Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Search Redirection,Random Tabs Opening and Host Process Crashes  (Read 5372 times)

0 Members and 1 Guest are viewing this topic.

CarbonX

    Topic Starter


    Starter

    • Experience: Beginner
    • OS: Unknown
    I've never posted to a site like this before but I'm at my wits end. Usually I can do some research on Google and find a fix when something happens to my computer but this one has me stumped. I have noticed though that i am not the only one that this is happening to though. A few days ago I was searching for a subtitle file on google and on this day I got a pop up from one of those dreaded fake malware removal programs which automatically installed itself. I immediately used Perfect Uninstaller and uninstalled it and did scans with all my protection programs. Malwarebytes cleaned a few things and messed something up where I had to restore my PC to an earlier date. So after I restored my PC everything seemed fine but I started getting my search results redirected and tabs started opening by themselves. And then suddenly a "host process" or something started crashing and the bottom part of Firefox and my windows explorer windows would grey out and look like it's in safe mode. I've tried the goored.exe fix ran Hijackthis.exe and have downloaded, but not installed, several other programs like combofix, rkunhooker, defogger and gmer, but to no avail I'm still at a loss. Please help!

    I do have logs from both hijackthis and goored I can paste.

    Allan

    • Moderator

    • Mastermind
    • Thanked: 1241
    • Experience: Guru
    • OS: Windows 10
    Re: Search Redirection,Random Tabs Opening and Host Process Crashes
    « Reply #1 on: October 31, 2010, 12:35:53 PM »
    Please follow the instructions in the following link and post your logs:
    http://www.computerhope.com/forum/index.php/topic,46313.0.html

    CarbonX

      Topic Starter


      Starter

      • Experience: Beginner
      • OS: Unknown
      Re: Search Redirection,Random Tabs Opening and Host Process Crashes
      « Reply #2 on: October 31, 2010, 12:48:45 PM »

      Logfile of Trend Micro HijackThis v2.0.4
      Scan saved at 1:32:26 AM, on 10/29/2010
      Platform: Windows Vista (WinNT 6.00.1904)
      MSIE: Internet Explorer v8.00 (8.00.6001.18904)
      Boot mode: Normal

      Running processes:
      C:\Windows\system32\Dwm.exe
      C:\Windows\Explorer.EXE
      C:\Windows\SOUNDMAN.EXE
      C:\Program Files\Alwil Software\Avast5\AvastUI.exe
      C:\Program Files\RocketDock\RocketDock.exe
      C:\Program Files\Logitech\SetPoint\SetPoint.exe
      C:\Windows\system32\taskeng.exe
      C:\Windows\System32\rundll32.exe
      C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Windows\system32\SearchFilterHost.exe
      C:\Users\CZX\Links\Downloads\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pegasus2.pearsoned.com/Pegasus/frmLogin.aspx?s=3
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      O1 - Hosts: ::1 localhost
      O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [AoboBlocker] C:\Program Files\AoboBlocker\AoboBlocker.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
      O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
      O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
      O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
      O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
      O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
      O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\Alwil Software\Avast5\afwServ.exe
      O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
      O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
      O23 - Service: lxba_device - - C:\Windows\system32\lxbacoms.exe
      O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe


      G o o r e d F i x b y j p s h o r t s t u f f ( 0 3 . 0 7 . 1 0 . 1 )

      L o g c r e a t e d a t 1 0 : 0 7 o n 2 9 / 1 0 / 2 0 1 0 ( C Z X )

      F i r e f o x v e r s i o n 3 . 0 . 1 5 ( e n - U S )



      = = = = = = = = = = G o o r e d S c a n = = = = = = = = = =



      ( n o n e )



      = = = = = = = = = = G o o r e d L o g = = = = = = = = = =



      C : \ P r o g r a m F i l e s \ M o z i l l a F i r e f o x \ e x t e n s i o n s \

      s t a g e d - x p i s [ 0 4 : 5 0 1 6 / 1 2 / 2 0 0 9 ]

      { 9 7 2 c e 4 c 6 - 7 e 0 8 - 4 4 7 4 - a 2 8 5 - 3 2 0 8 1 9 8 c e 6 f d } [ 2 0 : 5 2 1 5 / 1 2 / 2 0 0 9 ]

      { C A F E E F A C - 0 0 1 6 - 0 0 0 0 - 0 0 0 7 - A B C D E F F E D C B A } [ 0 4 : 5 0 1 6 / 1 2 / 2 0 0 9 ]

      { C A F E E F A C - 0 0 1 6 - 0 0 0 0 - 0 0 1 5 - A B C D E F F E D C B A } [ 1 6 : 1 8 1 6 / 1 2 / 2 0 0 9 ]

      { C A F E E F A C - 0 0 1 6 - 0 0 0 0 - 0 0 1 7 - A B C D E F F E D C B A } [ 0 4 : 2 4 1 7 / 1 2 / 2 0 0 9 ]



      C : \ U s e r s \ C Z X \ A p p l i c a t i o n D a t a \ M o z i l l a \ F i r e f o x \ P r o f i l e s \ j i 8 8 z o l h . d e f a u l t \ e x t e n s i o n s \

      ( n o n e )



      C : \ U s e r s \ C Z X \ A p p l i c a t i o n D a t a \ M o z i l l a \ F i r e f o x \ P r o f i l e s \ n e a k 0 n n i . d e f a u l t \ e x t e n s i o n s \

      a n a n d c s i n g h @ g m a i l . c o m [ 2 3 : 5 3 1 2 / 0 6 / 2 0 1 0 ]

      a r c t i c g l o w - f f 3 - 3 0 @ g l o w p l u g . b i t a s y l u m . n e t [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      b o s s k n b @ t t t - j l . b l o g s p o t . c o m [ 0 4 : 3 2 1 1 / 0 2 / 2 0 1 0 ]

      c h a c h a g u i d e b a r @ c h a c h a . c o m [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      d j z i g g y @ g m a i l . c o m [ 0 4 : 2 9 1 1 / 0 2 / 2 0 1 0 ]

      e x p a n d u r l @ v o i z l e . c o m [ 2 2 : 2 7 1 8 / 0 7 / 2 0 1 0 ]

      f o x f i l t e r @ i n s p i r e d e f f e c t . n e t [ 1 6 : 1 1 1 6 / 0 9 / 2 0 1 0 ]

      g l a z e _ b l a c k @ w w w . t h e m e - o a s i s . o r g [ 0 4 : 2 5 1 1 / 0 2 / 2 0 1 0 ]

      m a r t i n @ h o e r a n d l . c o m [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      O f f i c e 2 0 0 7 B l a c k @ J B B S [ 0 4 : 2 3 1 1 / 0 2 / 2 0 1 0 ]

      o p t o u t @ d u b f i r e . n e t [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      p e r s o n a s @ c h r i s t o p h e r . b e a r d [ 0 1 : 4 6 2 1 / 0 7 / 2 0 1 0 ]

      r s D o w n l o a d H e l p e r @ y e v g e n y a n d r o v . n e t [ 2 3 : 5 7 1 2 / 0 6 / 2 0 1 0 ]

      S k i p S c r e e n @ S k i p S c r e e n [ 2 2 : 4 7 1 1 / 0 8 / 2 0 1 0 ]

      T h e M e s s a g e B i b l e V e r s e T o o l b a r @ 2 b e l i e v e . n e t [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { 0 b 4 5 7 c A A - 6 0 2 d - 4 8 4 a - 8 f e 7 - c 1 d 8 9 4 a 0 1 1 b a } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { 1 3 9 a 1 2 0 b - c 2 e a - 4 1 d 2 - b f 7 0 - 5 4 2 d 9 f 0 6 3 d f d } [ 2 3 : 5 2 1 2 / 0 6 / 2 0 1 0 ]

      { 2 4 1 a a e 7 0 - 0 0 2 2 - 1 1 d e - 8 7 a f - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 2 9 1 1 / 0 2 / 2 0 1 0 ]

      { 3 e 0 e 7 d 2 a - 0 7 0 f - 4 a 4 7 - b 0 1 9 - 9 1 f e 5 3 8 5 b a 7 9 } [ 1 8 : 5 6 0 6 / 0 9 / 2 0 1 0 ]

      { 4 6 3 F 6 C A 5 - E E 3 C - 4 b e 1 - B 7 E 6 - 7 F E E 1 1 9 5 3 3 7 4 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { 5 0 9 3 1 6 1 0 - 3 d 8 e - 1 1 d d - a e 1 6 - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { 7 6 9 4 c 4 9 c - 9 f b d - 1 1 d c - 8 3 1 4 - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { 9 8 9 e 9 3 8 2 - d 5 4 0 - 4 1 8 9 - 8 8 d 1 - f c 5 4 a 9 4 9 a 3 8 7 } [ 0 4 : 2 8 1 1 / 0 2 / 2 0 1 0 ]

      { 9 A 7 5 2 7 8 2 - D 7 0 6 - 4 7 9 b - 9 8 F 8 - 3 F 6 6 B F 9 2 1 6 9 2 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { b 9 d b 1 6 a 4 - 6 e d c - 4 7 e c - a 1 f 4 - b 8 6 2 9 2 e d 2 1 1 d } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { c d 6 1 7 3 7 5 - 6 7 4 3 - 4 e e 8 - b a c 4 - f b f 1 0 f 3 5 7 2 9 e } [ 2 2 : 5 9 2 5 / 0 9 / 2 0 1 0 ]

      { d 1 0 d 0 b f 8 - f 5 b 5 - c 8 b 4 - a 8 b 2 - 2 b 9 8 7 9 e 0 8 c 5 d } [ 2 3 : 3 8 0 8 / 0 1 / 2 0 1 0 ]

      { d 4 0 f 5 e 7 b - d 2 c f - 4 8 5 6 - b 4 4 1 - c c 6 1 3 e e f f b e 3 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { D 4 D D 6 3 F A - 0 1 E 4 - 4 6 a 7 - B 6 B 1 - E D A B 7 D 6 A D 3 8 9 } [ 2 2 : 5 9 2 5 / 0 9 / 2 0 1 0 ]

      { D D C 3 5 9 D 1 - 8 4 4 A - 4 2 a 7 - 9 A A 1 - 8 8 A 8 5 0 A 9 3 8 A 8 } [ 2 2 : 5 9 2 5 / 0 9 / 2 0 1 0 ]

      { e 2 c 5 8 1 5 0 - 9 d 7 2 - 1 1 d d - a d 8 b - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { F C A B 6 F D D - 5 5 8 5 - 4 2 5 b - 9 5 C 1 - 5 E D 8 5 6 F 3 F D 0 8 } [ 0 5 : 5 5 1 7 / 1 2 / 2 0 0 9 ]

      { f e 0 2 5 8 a b - 4 f 7 4 - 4 3 a 1 - 8 7 8 1 - b c d f 3 4 0 f 9 e e 9 } [ 1 3 : 3 4 2 9 / 1 0 / 2 0 1 0 ]



      [ H K E Y _ L O C A L _ M A C H I N E \ S o f t w a r e \ M o z i l l a \ F i r e f o x \ E x t e n s i o n s ]

      " { 2 0 a 8 2 6 4 5 - c 0 9 5 - 4 6 e d - 8 0 e 3 - 0 8 8 2 5 7 6 0 5 3 4 b } " = " C : \ W i n d o w s \ M i c r o s o f t . N E T \ F r a m e w o r k \ v 3 . 5 \ W i n d o w s P r e s e n t a t i o n F o u n d a t i o n \ D o t N e t A s s i s t a n t E x t e n s i o n \ " [ 2 1 : 4 2 1 5 / 1 2 / 2 0 0 9 ]


      G o o r e d F i x b y j p s h o r t s t u f f ( 0 3 . 0 7 . 1 0 . 1 )

      L o g c r e a t e d a t 1 0 : 0 7 o n 2 9 / 1 0 / 2 0 1 0 ( C Z X )

      F i r e f o x v e r s i o n 3 . 0 . 1 5 ( e n - U S )



      = = = = = = = = = = G o o r e d S c a n = = = = = = = = = =



      ( n o n e )



      = = = = = = = = = = G o o r e d L o g = = = = = = = = = =



      C : \ P r o g r a m F i l e s \ M o z i l l a F i r e f o x \ e x t e n s i o n s \

      s t a g e d - x p i s [ 0 4 : 5 0 1 6 / 1 2 / 2 0 0 9 ]

      { 9 7 2 c e 4 c 6 - 7 e 0 8 - 4 4 7 4 - a 2 8 5 - 3 2 0 8 1 9 8 c e 6 f d } [ 2 0 : 5 2 1 5 / 1 2 / 2 0 0 9 ]

      { C A F E E F A C - 0 0 1 6 - 0 0 0 0 - 0 0 0 7 - A B C D E F F E D C B A } [ 0 4 : 5 0 1 6 / 1 2 / 2 0 0 9 ]

