Jump to content
IObit Forum
Top Free Driver Updater Tools Best 25 PC Optimization Software Best 22 Antimalware Best 22 Uninstaller Software IObit Coupons & Discount Offers PC Optimizer Mac Boost Advice IObit Coupons A Good Utility Program From IObit IObit Promo Codes IObit Coupon Codes IObit Coupons and Deals FAQs Driver Booster Pro Review

Browser Hijack


cin2

Recommended Posts

I have to be quick cuz this will kick me out soon. Guess my brower's been hijacked - go to any site (but this one, it seems) and after 30 sec. max., it tries to reconnect to the page and then says "This tab has been recovered. Problem with web page caused IE to close and reopen the tab." It goes to the error page. I've run everything I have - ASC, Norton Internet, XoftSpySE and it's still happening. Can't get into any of the links to programs suggested by ASC or MS because the page won't stay open long enough to d/l anything! Ideas? Thanks.

Link to comment
Share on other sites

Thanks, 333halfevil (great name). I downloaded Adware and I think everything's OK. Should I still download one of the ones you suggested? And while I'm on that subject...is it OK to use ASC, Norton Internet, RegCure, and XoftSpy SE, or am I going to run into conflicts? Didn't intend on having so many but was trying to find something that worked, which turned out to be ASC at the time. Thanks!

Link to comment
Share on other sites

hi cin2

 

have u installed any new program or internet toolbar or u allowed a new Active-X to be installed ???

 

Get in Tools>Internet Options and check the level of security and privacy

don't set it at the highest level

 

Does windows send report and refer to DEP (Data Execution Prevention) some programs are incompatible with DEP

U can monitor settings for EDP in CONTROL MANAGER but read first about it in help

 

I experiance crushes like this but dont forget that internet is full of virus/malwares/adwares and so on

When EDP crashes down IE is for your good cause a program tries to run machine code

 

But the chance for a virus is still there

 

cheers

Link to comment
Share on other sites

hi cin 2

 

before doing anything else i recommend u disable all unnecessary add-ons in internet explorer or all of them if u like(i think the explorer will enable the necessary add ons) and check what is going on

 

Tools>manage add ons>tools and extensions.....

 

cheers

Link to comment
Share on other sites

hi

 

here is my bit download a program called win utilities 1.60.<<<<<<< Google it or ( http://www.ylcomputing.com/ )

this is a top rated program .

 

 

whats happen is .. a BHO has attached its self to your browser (changed the default Link )

and you cant remove it normal or perhaps find it ,,,

or

find a BHO seeker program ----hijack can see ..and find B H.o's..but careful what you do with it

it may not be able to undo what you rid..

 

itsmejjj

 

 

 

.

Link to comment
Share on other sites

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway this one ???????? This IS what i see As

The one i not sure ,,,

what you do is rid 1 at the time make shure you can restore them ...

 

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com --- ok

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com as it says is ok

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 -- ok

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 ----ok

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com/-----ok

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ ---ok

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http= --your local host 127.0.0.1 and its ok

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local this should be disabled....in your settins

i asume your using a proxy program ???

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890}-------------- THIS ONE WHAT program is using it ????

check it ...never seen that before...

C:\WINDOWS\system32\dla\tfswshx.dll

O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.5.0.135\coIEPlg.dll

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.5.0.135\IPSBHO.DLL

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O2 - BHO: SingleInstance Class - ??????? {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll -----????????

 

 

now take care and rid 1 at the time be shure you can replace the one you dilate...

 

you have to understand it is hard to give you the exact advice sitting here

 

put it this way i do not have 1 BHO on my system ...but that's me..

 

itsmejjj

Link to comment
Share on other sites

Definately fix these:

 

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm

 

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

Please verify your proxy settings

 

 

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

 

O15 - Trusted Zone: http://ak3.ajilonprofinder.com

If you didn't enter this yourself to the trusted zone, fix this.

 

 

Also, please update Java on your system: http://www.java.com/en/

Link to comment
Share on other sites

Demitris - my internet security settings are not set at the highest. I deleted ALL of my add-ons, and I reset DEP so it's now looking at all programs. I de-installed a program I downloaded 2 days ago, and found out that the version of Adware I used was a fake, so de-installed that. I now have so many tools that I'm afraid they're tripping over each other. Let's see...ASC, RegCure, Norton Internet, Spybot-SD, Super Antispyware, Hijack This. I've run through every one and done the best I could based on what I've read and heard. So I’m posting a new (and possibly worse) Hijack This log based on what I’ve done over the past few hours.

