This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

homepage and screen backround hijacked

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Backround hijacked!!!
About blank is my homepage
Please help prompto!!

log as follows

Logfile of HijackThis v1.99.1
Scan saved at 10:08:09, on 22/08/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\LTMSG.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\POPROXY.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SYSMV.EXE
C:\WINDOWS\TEMP\C390.TMP
C:\WINDOWS\SYSTEM\INTELL32.EXE
C:\WINDOWS\SYSTEM\SYSKM.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\DESKTOP\HJT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\txzpa.dll/sp.html#62608
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\txzpa.dll/sp.html#62608
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\txzpa.dll/sp.html#62608
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\txzpa.dll/sp.html#62608
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\txzpa.dll/sp.html#62608
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\txzpa.dll/sp.html#62608
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\txzpa.dll/sp.html#62608
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {B9E4D006-7A30-6772-18E7-A2C7B4E14473} - C:\WINDOWS\JAVAGK.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [EnsoniqMixer] starter.exe
O4 - HKLM\..\Run: [LTWinModem1] ltmsg.exe 9
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [Norton eMail Protect] C:\PROGRAM FILES\NORTON ANTIVIRUS\POProxy.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [SYSKM.EXE] C:\WINDOWS\SYSTEM\SYSKM.EXE
O4 - HKLM\..\Run: [intell32.exe] C:\WINDOWS\SYSTEM\intell32.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [SYSMV.EXE] C:\WINDOWS\SYSTEM\SYSMV.EXE /s
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f007.mail.lycos.co.uk/app/uploader/FileUploader.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse…pdownloader.cab
bumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbumpbump -please help me!!!!!!!!
I understand that it is a new thread…I am asking if it is a log from the same computer. They have the same OS and many of the same installed programs.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI