Member Panel


Sponsors and Ads

Live Tag Cloud

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Resolved] FireFox Search Engines Changed?

[Fixed] Hijackthis! Logs - [Resolved] FireFox Search Engines Changed? posted in the Security & Safety forums; Hey Joe... Recently, my FireFox search engines changed to things like Answer.com, Ebay.com, etc., and Wikipedia was removed... I cleaned that up, and, after running a Search and Destroy scan, ...

JOIN US NOW to remove these Ads

pc help forum number one in the search engines
Post New Thread  Reply
  #1  
Old 05-14-2006
Spaceman3750's Avatar
Elite Member
My PC
 
Join Date: Jan 2004
Location: Riverton, IL, USA
Posts: 1,511
PC Experience: Very Experienced
Spaceman3750 - See this Members User comments on their Profile page
Send a message via AIM to Spaceman3750 Send a message via MSN to Spaceman3750 Send a message via Yahoo to Spaceman3750
Default [Resolved] FireFox Search Engines Changed?

Hey Joe...

Recently, my FireFox search engines changed to things like Answer.com, Ebay.com, etc., and Wikipedia was removed... I cleaned that up, and, after running a Search and Destroy scan, here is my HJT, hopefully you can shed some light on my issue .
Attached Files
File Type: txt 5-14-06.txt (9.7 KB, 1 views)


__________________
- Ryan
http://www.spaceman3750.info
http://www.conglomerate-game.net

Cisco Academy - CCNA student
  #2  
Old 05-14-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,044
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Hya Space.

I believe you know and use the Whatpulse app youreself?

WhatPulse sends statistics on how much you type on your computer and ranks you based on that. It does not log your keystrokes, but only the counts of them.

Click Start>Run and type in: services.msc
Click OK
In the Services window find: Content Monitoring Tool
Select/highlight and right click the entry, and choose: Properties
On the General tab, under Service Status click the Stop button
Beside: Startup Type, in the drop menu, select: Disabled
Click Apply, then OK
Open HJT and click config > misc tools > ?delete an NT service?
Copy and past: msCMTSrvc
Click OK.



These two can be fixed with hjt:

O2 - BHO: (no name) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - (no file)
O2 - BHO: (no name) - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - (no file)
And any special reason why these are in youre trusted zone?

O15 - Trusted Zone: *.msn.com
O15 - Trusted Zone: login.passport.com
O15 - Trusted Zone: *.passport.com

Also do you know this IP and info:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 210.9.188.20:80

http://samspade.org/t/lookat?a=210.9.188.20
And have you accessed someone elses pc , or has some one accessed youre pc with LogMeIn?

O16 - DPF: {556EEC63-31E2-47C3-BF29-DFF799D2FE04} (Remote Access ActiveX Client) - https://secure.logmein.com/activex/RACtrl.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #3  
Old 05-15-2006
Spaceman3750's Avatar
Elite Member
My PC
 
Join Date: Jan 2004
Location: Riverton, IL, USA
Posts: 1,511
PC Experience: Very Experienced
Spaceman3750 - See this Members User comments on their Profile page
Send a message via AIM to Spaceman3750 Send a message via MSN to Spaceman3750 Send a message via Yahoo to Spaceman3750
Default

Yes, I knowingly use WhatPulse, just a pointless little piece of software that I need to uninstall at some point .

Re: Trusted Zones - I have those set in IE on purpose because SP2 causes problems with MSN Gaming Zone and that is the only way I have found to get it to work.

Re: The IP - I used to have a proxy set up for IE to use, apparently I never unset it.

Re: LogMeIn - Yes, I maintain my Aunt's computer using the software.

Re: Services - I cannot locate the Misc tab or any of other mentioned items. Content Monitoring is off, however.

And I have removed the two entries.

Thanks Joe .


__________________
- Ryan
http://www.spaceman3750.info
http://www.conglomerate-game.net

Cisco Academy - CCNA student
  #4  
Old 05-16-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,044
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Looks like nothing really wrong then sofar , nothing that would change youre search pages anyway. Or did Spybot already remove something?

You could give Ewido and/or a Panda scan a try to see if they find something:

http://www.pandasoftware.com/products/activescan


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #5  
Old 05-16-2006
Spaceman3750's Avatar
Elite Member
My PC
 
Join Date: Jan 2004
Location: Riverton, IL, USA
Posts: 1,511
PC Experience: Very Experienced
Spaceman3750 - See this Members User comments on their Profile page
Send a message via AIM to Spaceman3750 Send a message via MSN to Spaceman3750 Send a message via Yahoo to Spaceman3750
Default

I will give Panda a go later... And yes, Spybot probably removed something, it hasn't changed yet, so that's a good sign! :P

Thanks for your help Joe .


__________________
- Ryan
http://www.spaceman3750.info
http://www.conglomerate-game.net

Cisco Academy - CCNA student
  #6  
Old 05-17-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,044
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

No prob ofcourse Space.

Just let me know if you run in to any problems.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -


Reply
New! Norton Internet Security 2008 – Download Now Click Here

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On


All times are GMT +1. The time now is 12:00 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top