Wilders Security Forums  

Go Back   Wilders Security Forums > Browser Hijacks and Spyware Problems > adware, spyware & hijack cleaning
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old November 22nd, 2003, 11:31 AM
Gilou27 Gilou27 is offline
Infrequent Poster
 
Join Date: Nov 2003
Posts: 2
Default Highjacked Browser !!

my browser (IE 6) has been highjacked :
my home page has been replaced by a connection to a "self called search engine" and all home page settings facilities have been desabled.

Is there anyway to restore original settings other than remove and reinstall IE 6 ??

How can I prevent this to happen again ?

  #2  
Old November 22nd, 2003, 11:34 AM
Unzy's Avatar
Unzy Unzy is offline
Spyware Expert
 
Join Date: Nov 2003
Location: Belgium
Posts: 1,098
Default Re:Highjacked Browser !!

Hi Gilou,

Can you please download HijackThis ?

Unzip -> doubleclick hijackthis.exe -> scan -> save log as gilou.txt and copypaste the complete contnets of it here please. We'll be glad to have a look and help you out.

Thanks!

Here are some good tips already how to be better protected :

Click me

Cheers,
  #3  
Old November 22nd, 2003, 11:51 AM
Gilou27 Gilou27 is offline
Infrequent Poster
 
Join Date: Nov 2003
Posts: 2
Default Re:Highjacked Browser !!

Here is the requested file
Attached Files
File Type: txt Gilou.txt (4.2 KB, 0 views)
  #4  
Old November 22nd, 2003, 12:10 PM
Unzy's Avatar
Unzy Unzy is offline
Spyware Expert
 
Join Date: Nov 2003
Location: Belgium
Posts: 1,098
Default Re:Highjacked Browser !!

Thanks Gilou,

Have only HijackThis running while staying offline and fix the following :

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.couldnotfind.com/search_page.html?&account_id=129192
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.couldnotfind.com/search_page.html?&account_id=129192
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.slotch.com/?&account_id=129192
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.couldnotfind.com/search_page.html?&account_id=129192

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present

Reboot after doing so and verify if those entries are really gone by comparing them with a new HijackThis scan.

Keep us posted!

Cheers,
  #5  
Old November 22nd, 2003, 12:54 PM
Gilou 27
 
Posts: n/a
Default Re:Highjacked Browser !!

I did as asked and everithing works fine now§
Many thanks for your help and congratulations for your efficiency. I'll recommand this forum

Cheers
Gilou
  #6  
Old November 22nd, 2003, 01:30 PM
Unzy's Avatar
Unzy Unzy is offline
Spyware Expert
 
Join Date: Nov 2003
Location: Belgium
Posts: 1,098
Default Re:Highjacked Browser !!

Glad we were able to help, Gilou

Good job cleaning up

Take care!

Cheers,
 

Wilders Security Forums > Browser Hijacks and Spyware Problems > adware, spyware & hijack cleaning « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 11:41 PM.


Powered by vBulletin® Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums