Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Internet Explorer hijack  (Read 3970 times)

0 Members and 1 Guest are viewing this topic.

Tim

  • Guest
Internet Explorer hijack
« on: April 05, 2004, 07:10:42 AM »
ive unfortunatly come across a site somewhere that has put all links in my browser and icons here and there on my computer and it changes to some porn search site every time i load IE. here is my hijackthis log if this helps? please help, thank you

Logfile of HijackThis v1.97.7
Scan saved at 10:39:56 PM, on 5/04/2004
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\RunDll32.exe
C:\PROGRA~1\DAP\DAP.EXE
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\BANDWI~1\Bandwidth Monitor Pro.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\POPUPS~1.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\DOCUME~1\TIMROB~1\LOCALS~1\Temp\RemD.exe
C:\WINDOWS\winlogon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.ozemail.com.au:8080
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://10.1.1.2/
O1 - Hosts: 213.159.117.235 auto.search.msn.com
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Global bait] C:\PROGRA~1\does noun help\holegramobj.exe
O4 - HKLM\..\Run: [sys] regedit -s sysdllwm.reg
O4 - HKCU\..\Run: [Bandwidth Monitor Pro] "C:\PROGRA~1\BANDWI~1\Bandwidth Monitor Pro.exe" /minimized
O4 - HKCU\..\Run: [PopUpStopperProfessional] "C:\PROGRA~1\PANICW~1\POP-UP~1\POPUPS~1.EXE"
O4 - HKCU\..\Run: [2f8c48urfy] C:\WINDOWS\m6us4zul5u.exe
O4 - HKCU\..\Run: [winlogon] c:\windows\winlogon.exe
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O9 - Extra button: Run DAP (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38082.217025463
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab




merlin

  • Guest
Re: Internet Explorer hijack
« Reply #1 on: April 05, 2004, 07:25:23 AM »
« Last Edit: April 05, 2004, 07:40:05 AM by merlin »

Tim

  • Guest
Re: Internet Explorer hijack
« Reply #2 on: April 05, 2004, 08:10:16 AM »
shredder got rid of it, thank you for help