Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Resolved] Could someone get a look at this log for me?

[Fixed] Hijackthis! Logs - [Resolved] Could someone get a look at this log for me? posted in the Security & Safety forums; I seem to be getting alot of redirects when I click on links from search engines. Could saomeone take a look at my HJT log and see if they can ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 04-27-2006
Bronze Member
My PC
 
Join Date: Feb 2006
Posts: 39
utterarmy - See this Members User comments on their Profile page
Default [Resolved] Could someone get a look at this log for me?

I seem to be getting alot of redirects when I click on links from search engines. Could saomeone take a look at my HJT log and see if they can see something?
Attached Files
File Type: txt hijackthis2.txt (5.5 KB, 3 views)


  #2  
Old 04-27-2006
Bronze Member
My PC
 
Join Date: Feb 2006
Posts: 39
utterarmy - See this Members User comments on their Profile page
Default

It also seems my "Favorites" folder has been taken over.


  #3  
Old 04-28-2006
Bronze Member
My PC
 
Join Date: Feb 2006
Posts: 39
utterarmy - See this Members User comments on their Profile page
Default Disregard first log...new log attached

Please disregard the first log I posted. I have attached a new log. Please review and advise?
Attached Files
File Type: txt hijackthis3.txt (6.7 KB, 1 views)


  #4  
Old 04-28-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,046
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Hya Utterarmy.

First uninstall Bodog Poker if you dont want/use it.

Then boot in safemode (hit f8 when booting up) and fix these with hjt:

F2 - REG:system.ini: Shell=explorer.exe "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: localhost 127.0.0.1
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O17 - HKLM\System\CCS\Services\Tcpip\..\{38879C1A-9EA9-4FC1-AEED-EC5A620A4ECB}: NameServer = 85.255.116.117,85.255.112.190
O17 - HKLM\System\CCS\Services\Tcpip\..\{D9D03B19-AC47-4161-BD3F-FA147F08BB80}: NameServer = 85.255.116.117,85.255.112.190
Delete the file in bold , reboot , and make/post a new hjt log please.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #5  
Old 04-29-2006
Bronze Member
My PC
 
Join Date: Feb 2006
Posts: 39
utterarmy - See this Members User comments on their Profile page
Default

Ok, I did all the things you said Joe. Here is the new HJT log. Everything seems okay right now. Thanks for your help.
Attached Files
File Type: txt hijackthis4.txt (5.1 KB, 3 views)


  #6  
Old 04-29-2006
Bronze Member
My PC
 
Join Date: Feb 2006
Posts: 39
utterarmy - See this Members User comments on their Profile page
Default

Yet another correction, I am still being redirected from search engine links. Is ther anything I missed in the log?


  #7  
Old 04-30-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,046
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Yup , still one left. Boot youre pc in safemode again and fix these one with hjt:

F2 - REG:system.ini: Shell=explorer.exe "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
Then go to this folder: C:\Program Files\Common Files\Microsoft Shared\Web Folders and delete these files if present:

ibm00000.exe
ibm00001.dll
ibm00001.exe
ibm00002.dll
tmp.tmp

After that , reboot and post a new hjt log please.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -


Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 09:24 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top