WE'RE SURE THAT YOU'LL LOVE US!
Hey there! 
Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 93083 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.
Try What the Tech -- It's free!
Browser hijacked
Started by
skier
, Feb 25 2007 02:53 PM
4 replies to this topic
#1
skier
-
- Authentic Member
-
- 10 posts
New Member
Posted 25 February 2007 - 02:53 PM
Register to Remove
#2
dan12
-
- Authentic Member
-
- 998 posts
Advanced Member
- Interests:Horse riding, computer's
Posted 25 February 2007 - 03:37 PM
Hi skierand welcome to Tom Coyote forums
I am currently looking over your log. As I am an Undergraduate, everything that I post to you must be checked by an Admin or Moderator. Thus, there may be a tiny bit of a delay between posts, but it shouldn't be too long. I will post back shortly with a potential fix.
Thanks for your patience!
dan
I am currently looking over your log. As I am an Undergraduate, everything that I post to you must be checked by an Admin or Moderator. Thus, there may be a tiny bit of a delay between posts, but it shouldn't be too long. I will post back shortly with a potential fix.
Thanks for your patience!
dan
#3
dan12
-
- Authentic Member
-
- 998 posts
Advanced Member
- Interests:Horse riding, computer's
Posted 25 February 2007 - 04:33 PM
Hi skier
Highjackthis is running from within a zip folder here C:\DOCUME~1\Greg\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
On your desktop screen right click, select new folder, and name it HJT now locate zip folder from < Location > and right click the zip folder, extract it into the new folder on the desktop you named HJT
The reason I ask for this, is that HJT needs its own folder to make backups, should we need them.
Zip folders are not the best place to keep them.
HijackThis in a Zip location is In no danger of deletion but is incapable of making backups.
Important! please do this before starting the fix.
__________________________
Please download SmitfraudFix (by S!Ri)
Double-click SmitfraudFix.exe.
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
**If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (usually C:), and launch from there.
Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlog...processutil.htm
Please post smitfraud report
thanks dan
Highjackthis is running from within a zip folder here C:\DOCUME~1\Greg\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
On your desktop screen right click, select new folder, and name it HJT now locate zip folder from < Location > and right click the zip folder, extract it into the new folder on the desktop you named HJT
The reason I ask for this, is that HJT needs its own folder to make backups, should we need them.
Zip folders are not the best place to keep them.
HijackThis in a Zip location is In no danger of deletion but is incapable of making backups.
Important! please do this before starting the fix.
__________________________
Please download SmitfraudFix (by S!Ri)
Double-click SmitfraudFix.exe.
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
**If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (usually C:), and launch from there.
Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlog...processutil.htm
Please post smitfraud report
thanks dan
#4
dan12
-
- Authentic Member
-
- 998 posts
Advanced Member
- Interests:Horse riding, computer's
Posted 01 March 2007 - 09:43 AM
Hi, are you still needing help?
dan
#5
little eagle
-
- Visiting Fellow
-
- 8,968 posts
spyware hawk
- Interests:spyware
Posted 24 March 2007 - 07:18 PM
Due to a lack of a responce this topic is now closed.
If you wish it reopened, please send us an email (Click for address) with a link to your thread.
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Visit the CoyoteStore http://TomCoyote.org/coyotestore.php
To help keep your PC clean follow the recommendations here by shelf life.
If you wish it reopened, please send us an email (Click for address) with a link to your thread.
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Visit the CoyoteStore http://TomCoyote.org/coyotestore.php
To help keep your PC clean follow the recommendations here by shelf life.
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users