      { C A F E E F A C - 0 0 1 6 - 0 0 0 0 - 0 0 1 5 - A B C D E F F E D C B A } [ 1 6 : 1 8 1 6 / 1 2 / 2 0 0 9 ]

      { C A F E E F A C - 0 0 1 6 - 0 0 0 0 - 0 0 1 7 - A B C D E F F E D C B A } [ 0 4 : 2 4 1 7 / 1 2 / 2 0 0 9 ]



      C : \ U s e r s \ C Z X \ A p p l i c a t i o n D a t a \ M o z i l l a \ F i r e f o x \ P r o f i l e s \ j i 8 8 z o l h . d e f a u l t \ e x t e n s i o n s \

      ( n o n e )



      C : \ U s e r s \ C Z X \ A p p l i c a t i o n D a t a \ M o z i l l a \ F i r e f o x \ P r o f i l e s \ n e a k 0 n n i . d e f a u l t \ e x t e n s i o n s \

      a n a n d c s i n g h @ g m a i l . c o m [ 2 3 : 5 3 1 2 / 0 6 / 2 0 1 0 ]

      a r c t i c g l o w - f f 3 - 3 0 @ g l o w p l u g . b i t a s y l u m . n e t [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      b o s s k n b @ t t t - j l . b l o g s p o t . c o m [ 0 4 : 3 2 1 1 / 0 2 / 2 0 1 0 ]

      c h a c h a g u i d e b a r @ c h a c h a . c o m [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      d j z i g g y @ g m a i l . c o m [ 0 4 : 2 9 1 1 / 0 2 / 2 0 1 0 ]

      e x p a n d u r l @ v o i z l e . c o m [ 2 2 : 2 7 1 8 / 0 7 / 2 0 1 0 ]

      f o x f i l t e r @ i n s p i r e d e f f e c t . n e t [ 1 6 : 1 1 1 6 / 0 9 / 2 0 1 0 ]

      g l a z e _ b l a c k @ w w w . t h e m e - o a s i s . o r g [ 0 4 : 2 5 1 1 / 0 2 / 2 0 1 0 ]

      m a r t i n @ h o e r a n d l . c o m [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      O f f i c e 2 0 0 7 B l a c k @ J B B S [ 0 4 : 2 3 1 1 / 0 2 / 2 0 1 0 ]

      o p t o u t @ d u b f i r e . n e t [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      p e r s o n a s @ c h r i s t o p h e r . b e a r d [ 0 1 : 4 6 2 1 / 0 7 / 2 0 1 0 ]

      r s D o w n l o a d H e l p e r @ y e v g e n y a n d r o v . n e t [ 2 3 : 5 7 1 2 / 0 6 / 2 0 1 0 ]

      S k i p S c r e e n @ S k i p S c r e e n [ 2 2 : 4 7 1 1 / 0 8 / 2 0 1 0 ]

      T h e M e s s a g e B i b l e V e r s e T o o l b a r @ 2 b e l i e v e . n e t [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { 0 b 4 5 7 c A A - 6 0 2 d - 4 8 4 a - 8 f e 7 - c 1 d 8 9 4 a 0 1 1 b a } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { 1 3 9 a 1 2 0 b - c 2 e a - 4 1 d 2 - b f 7 0 - 5 4 2 d 9 f 0 6 3 d f d } [ 2 3 : 5 2 1 2 / 0 6 / 2 0 1 0 ]

      { 2 4 1 a a e 7 0 - 0 0 2 2 - 1 1 d e - 8 7 a f - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 2 9 1 1 / 0 2 / 2 0 1 0 ]

      { 3 e 0 e 7 d 2 a - 0 7 0 f - 4 a 4 7 - b 0 1 9 - 9 1 f e 5 3 8 5 b a 7 9 } [ 1 8 : 5 6 0 6 / 0 9 / 2 0 1 0 ]

      { 4 6 3 F 6 C A 5 - E E 3 C - 4 b e 1 - B 7 E 6 - 7 F E E 1 1 9 5 3 3 7 4 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { 5 0 9 3 1 6 1 0 - 3 d 8 e - 1 1 d d - a e 1 6 - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { 7 6 9 4 c 4 9 c - 9 f b d - 1 1 d c - 8 3 1 4 - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { 9 8 9 e 9 3 8 2 - d 5 4 0 - 4 1 8 9 - 8 8 d 1 - f c 5 4 a 9 4 9 a 3 8 7 } [ 0 4 : 2 8 1 1 / 0 2 / 2 0 1 0 ]

