Content Top
DAL Computer Help » Internet Security Help » Spyware, Adware, Viruses and HijackThis Logs » Adware problem

Recommended Fix

Click here to fix Windows Errors and Optimize Windows Performance

Need Computer Help?
Register Now for FREE

Adware problem

Reply
Thread Tools
Spyware, Adware, Viruses and HijackThis Logs
  #1 (permalink)  
Old 22-02-2005, 10:59 PM
Newbie
D-A-L Newbie
 
Join Date: May 2004
Posts: 8
Davidjosephjackson Is a beginner here at D-A-L
Adware problem About:blank with HJT log

Yesterday I found that I had some problems with adware - Homepage not setting to what I wish, internet cutting off - the usual.

So What I've done I have downloaded Lavasoft ad-aware se with all the newest updates and Ive deleted all known trojans miners the lot. However I still cannot set my homepage. everytime I load a new page in the address bar I get- about:blank

I've since downloaded the file from MSN - microsoft antiSpyware and have ran this several times. It identifies one file each time which I delete but it reapears

This is a hijacked browser and it says its location is internet explorer search page 1 which has baffled me

Can anyone help because I'm at the end of my teather.

Cheers

Last edited by Davidjosephjackson; 23-02-2005 at 10:19 AM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 22-02-2005, 11:59 PM
Newbie
D-A-L Newbie
 
Join Date: May 2004
Posts: 8
Davidjosephjackson Is a beginner here at D-A-L
Re: Adware problem

Hi here is my Hijackthis log file

Logfile of HijackThis v1.99.1
Scan saved at 2224, on 22/02/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\appwl32.exe
C:\WINDOWS\system32\addwh.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\ZipCentral\ZCentral.exe
C:\DOCUME~1\David\LOCALS~1\Temp\_ZCTmp.Dir\HijackT his.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ymftj.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ymftj.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\ymftj.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ymftj.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ymftj.dll/sp.html#28129
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\ymftj.dll/sp.html#28129
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5FED6D45-2D6E-9D60-4B64-A4543F387F99} - C:\WINDOWS\system32\javajy32.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [addwh.exe] C:\WINDOWS\system32\addwh.exe
O4 - HKLM\..\Run: [18.tmp] C:\DOCUME~1\David\LOCALS~1\Temp\18.tmp.exe 1 28129
O4 - HKLM\..\Run: [1A.tmp] C:\DOCUME~1\David\LOCALS~1\Temp\1A.tmp.exe 0 28129
O4 - HKLM\..\Run: [18.tmp.exe] C:\DOCUME~1\David\LOCALS~1\Temp\18.tmp.exe 1 28129
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\RunOnce: [appwl32.exe] C:\WINDOWS\appwl32.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O15 - Trusted Zone: *.awmdabest.com
O15 - Trusted Zone: *.frame.crazywinnings.com
O15 - Trusted Zone: *.awmdabest.com (HKLM)
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
O15 - Trusted IP range: 206.161.125.149
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/ms...downloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2CFD9C34-B7C5-415C-A8A9-13CD945DF152}: NameServer = 213.1.119.100 213.1.119.99
O23 - Service: Remote Procedure Call (RPC) Helper (%AF夶À¨) - Unknown owner - C:\WINDOWS\msqw.exe (file missing)
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 25-02-2005, 04:27 PM
Newbie
D-A-L Newbie
 
Join Date: May 2004
Posts: 8
Davidjosephjackson Is a beginner here at D-A-L
Re: Adware problem

Is anybody there???
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 28-02-2005, 10:02 PM
owen's Avatar
D-A-L Team Member (UK)
Loyal Contributor
 
Join Date: Jun 2004
Posts: 5,272
owen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furniture
Re: Adware problem

Sorry about the response time, if you still require help, could you post a fresh log. Cheers.
__________________
Owen,
My Website - I Security.org.uk

MALWARE: READ FIRST Procedures:
|_ SpyBot V1.4 _|_ Ad-Aware SE 1.06_|_ HijackThis Log __V1.99.1 _|


[*]Be patient and wait for a response, we'll do our best to help resolve your issue.
[*]When posting for help, start your own thread and stick to it. Don't start multiple threads or post in other peoples threads!

If we have helped you, please consider making a donation to help support the forum. All donations are greatly appreciated. You can also support the forum by placing a link to us on your personal website.

Useful Links:
Posting a Hijack This Log
Preposting and Prevention Info
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
[Active] adware generic 4 problem, POP up viruses on my computer! stalker93 Spyware, Adware, Viruses and HijackThis Logs 18 26-07-2009 02:28 AM
[Resolved]Pls help me with this hijackthis log (adware generic 4 problem) ganghao Spyware, Adware, Viruses and HijackThis Logs 11 19-05-2009 07:00 AM
Adware Problem(RESOLVED) Erich Spyware, Adware, Viruses and HijackThis Logs 16 01-06-2007 02:51 AM
Possible Adware Problem Jibsa Spyware, Adware, Viruses and HijackThis Logs 11 08-08-2006 10:41 PM
Adware problem kkevin Spyware, Adware, Viruses and HijackThis Logs 5 20-05-2005 11:40 AM


All times are GMT +1. The time now is 09:26 AM.

Bottom Corner