Hi. I ran the AdAware 2007 free, Ccleaner & HJT but am still getting redirected. Here is my stuff.
This began happening after I downloaded cursor mania. (stupid, I know) I already uninstalled it.
I can't get it to stop, and it's driving me nuts.

Thanks!

Attached Files

	hijackthis.log (6.9 KB, 3 views)
	adAware log.txt (39.1 KB, 1 views)

Hi...

First of all uninstall this..
C:\Program Files\iGive__Shopping__Window

Please download FixWareout

http://downloads.subratam.org/Fixwareout.exe


Save it to your desktop and run it. Click Next, then Install, then make sure "Run fixit" is checked and click Finish. The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.

When your system reboots, follow the prompts. Afterwards, Hijack This will launch. Close Hijack This, and click OK to proceed. )

Fix these with HJT – mark them, close IE, click fix checked
O4 - HKLM\..\Run: [igivm] "C:\Program Files\iGive__Shopping__Window\iGiveShoppingWindowv .exe"
O8 - Extra context menu item: iGive Shopping Window - file://C:\Program Files\iGive__Shopping__Window\igivt\igivC5.htm
O9 - Extra button: iGive Shopping Window - {9B7E79AC-A646-4e45-A70F-1B3981FE370E} - file://C:\Program Files\iGive__Shopping__Window\igivt\igivC5.htm (HKCU)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/noc...1.0.0.15-3.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1E5E5E05-DDA1-404E-9BEE-294C8B5E2783}: NameServer = 85.255.116.35,85.255.112.65
O17 - HKLM\System\CCS\Services\Tcpip\..\{5CF7ECE3-E34D-40AA-8BF7-EB733CD8FAC8}: NameServer = 85.255.116.35,85.255.112.65
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.35 85.255.112.65
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.35 85.255.112.65
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.35 85.255.112.65

If you have connection problems after this

* Go to Control Panel. - If you are using Windows XP's Category View, select the Network and Internet Connections category. If you are in Classic View, go to the next step .
· Double-click the Network Connections icon
· Right-click the Local Area Connection icon and select Properties.
· Hilight Internet Protocol (TCP/IP) and click the Properties button.
· Be sure Obtain DNS server address automatically is selected.
· OK your way out.


* Go to Start > Run and type in cmd
· Click OK.
· This will open a commad prompt.
· Type or copy and paste the following line in the command window:

ipconfig /flushdns

· Hit Enter
· Exit the command window

Do that before you restart.

=============
At the end of the fix, you may need to restart your computer again.

Finally, please post the contents of the logfile C:\fixwareout\report.txt, along with a new Hijack This log.

==================================
If you get an Autoexec nt error do the following

XP Fix - http://www.visualtour.com/downloads/

Scroll down to get XP Fix

And run FixWareout again.


Reboot and post a new HJT log.

Thanks so much! Is it going to matter that I actually use the i give shopping window? If you think it'll help, I'll fix it no matter what, I was just curious.
I have to go to work, but I am going to get on this when I get home. I'll let you know how it goes.
Thanks again!

This site will show you the C:\Program Files\iGive__Shopping__Window\ig.exe

IG.EXE Spyware Remove

Thank you Thank you Thank you!!! I cannot even begin to tell you how grateful I am for your help! This worked like a dream.

Attached Files

	hijackthisLog_afterFix.txt (5.8 KB, 1 views)
	report.txt (2.2 KB, 1 views)

Yep your log is fine.Your good to go..