Possible Browser Hijack/Modifier

[TheASBCGuy]

I just installed AS and it cleaned a lot of "stuff" out
of my system with the first scan. I recently picked up a
web-based virus and I can't seem to shake it completely.
Norton AV removed an Adware.Iefeats after some work, and
Spybot keeps finding a DSO Exploit that I understand may
be a bug in their system. AS, however, after several
manual and utility-based removals of problems, keeps
finding a Hijacker located on Internet Explorer Search
Page:1.

Anyone have any info about this? Unless I manually change
my home page in IE to my desired page, it comes up
as "about:Blank" and up until my last check, I am still
getting pop-ups.

I appreciate any help I can get.

Guy

 

[Ron Kinner]

Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then
send it to me as an attachment. Let's see what you have
infecting your system.

Ron Kinner
Microsoft MVP 2004 & 2005
(e-mail address removed)

 

[Guest]

Hey Guy ...
Try turning off your system restore .. boot your machine
in safe mode and then run the scan... if not try
pcworld.com for a browser/hijack remover.
Hope this helps

 

[gary.mccaig]

i may have something sililar. ie will start up by
itself. also winlogon will sometimes abort which forces
a re-boot. if have identified files in my system32
folder which should not be there, but i can not delete.
i clean up the associated registry entries only to find
them back again. i can find do rogue processes using
task manager. i am running MS AS, spybot, and xsoftspy.
i think the problem stated when i got some adware
installed on my machine and i chose to uninstall instead
of just deleting. i've sent queries to xsoftspy and
Trend Microsystems. Is there any hope short of a re-
build?

 

[Steve Dodson [MSFT]]

In Advanced tools of MWAS, try browser restore and let us know if that works
for you.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.