Hijack This Log File Help

ricey

iv attached the hijackthis log file could any1 tell me if there is anything i should remove from it cuz i aint got a clue?

Matthewthebig

could someone do the same for me please

Mr E

Read this and follow the instructions. These guys are professionals at removing this crap

ricey

Matthewthebig wrote:

could someone do the same for me please

Ha Ha nice1 bud!!

Mr E

Matthewthebig: Your browser isn't hijacked.

Matthewthebig

oh cool

i have pile of pop ups though

must be something else

ricey

you use internet explorer do you?

Matthewthebig

yeah

halkar

Ricey, what are all that "http://qie9.hpwis.com/ " ?

Kali

halkar wrote:

Ricey, what are all that "http://qie9.hpwis.com/ " ?

Spam/malware generated crap to change home/default/search pages for IE.

Kali

ricey wrote:

iv attached the hijackthis log file could any1 tell me if there is anything i should remove from it cuz i aint got a clue?

I'd imagine one of those MSN messenger registry entries is your culprit.. if you don't use messenger then delete both entries from the registry key (HKEY_Current_User\..\Run)... reboot into safe mode, change your homepage to something you know, then boot back into windows.. if it hasn't changed to something dodgy again then its fixed.

halkar

Matthewthebig wrote:

could someone do the same for me please

Matthew, you have a lot of stuff running, must take loooong time to see the desktop

Ok, start with this :

O4 - HKLM\..\Run: [mix debug live inter] C:\Documents and Settings\All Users\Application Data\Baseextramixdebug\Blah Meow.exe

That sounds suspicious.

Also your browser is hijacked unless you put mywebsearch yourself:


O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxuk101YYIE

Try this link for removal or google for few more. It will not be easy

Again, you have a lot of stuff on startup

Attached is a nice little hijackthis log from my laptop

halkar

Kali wrote:

Spam/malware generated crap to change home/default/search pages for IE.

Oh Ok, kill kill Those pages does not even exist.

Kali

halkar wrote:

Oh Ok, kill kill Those pages does not even exist.

Oh dear.. its generally not a good idea to "try out" urls that you don't know/trust

halkar

Kali wrote:

Oh dear.. its generally not a good idea to "try out" urls that you don't know/trust

I googled first and nothing, pinged nothing, name didn't resolved to anything either. I thought maybe it was something to do with HP.

Matthewthebig

halkar wrote:

Matthew, you have a lot of stuff running, must take loooong time to see the desktop

Ok, start with this :

O4 - HKLM\..\Run: [mix debug live inter] C:\Documents and Settings\All Users\Application Data\Baseextramixdebug\Blah Meow.exe

That sounds suspicious.

Also your browser is hijacked unless you put mywebsearch yourself:


O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxuk101YYIE

Try this link for removal or google for few more. It will not be easy

Again, you have a lot of stuff on startup

Attached is a nice little hijackthis log from my laptop

thanks for that.
I have done it now.
hopefully its fixed
i have a hell of a lot of stuff that loads on satrtup