MyTechSupport.ca :: Your Computer Technical Resource Headquarters! MyTechSupport.ca :: Your Computer Technical Resource Headquarters!
HOME FORUMS RESOURCES & TOOLS ARTICLES ONLINE STORE ABOUT US
Computer Support Forums arrow Internet & Network Support arrow Security & Viruses arrow Topic: please help, IE changes to about:blank
June 19, 2019, 03:25:55 AM
 

Home Forum Rules Help Search Mobile Version Login Register

Welcome, Guest. Please login or register.
Did you miss your activation email?
June 19, 2019, 03:25:55 AM

Login with username, password and session length
 
News
Help us help you! Help us help you by helping out! The more people know about us, the more help will be available. Click here to find out how...
  0 Members and 1 Guest are viewing this topic.
Pages: [1] Go Down Print
Author Topic: please help, IE changes to about:blank  (Read 1700 times)
Zankin
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 2


Bookmark and Share

View Profile
« on: September 04, 2004, 04:29:26 PM »

i've been tyring to fix this problem all last night to no success, i ran ad aware multiple times deleted what came up and ran spybot search and destroy. My page keeps changing though. Also there's always a popup with the heading "Only the best". Now i just ran hijack this and here is what came up.

Logfile of HijackThis v1.98.2
Scan saved at 10:18:58 AM, on 9/4/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\JAVAFT.EXE
C:\WINDOWS\WINTU.EXE
C:\WINDOWS\SYSTEM\APPAE32.EXE
C:\WINDOWS\SYSTEM\APIRA32.EXE
C:\WINDOWS\SYSTEM\CROH.EXE
C:\WINDOWS\SYSTEM\ATLLH32.EXE
C:\WINDOWS\SYSTEM\ATLYL32.EXE
C:\WINDOWS\SYSTEM\MFCOH.EXE
C:\WINDOWS\SYSTEM\JAVAYG32.EXE
C:\WINDOWS\CRJS32.EXE
C:\WINDOWS\MSIG.EXE
C:\WINDOWS\SYSTEM\JAVALW32.EXE
C:\WINDOWS\SYSTEM\NETRZ.EXE
C:\WINDOWS\SYSTEM\SYSQR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE
C:\PROGRAM FILES\WINAMP\WINAMPA.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\AIM95\AIM.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\ATLYL32.EXE
C:\WINDOWS\SYSTEM\MFCOH.EXE
C:\WINDOWS\MSKJ32.EXE
C:\WINDOWS\MSKJ32.EXE
C:\WINDOWS\SYSTEM\ATLYL32.EXE
C:\WINDOWS\SYSTEM\MFCOH.EXE
C:\WINDOWS\SYSTEM\MSNY32.EXE
C:\WINDOWS\SYSTEM\MSNY32.EXE
C:\WINDOWS\SYSTEM\NETRZ.EXE
C:\WINDOWS\SYSTEM\JAVALW32.EXE
C:\WINDOWS\SYSTEM\APPYA32.EXE
C:\WINDOWS\SYSTEM\NETRZ.EXE
C:\WINDOWS\SYSTEM\APPYA32.EXE
C:\WINDOWS\SYSTEM\APPYA32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\SYSQR.EXE
C:\WINDOWS\SYSTEM\SYSQR.EXE
C:\WINDOWS\SYSTEM\ADDFJ.EXE
C:\WINDOWS\SYSTEM\ADDFJ.EXE
C:\WINDOWS\SYSTEM\JAVALW32.EXE
C:\WINDOWS\SYSTEM\NETRZ.EXE
C:\WINDOWS\SYSTEM\ATLOT32.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\CROH.EXE
C:\WINDOWS\SYSTEM\SDKUK.EXE
C:\WINDOWS\SYSTEM\SDKUK.EXE
C:\PROGRAM FILES\TROJANHUNTER 3.9\THGUARD.EXE
C:\WINDOWS\SYSTEM\MFCOH.EXE
C:\WINDOWS\SYSTEM\MFCOH.EXE
C:\WINDOWS\SYSTEM\NTXR.EXE
C:\WINDOWS\SYSTEM\NTXR.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\MY DOCUMENTS\HJTHIS\HIJACKTHIS19802.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\vpdpo.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\vpdpo.dll/sp.html#29126
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\vpdpo.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\vpdpo.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\vpdpo.dll/sp.html#29126
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\vpdpo.dll/sp.html#29126
R3 - Default URLSearchHook is missing
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Class - {C8BFB1F8-6B02-5880-8993-6C955AAC22D9} - C:\WINDOWS\APPWU32.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [THGuard] C:\Program Files\TrojanHunter 3.9\THGuard.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKLM\..\RunServices: [ATISmart] C:\WINDOWS\SYSTEM\ati2s9ag.exe
O4 - HKLM\..\RunServices: [APPAE32.EXE] C:\WINDOWS\SYSTEM\APPAE32.EXE
O4 - HKLM\..\RunServices: [JAVAYG32.EXE] C:\WINDOWS\SYSTEM\JAVAYG32.EXE
O4 - HKLM\..\RunServices: [WINTU.EXE] C:\WINDOWS\WINTU.EXE
O4 - HKLM\..\RunServices: [JAVAFT.EXE] C:\WINDOWS\JAVAFT.EXE
O4 - HKLM\..\RunServices: [CROH.EXE] C:\WINDOWS\SYSTEM\CROH.EXE
O4 - HKLM\..\RunServices: [APIRA32.EXE] C:\WINDOWS\SYSTEM\APIRA32.EXE
O4 - HKLM\..\RunServices: [ATLLH32.EXE] C:\WINDOWS\SYSTEM\ATLLH32.EXE
O4 - HKLM\..\RunServices: [MSIG.EXE] C:\WINDOWS\MSIG.EXE
O4 - HKLM\..\RunServices: [NETRZ.EXE] C:\WINDOWS\SYSTEM\NETRZ.EXE
O4 - HKLM\..\RunServices: [JAVALW32.EXE] C:\WINDOWS\SYSTEM\JAVALW32.EXE
O4 - HKLM\..\RunServices: [MFCOH.EXE] C:\WINDOWS\SYSTEM\MFCOH.EXE
O4 - HKLM\..\RunServices: [ATLYL32.EXE] C:\WINDOWS\SYSTEM\ATLYL32.EXE
O4 - HKLM\..\RunServices: [SYSQR.EXE] C:\WINDOWS\SYSTEM\SYSQR.EXE
O4 - HKLM\..\RunServices: [CRJS32.EXE] C:\WINDOWS\CRJS32.EXE
O4 - HKLM\..\RunServices: [MSKJ32.EXE] C:\WINDOWS\MSKJ32.EXE
O4 - HKLM\..\RunServices: [MSNY32.EXE] C:\WINDOWS\SYSTEM\MSNY32.EXE
O4 - HKLM\..\RunServices: [APPYA32.EXE] C:\WINDOWS\SYSTEM\APPYA32.EXE
O4 - HKLM\..\RunServices: [ADDFJ.EXE] C:\WINDOWS\SYSTEM\ADDFJ.EXE
O4 - HKLM\..\RunServices: [ATLOT32.EXE] C:\WINDOWS\SYSTEM\ATLOT32.EXE
O4 - HKLM\..\RunServices: [SDKUK.EXE] C:\WINDOWS\SYSTEM\SDKUK.EXE
O4 - HKLM\..\RunServices: [NTXR.EXE] C:\WINDOWS\SYSTEM\NTXR.EXE
O4 - HKCU\..\Run: [AIM] C:\PROGRAM FILES\AIM95\aim.exe -cnetwait.odl
O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmtrans.html
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM95\AIM.EXE
O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.scoobidoo.com
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=9eafaeb2a8e2a9518112bc6e0cedee1552dd4ecb1dd748bcf1cf4d42ced1394245b14c137e17952f3a6abadc3d36297b2b37:b70ac5aa8ec48e2e58a29296baabe1d6
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab


please help me someone.


Logged

 
benditup
Hero Member
*****

Karma: +2/-0
Offline Offline

Gender: Male
Posts: 2105


Bookmark and Share

View Profile
« Reply #1 on: September 04, 2004, 05:15:21 PM »

You may want to print this out, I'm going to ask you to start in safe mode

Create a New folder on your desktop, call it Aboutbuster
Download to desktop About:Buster
We'll run this later

Set Windows to Show Hidden Files and Folders

RESTART your computer into About:Buster
by RubbeR Ducky
Unzip it to that new folder We'll run this later

