HiJack This Scan Results Help

[Stan]

Have a friend that has a computer that seems to be "redirecting" all
web site searches. It was suggested to run HiJack This on the system
and read the results for an overall on the system.

Problem is, neither my friend or I have the where-with-all to
understand the results.

Is there a good place to post the results and get a properly educated
explanation of the results and what actions to take?

Regards,
Stan

 

[Nepatsfan]

In

Have a friend that has a computer that seems to be
"redirecting" all
web site searches. It was suggested to run HiJack This on
the system
and read the results for an overall on the system.

Problem is, neither my friend or I have the where-with-all to
understand the results.

Is there a good place to post the results and get a properly
educated
explanation of the results and what actions to take?

Regards,
Stan

Here are a few options.

CastleCops HijackThis Forum
http://castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html

Aumha Forums - HijackThis Logs
http://forum.aumha.org/

HijackThis Logs and Analysis
http://www.bleepingcomputer.com/forums/HijackThis_Logs_and_Analysis-f22.html

HijackThis Logs and Spyware/Malware Removal
http://forums.tomcoyote.org/index.php?showforum=27

Spyware Warrior HijackThis Logs
http://spywarewarrior.com/viewforum.php?f=5

These forums are staffed by volunteers who have demonstrated
their ability to interpret these logs and provide safe and
helpful assistance. Also, the forums are moderated, adding a
degree of assurance that the advice given is valid. Please do
not post a HijackThis log on one of these newsgroups. You have
no guarantee that the advice given would not make a bad
situation worse.

Good luck

Nepatsfan

 

[John Wunderlich]

Have a friend that has a computer that seems to be "redirecting" all
web site searches. It was suggested to run HiJack This on the system
and read the results for an overall on the system.

Problem is, neither my friend or I have the where-with-all to
understand the results.

Is there a good place to post the results and get a properly educated
explanation of the results and what actions to take?

Regards,
Stan

Have you tried:

http://www.hijackthis.de

-- John

 

[David H. Lipman]

From: "Stan" <[email protected]>

| Have a friend that has a computer that seems to be "redirecting" all
| web site searches. It was suggested to run HiJack This on the system
| and read the results for an overall on the system.
|
| Problem is, neither my friend or I have the where-with-all to
| understand the results.
|
| Is there a good place to post the results and get a properly educated
| explanation of the results and what actions to take?
|
| Regards,
| Stan

Download and execute HiJack This! (HJT)
http://www.spywareinfo.com/~merijn/files/HijackThis.exe

Create a HJT log file and post it in one of the below locations...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggestd primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggestd secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html

Suggestd tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.malwarebytes.org/forums/index.php?showforum=7
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

 

[PA Bear]

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

 

[David H. Lipman]

From: "PA Bear" <[email protected]>

| Run a /thorough/ check for hijackware, including posting your hijackthis log
| to an appropriate forum.

< snip >

Robear:

What's YOUR opinion of the TM branded HJT v2.0 Beta ?

 

[PA Bear]

< snip >

Robear:

What's YOUR opinion of the TM branded HJT v2.0 Beta ?

Few, if any of us are using or recommending this beta build in public
support forums, David.

 

[David H. Lipman]

From: "PA Bear" <[email protected]>


|
| Few, if any of us are using or recommending this beta build in public
| support forums, David.

Yepper. Many will ask a poster of a HJT v2.0 log to download v1.99.1 and re-post the log.
There is also a push to replace HJT altogether. There are many who do not Trust TM with
this utility.

I wanted to get YOUR opinion.

 

[Curt Christianson]

PA and David,

I can't help but wonder, if TM's version does not gain acceptance in the
malware communities, how long will v1.99 remain "effective enough" to do the
job?

Gawd I hate change.

--
HTH,
Curt

Windows Support Center
http://aumha.org/

 

[David H. Lipman]

From: "Curt Christianson" <[email protected]>

| PA and David,
|
| I can't help but wonder, if TM's version does not gain acceptance in the
| malware communities, how long will v1.99 remain "effective enough" to do the
| job?
|
| Gawd I hate change.
|

There are bugs in v1.99.1. The fixes that were purported to be in the next version were
indeed incorporated in the TM branded Beta v2.0 version.

If I am not mistaken, Internet personality Bobbi Flekman is working on a replacement for
HJT.

 

[Curt Christianson]

Hi Dave,

I didn't hear about that, and I appreciate the info.

Keep up the great work you're doing on the virus/malware fronts.

--
HTH,
Curt

Windows Support Center
http://aumha.org/

 

[PA Bear]

There are bugs in v1.99.1. The fixes that were purported to be in the
next
version were indeed incorporated in the TM branded Beta v2.0 version.

If I am not mistaken, Internet personality Bobbi Flekman is working on a
replacement for HJT.

Ew, please don' tell me we have "Internet personalities" now. <sigh> What
next, MVP Idol?

 

[Curt Christianson]

I can see it now...PA Bear on the Galapagous <sp> Islands...alone, with
SmitFraud...

--
HTH,
Curt

Windows Support Center
http://aumha.org/

 

[Joan Archer]

Oh no you've completely spoiled my morning now, that vision is stuck in my
mind <lol>
Joan

 

[Curt Christianson]

HI Joan,

Yep, that's the MVP version of "Survivor".

--
HTH,
Curt

Windows Support Center
http://aumha.org/

 

[Joan Archer]

Well he didn't do the liquor run <g>
Joan

 

[Curt Christianson]

One of us will hear about this Joan, and methinks it's gonna be me. Bear
doesn't get mad, he gets even.

--
HTH,
Curt

Windows Support Center
http://aumha.org/

 

[PA Bear]

<shhh>

Well he didn't do the liquor run <g>
Joan

 

[Stan]

Thanks for all the feedback on this. I decided to use
http://www.hijackthis.de to analyze the log file since it doesn't
require waiting for a reply. Also, after reading this thread, I
decided to take the TM branded HJT v2.0 Beta version off and put
v1.99.1 on.

Thanks again for the feedback guys.....

BTW, with help from this program, It did find 4 occupancies on her
system of a Hijacking which I let the program fix and now she doesn't
get redirected when using IE for a search.

Regards,
Stan