.trendmicro.com/ Be sure and put a check in the box by "Auto Clean"

TrojanHunter . RunDll32 advpack.dll,LaunchINFSection java.inf,UnInstall 0 Kudos Posted by lango999 ā€ˇ09-15-2004 10:21 PM N/A Member Since: ā€ˇ10-25-2003 Posts: 8 Message 11 of 13 (136 Views) Re: Hijack this, log help Options Mark as Panda Virusscan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . check my blog thanks, JP Here's my HJT log: Logfile of HijackThis v1.99.1 Scan saved at 1:17:09 PM, on 9/30/05 Platform: Windows 98 Gold (Win9x 4.10.1998) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes:

Please start a New Thread if you're having a similar issue.View our Welcome Guide to learn how to use this site. Join our site today to ask your question. Below is the latest Hijack This log.