Set Windows to Show Hidden Files and Folders

RESTART your computer into Safe Mode

Find and delete these files if they exist
C:\WINDOWS\SYSTEM\APPAE32.EXE <--this file
C:\WINDOWS\SYSTEM\JAVAYG32.EXE <--file
C:\WINDOWS\WINTU.EXE <<
C:\WINDOWS\JAVAFT.EXE <<
C:\WINDOWS\SYSTEM\CROH.EXE <<
C:\WINDOWS\SYSTEM\APIRA32.EXE <<
C:\WINDOWS\SYSTEM\ATLLH32.EXE <<
C:\WINDOWS\MSIG.EXE <<
C:\WINDOWS\SYSTEM\NETRZ.EXE <<
C:\WINDOWS\SYSTEM\JAVALW32.EXE <<
C:\WINDOWS\SYSTEM\MFCOH.EXE <<
C:\WINDOWS\SYSTEM\ATLYL32.EXE <<
C:\WINDOWS\SYSTEM\SYSQR.EXE <<
C:\WINDOWS\CRJS32.EXE <<
C:\WINDOWS\MSKJ32.EXE <<
C:\WINDOWS\SYSTEM\MSNY32.EXE <<
C:\WINDOWS\SYSTEM\APPYA32.EXE <<
C:\WINDOWS\SYSTEM\ADDFJ.EXE <<
C:\WINDOWS\SYSTEM\ATLOT32.EXE <<
C:\WINDOWS\SYSTEM\SDKUK.EXE <<
C:\WINDOWS\SYSTEM\NTXR.EXE <<

Stay in safe mode
Do another Scan with Hijackthis and put a check next to these entries  and then FIX CHECKED when ALL other windows are closed

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\vpdpo.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\vpdpo.dll/sp.html#29126
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\vpdpo.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\vpdpo.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\vpdpo.dll/sp.html#29126
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\vpdpo.dll/sp.html#29126
R3 - Default URLSearchHook is missing

O2 - BHO: Class - {C8BFB1F8-6B02-5880-8993-6C955AAC22D9} - C:\WINDOWS\APPWU32.DLL

O4 - HKLM\..\RunServices: [APPAE32.EXE] C:\WINDOWS\SYSTEM\APPAE32.EXE
O4 - HKLM\..\RunServices: [JAVAYG32.EXE] C:\WINDOWS\SYSTEM\JAVAYG32.EXE
O4 - HKLM\..\RunServices: [WINTU.EXE] C:\WINDOWS\WINTU.EXE
O4 - HKLM\..\RunServices: [JAVAFT.EXE] C:\WINDOWS\JAVAFT.EXE
O4 - HKLM\..\RunServices: [CROH.EXE] C:\WINDOWS\SYSTEM\CROH.EXE
O4 - HKLM\..\RunServices: [APIRA32.EXE] C:\WINDOWS\SYSTEM\APIRA32.EXE
O4 - HKLM\..\RunServices: [ATLLH32.EXE] C:\WINDOWS\SYSTEM\ATLLH32.EXE
O4 - HKLM\..\RunServices: [MSIG.EXE] C:\WINDOWS\MSIG.EXE
O4 - HKLM\..\RunServices: [NETRZ.EXE] C:\WINDOWS\SYSTEM\NETRZ.EXE
O4 - HKLM\..\RunServices: [JAVALW32.EXE] C:\WINDOWS\SYSTEM\JAVALW32.EXE
O4 - HKLM\..\RunServices: [MFCOH.EXE] C:\WINDOWS\SYSTEM\MFCOH.EXE
O4 - HKLM\..\RunServices: [ATLYL32.EXE] C:\WINDOWS\SYSTEM\ATLYL32.EXE
O4 - HKLM\..\RunServices: [SYSQR.EXE] C:\WINDOWS\SYSTEM\SYSQR.EXE
O4 - HKLM\..\RunServices: [CRJS32.EXE] C:\WINDOWS\CRJS32.EXE
O4 - HKLM\..\RunServices: [MSKJ32.EXE] C:\WINDOWS\MSKJ32.EXE
O4 - HKLM\..\RunServices: [MSNY32.EXE] C:\WINDOWS\SYSTEM\MSNY32.EXE
O4 - HKLM\..\RunServices: [APPYA32.EXE] C:\WINDOWS\SYSTEM\APPYA32.EXE
O4 - HKLM\..\RunServices: [ADDFJ.EXE] C:\WINDOWS\SYSTEM\ADDFJ.EXE
O4 - HKLM\..\RunServices: [ATLOT32.EXE] C:\WINDOWS\SYSTEM\ATLOT32.EXE
O4 - HKLM\..\RunServices: [SDKUK.EXE] C:\WINDOWS\SYSTEM\SDKUK.EXE
O4 - HKLM\..\RunServices: [NTXR.EXE] C:\WINDOWS\SYSTEM\NTXR.EXE

