 Hijacked Browser, spyware or... |
|
|
|
|
  |
 Oct 21 2004, 06:29 PM
Post
#1
|
|
|
Clicking My Heels  Group: Members Posts: 160 Joined: 30-July 04 From: USA Member No.: 290  |
My computer froze up while I was online and I eventually got it to restart but when I did, a bunch of "your computer is infected with spyware" and porn shortcuts were left on my desktop. I opened up IE and a begin2search toolbar was present. Ran Symantec Antivirus, Spyware Doctor, and had Secretmaker running at the time when it happened. I went into add/remove programs but didn't see anything wrong there. Googled and followed YoKenny's instructions here: http://www.webservertalk.com/message377740.html , so I got HJT, installed WinPatrol, IE-SPYAD, and changed browser security.
When I run HijackThis, it says begin2search is still present, even though I've told the program to fix it. Now I can't get IE to run at all and for some reason Mozilla is extrememly unstable. Does anybody have any ideas on what else to do? Any help would be greatly appreciated. |
 |
 
|
|
Oct 21 2004, 07:35 PM
Post
#2
|
|
|
Ancient Enigma  Group: [MODERATOR] Posts: 1,788 Joined: 11-July 04 From: under the stars Member No.: 76 |
seems your cleaners were overzealous in cleaning your IE.
 some malware stick theirconfigs in the registry. and when it was "cleaned", some important registry keys may have been "cleaned" (deleted) as well. if you want to stick with IE, you may have to reinstall your browser. but get Mozilla Firefox (its better than IE, and is fairly stable, at least for me). |
|
|
|
|
Oct 22 2004, 01:20 AM
Post
#3
|
|
|
elband Group: Members Posts: 70 Joined: 9-October 04 Member No.: 1,541 |
have you tried Spyware, adaware or spywarescanner...it might solve your program, but yeah I'd recommend you not to use IE until is fixed, or it can get worse, and you can even get trojans trgohtu the pop ups, or you can even start having pop ups when your not even using EI...
Just use Firefox, you'll like it! 
|
|
|
|
|
Oct 22 2004, 01:57 AM
Post
#4
|
|
|
King of My WOrld Group: Members Posts: 482 Joined: 11-October 04 Member No.: 1,665 |
or u could try spybot ?
it's quite a useful one .. may be this can help u i dunno but this helped me alot everything when i got infected |
|
|
|
|
Oct 22 2004, 10:40 AM
Post
#5
|
|
|
Premium Member Group: Members Posts: 178 Joined: 14-October 04 Member No.: 1,752 |
Run regedit and start to remove these keys (if present):
CODE HKEY_CLASSES_ROOT\clsid\{52fe5233-367c-4efb-bdd7-0be4d212c107} HKEY_LOCAL_MACHINE\software\microsoft\internetexplorer\toolbar\{52fe5233-367c-4efb-bdd7-0be4d212c107} |
|
|
|
|
Oct 22 2004, 12:35 PM
Post
#6
|
|
|
Super Member Group: Members Posts: 498 Joined: 23-August 04 Member No.: 878 |
Actually, sometimes if the file isn't deleted (like on my screwy system) by your program, try deleting it manually.
(Thanks for that phrugge) |
|
|
|
|
Oct 22 2004, 03:07 PM
Post
#7
|
|
|
King of My WOrld Group: Members Posts: 482 Joined: 11-October 04 Member No.: 1,665 |
QUOTE Run rededit and start to remove these keys (if present): CODE HKEY_CLASSES_ROOT\clsid\{52fe5233-367c-4efb-bdd7-0be4d212c107} HKEY_LOCAL_MACHINE\software\microsoft\internetexplorer\toolbar\{52fe5233-367c-4efb-bdd7-0be4d212c107} erm .. i think this should be regedit rite ? anyway thx for the code |
|
|
|
|
Oct 23 2004, 06:36 AM
Post
#8
|
|
|
Clicking My Heels Group: Members Posts: 160 Joined: 30-July 04 From: USA Member No.: 290 |
This is me, typing to you, from IE. Woohoo it works! Thanks so much to everybody! I DLed Spybot like you suggested, and ran regedit (thanks for that pbrugge and ashiezai), ran hijackthis again and everything seems to be working perfectly. Haven't even had to restart or anything. This is me--very happy.
Thanks again all!
|
|
|
|
|
Oct 23 2004, 07:05 AM
Post
#9
|
|
|
^^ Thats me ^^ Group: Members Posts: 528 Joined: 14-July 04 Member No.: 90 |
Its really sad to know that someone is trying to ruin your computer though. Oh well, at least its workin!
Now that everything is fixed, this topic is...... /////CLOSED\\\\\ |
|
|
|
|
Similar Topics
| To |
|---|