 

Danburrito and itsmejjj and detailer, thanks for your suggestions. I don’t want to load any more programs now until I know they won’t all conflict with each other. Hopefully the new log attached will help. But beware – I don’t know much about this, so some of your notes didn’t make sense to me.

 

Cin2

hijackthis 8-2-09 9pm.txt

Link to comment
Share on other sites

you have to understand it is hard to give you the exact advice sitting here

 

cin2, your not a technic geek, and that's no problem either. Today there are a lot of programs, many doing what they offer, and many not. I simply offer you to help you via TeamViewer by following the steps here if you wanna to, (it's like sitting next to you). If you agree write me a PN and I tell you what to do.

Link to comment
Share on other sites

The very first post

 

 

I have to be quick cuz this will kick me out soon. Guess my brower's been hijacked - go to any site (but this one, it seems) and after 30 sec. max., it tries to reconnect to the page and then says "This tab has been recovered. Problem with web page caused IE to close and reopen the tab." It goes to the error page. I've run everything I have - ASC, Norton Internet, XoftSpySE and it's still happening. Can't get into any of the links to programs suggested by ASC or MS because the page won't stay open long enough to d/l anything! Ideas? Thanks.

Reply With Quote

 

 

 

 

 

 

 

 

 

(it's like sitting next to you). If you agree write me a PN and I tell you what to do. ???????

BULL DUST !!!

Now THIS is CLEVER ADVICE (((http://www.java.com/en/))))

Worst peace of Junk on a system ever made - if your not a programmer -

and on a

cripple system???

 

the young man has no idea whats relay happened and you can fix it sitting at the north pole ??

read the posts he is bewildered and confused ,not shure of what to do and guessing hoping, that the apps he is installing will fix it..

 

lets face it only a Restore (from A back up) or new install will fix a os ..

that a program Messed UP ....or a hijack ,Trojan,virus - Depending how embedded thy are and if at all can be found!!

its fine if people have been using a pc a very long time.. I don't know what the word GEEK is, i assume you Mean new to PC's ,so any fancy descriptions well

would make it more confusing...

 

Please No telling People it can be fixed ,if what it is cant be described 100%

or what the hijacked BHO is ..Do not blindly Start ridding Files YOU do NOT understand..

 

ASC, Reg Cure," Norton Internet," :::Spy bot-SD,:::::: Super Antispyware, Hijack

 

from the very first post its the browser that's BEEN Affected

SO -if this lot cant find it how in heck you to be able to ???? or how in earth can the young Man !!

here is what i recommend

its time to get help from Someone close by ,a friend or PC man....i be leave you have a virus ,or Trojan!

A BHO would of or should of been seen by NORTON...OR SPY BOT.. perhaps go to there forums ask there ...tell them what is going on ..i bet thy will pretty well know.....

 

A warning!!!

 

never let someone have access to your system over the net..! or start passing on info .from or into it ,That you are already doing Unless You understand what it is you are pasting in any forum....Be VERY aware !!

a lot of people see this ..

 

DO not GET roped into THIS i can fix you.... -- YOU do not know who or what type is going to

fool around ...and as far as "TRUST ME" , is BULL DUST to THAT also...

NO offense intended to any one..by the post ...

just be very car full ///

 

 

 

 

 

itsmejjj

Link to comment
Share on other sites

IObit Security 360 is an advanced malware & spyware removal utility that detects, removes and protects your PC from various of potential spyware, adware, trojans, keyloggers, """bots, worms, and hijackers""". With the unique "Dual-Core" engine and the heuristic malware detection, IObit Security 360 detects the most complex and deepest spyware and malware in a very fast and efficient way. IObit Security 360 has a real-time malware protection and frequent automatic updating for prevention of zero-day security threats. IObit Security 360 can work with your Antivirus for a superior PC security.

 

What's new in Beta 2.2:

 

- Faster scanning engine

- Improved interface

- Improved overall functions

 

 

CompatDB.org Project: >> IObit Security 360

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...