      { 9 A 7 5 2 7 8 2 - D 7 0 6 - 4 7 9 b - 9 8 F 8 - 3 F 6 6 B F 9 2 1 6 9 2 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { b 9 d b 1 6 a 4 - 6 e d c - 4 7 e c - a 1 f 4 - b 8 6 2 9 2 e d 2 1 1 d } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { c d 6 1 7 3 7 5 - 6 7 4 3 - 4 e e 8 - b a c 4 - f b f 1 0 f 3 5 7 2 9 e } [ 2 2 : 5 9 2 5 / 0 9 / 2 0 1 0 ]

      { d 1 0 d 0 b f 8 - f 5 b 5 - c 8 b 4 - a 8 b 2 - 2 b 9 8 7 9 e 0 8 c 5 d } [ 2 3 : 3 8 0 8 / 0 1 / 2 0 1 0 ]

      { d 4 0 f 5 e 7 b - d 2 c f - 4 8 5 6 - b 4 4 1 - c c 6 1 3 e e f f b e 3 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { D 4 D D 6 3 F A - 0 1 E 4 - 4 6 a 7 - B 6 B 1 - E D A B 7 D 6 A D 3 8 9 } [ 2 2 : 5 9 2 5 / 0 9 / 2 0 1 0 ]

      { D D C 3 5 9 D 1 - 8 4 4 A - 4 2 a 7 - 9 A A 1 - 8 8 A 8 5 0 A 9 3 8 A 8 } [ 2 2 : 5 9 2 5 / 0 9 / 2 0 1 0 ]

      { e 2 c 5 8 1 5 0 - 9 d 7 2 - 1 1 d d - a d 8 b - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]

      { F C A B 6 F D D - 5 5 8 5 - 4 2 5 b - 9 5 C 1 - 5 E D 8 5 6 F 3 F D 0 8 } [ 0 5 : 5 5 1 7 / 1 2 / 2 0 0 9 ]

      { f e 0 2 5 8 a b - 4 f 7 4 - 4 3 a 1 - 8 7 8 1 - b c d f 3 4 0 f 9 e e 9 } [ 1 3 : 3 4 2 9 / 1 0 / 2 0 1 0 ]



      [ H K E Y _ L O C A L _ M A C H I N E \ S o f t w a r e \ M o z i l l a \ F i r e f o x \ E x t e n s i o n s ]

      " { 2 0 a 8 2 6 4 5 - c 0 9 5 - 4 6 e d - 8 0 e 3 - 0 8 8 2 5 7 6 0 5 3 4 b } " = " C : \ W i n d o w s \ M i c r o s o f t . N E T \ F r a m e w o r k \ v 3 . 5 \ W i n d o w s P r e s e n t a t i o n F o u n d a t i o n \ D o t N e t A s s i s t a n t E x t e n s i o n \ " [ 2 1 : 4 2 1 5 / 1 2 / 2 0 0 9 ]

      CarbonX

        Topic Starter


        Starter

        • Experience: Beginner
        • OS: Unknown
        Re: Search Redirection,Random Tabs Opening and Host Process Crashes
        « Reply #3 on: October 31, 2010, 12:52:44 PM »
        Forgot to put this in my initial post up until a day or so ago I had Avast! Interner Security installed but unistalled it because it was making my computer creep along. I did however download avast! free and will install it today.

        Oh and the program that installed itself was called AntiMalware Doctor

        Allan

        • Moderator

        • Mastermind
        • Thanked: 1241
        • Experience: Guru
        • OS: Windows 10
        Re: Search Redirection,Random Tabs Opening and Host Process Crashes
        « Reply #4 on: October 31, 2010, 01:14:42 PM »
        So you've been running without an anti virus utility? Okay, sometimes we get what we deserve.

        Did you follow all steps in the link I provided in my first post above? If so, please wait for a malware specialist to step in. If not, please do so now.

        CarbonX

          Topic Starter


          Starter

          • Experience: Beginner
          • OS: Unknown
          Re: Search Redirection,Random Tabs Opening and Host Process Crashes
          « Reply #5 on: November 01, 2010, 04:27:09 PM »
          No I have been using Windows Defender until last night when I installed Avast! free. I have Malware Bytes,Trojan Remover and CCleaner and have scanned with all three. Ive tried to update my Java but the installer just sits there when installing starts.