Highjacked Browser !!

Discussion in 'adware, spyware & hijack cleaning' started by Gilou27, Nov 22, 2003.

Thread Status:
Not open for further replies.
  1. Gilou27

    Gilou27 Registered Member

    Joined:
    Nov 22, 2003
    Posts:
    2
    my browser (IE 6) has been highjacked :
    my home page has been replaced by a connection to a "self called search engine" and all home page settings facilities have been desabled.

    Is there anyway to restore original settings other than remove and reinstall IE 6 ??

    How can I prevent this to happen again ?
     
  2. Unzy

    Unzy Registered Member

    Joined:
    Nov 2, 2003
    Posts:
    1,098
    Location:
    Belgium
    Hi Gilou,

    Can you please download HijackThis ?

    Unzip -> doubleclick hijackthis.exe -> scan -> save log as gilou.txt and copypaste the complete contnets of it here please. We'll be glad to have a look and help you out.

    Thanks!

    Here are some good tips already how to be better protected :

    Click me

    Cheers,
     
  3. Gilou27

    Gilou27 Registered Member

    Joined:
    Nov 22, 2003
    Posts:
    2
    Here is the requested file
     

    Attached Files:

  4. Unzy

    Unzy Registered Member

    Joined:
    Nov 2, 2003
    Posts:
    1,098
    Location:
    Belgium
    Thanks Gilou,

    Have only HijackThis running while staying offline and fix the following :

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.couldnotfind.com/search_page.html?&account_id=129192
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.couldnotfind.com/search_page.html?&account_id=129192
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.slotch.com/?&account_id=129192
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.couldnotfind.com/search_page.html?&account_id=129192

    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present

    Reboot after doing so and verify if those entries are really gone by comparing them with a new HijackThis scan.

    Keep us posted!

    Cheers,
     
  5. Gilou 27

    Gilou 27 Guest

    I did as asked and everithing works fine now§
    Many thanks for your help and congratulations for your efficiency. I'll recommand this forum :D

    Cheers
    Gilou
     
  6. Unzy

    Unzy Registered Member

    Joined:
    Nov 2, 2003
    Posts:
    1,098
    Location:
    Belgium
    Glad we were able to help, Gilou :)

    Good job cleaning up

    Take care!

    Cheers,
     
Thread Status:
Not open for further replies.