Highjacked Browser !!

Discussion in 'adware, spyware & hijack cleaning' started by Gilou27, Nov 22, 2003.

Thread Status:
Not open for further replies.
  1. Gilou27

    Gilou27 Registered Member

    Joined:
    Nov 22, 2003
    Posts:
    2
    my browser (IE 6) has been highjacked :
    my home page has been replaced by a connection to a "self called search engine" and all home page settings facilities have been desabled.

    Is there anyway to restore original settings other than remove and reinstall IE 6 ??

    How can I prevent this to happen again ?
     
  2. Unzy

    Unzy Registered Member

    Joined:
    Nov 2, 2003
    Posts:
    1,098
    Location:
    Belgium
    Hi Gilou,

    Can you please download HijackThis ?

    Unzip -> doubleclick hijackthis.exe -> scan -> save log as gilou.txt and copypaste the complete contnets of it here please. We'll be glad to have a look and help you out.

    Thanks!

    Here are some good tips already how to be better protected :

    Click me

    Cheers,
     
  3. Gilou27

    Gilou27 Registered Member

    Joined:
    Nov 22, 2003
    Posts:
    2
    Here is the requested file
     

    Attached Files:

  4. Unzy

    Unzy Registered Member

    Joined:
    Nov 2, 2003
    Posts:
    1,098
    Location:
    Belgium
    Thanks Gilou,

    Have only HijackThis running while staying offline and fix the following :

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.couldnotfind.com/search_page.html?&account_id=129192
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.couldnotfind.com/search_page.html?&account_id=129192
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.slotch.com/?&account_id=129192
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.couldnotfind.com/search_page.html?&account_id=129192

    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present

    Reboot after doing so and verify if those entries are really gone by comparing them with a new HijackThis scan.

    Keep us posted!

    Cheers,
     
  5. Gilou 27

    Gilou 27 Guest

    I did as asked and everithing works fine now§
    Many thanks for your help and congratulations for your efficiency. I'll recommand this forum :D

    Cheers
    Gilou
     
  6. Unzy

    Unzy Registered Member

    Joined:
    Nov 2, 2003
    Posts:
    1,098
    Location:
    Belgium
    Glad we were able to help, Gilou :)

    Good job cleaning up

    Take care!

    Cheers,
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.