O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.scoobidoo.com
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=9eafaeb2a8e2a9518112bc6e0cedee1552dd4ecb1dd748bcf1cf4d42ced1394245b14c137e17952f3a6abadc3d36297b2b37:b70ac5aa8ec48e2e58a29296baabe1d6

After you have fix Checked and closed hijackthis
Navigate to About:buster
Start about:buster and hit ok. A new screen should popup.  Hit start and then Ok. The program should start scanning. Then hit exit and RESTART your computer into Normal Mode
Run about:buster one more time when you have restarted

Some files may have been deleted by the Hijacker
You can look for them
Control.exe in your C:\WINDOWS folder
If it's not there I've uploaded a file called control_98.zip
Save it to your desktop and UNZIP it to your C:\WINDOWS folder

Your host file(with no extension).  was probably deleted
Download the The Hoster
Unzip it to a folder, Open it, Press "Restore Original Hosts" and press "OK". Exit Program. Note: if you were using a custom Hosts file you will need to replace any of those entries yourself

If you still have Spybot S&D 1.3
check and see if the sdhelper.dll file is missing,
Normally Spybot is installed in this directory
C:\Program Files\Spybot - Search & Destroy
If missing, download sdhelper13.zip
Save the Zip file to your desktop and Unzip it to your C:\Program Files\Spybot - Search & Destroy folder

Post back with a Fresh hijackthis log
Could you also attach the About:buster logs

I see your not running any Anti-Virus software
If you need a free solution, Download AVG ANTI-Virus for free
Supply them with a Legitimate Email address---Not a webbased such as hotmail
After installation----Check for updates----Do a full system scan
Ensure you get the free version and not the trial version, unless your considering purchasing the product
Download Attachment: control_98.zip 1.86 KB
Right click and select Save Target As... then rename the file as shown here and save.
Logged

 
Zankin
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 2


Bookmark and Share

View Profile
« Reply #2 on: September 04, 2004, 08:50:20 PM »

Logfile of HijackThis v1.98.2
Scan saved at 2:48:12 PM, on 9/4/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE
C:\PROGRAM FILES\WINAMP\WINAMPA.EXE
C:\PROGRAM FILES\TROJANHUNTER 3.9\THGUARD.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\AIM95\AIM.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS19802.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.azstarnet.com/
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [THGuard] "C:\PROGRAM FILES\TROJANHUNTER 3.9\THGUARD.EXE"
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKLM\..\RunServices: [ATISmart] C:\WINDOWS\SYSTEM\ati2s9ag.exe
O4 - HKCU\..\Run: [AIM] C:\PROGRAM FILES\AIM95\aim.exe -cnetwait.odl
O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmtrans.html
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM95\AIM.EXE
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab

Logged

 
benditup
Hero Member
*****

Karma: +2/-0
Offline Offline

Gender: Male
Posts: 2105


Bookmark and Share

View Profile
« Reply #3 on: September 04, 2004, 11:40:11 PM »

I still recommend that you install an Anti-Virus
Trojan Hunter is a good program, but it's not the same as Anti-Virus
software

As mentioned before AVG is a free AV that is yours to keep
Make sure you keep it updated

You should install these 2 apps., they add extra security while
silently protecting you without running in the background
 
SpywareBlaster by JavaCool---will block bad ActiveX and malevolent cookies
Install---Check for Updates---Enable all protection
http://www.javacoolsoftware.com/spywareblaster.html

IE-Spyad---IE-SPYAD puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all.
Here is a tutorial and download link
http://www.bleepingcomputer.com/forums/index.php?showtutorial=53

With both---Check for updates every couple of weeks

Your log looks clean now, stay safe
Logged

 
Pages: [1] Go Up Print 
 
Jump to:  

Powered by MySQL Powered by PHP

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines

Valid XHTML 1.0! Valid CSS!

Disclaimer
This site is NOT responsible for any damage that the information on this site may cause to your system. Everything you try, whether inspired by the response given from this site or not, is entirely at your own risk. All product names and company names used herein are for identification purpose only and may be trademarks or registered trademarks of their respective owners. We are in no way affiliated or representing any of the companies on this site unless specified.
Back to Top
Stop Spam Harvesters, Join Project Honey Pot Fight Back Against Spammers! Get Firefox! Get Thunderbird! View Sylvain Amyots profile on LinkedIn
Back to Top
Google visited last this page September 08, 2017, 03:32:20 AM