hijacker(source view)

G

Guest

I keep getting a hijack page and i keep using hijack this rto get rid of it
but keeps coming back.
this is the source view of the page

<html><head><meta http-equiv="MSThemeCompatible" content="Yes"/><meta
http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>MSN
Search:
眯潨ç©匿å‰â€Ã¤Â¹â€°Ã£Âµâ€¡Ã¢â€¢Â»Ã§ÂµÂ³Ã¥Å’¦æ…¥æ²周ç¹㵥潤à¨Âæ¹°ã´³æ±Ââ¤敶ç²潩൮瀊㴳瑨ç´⼺眯扥愮æ²楨敶漮æ²眯扥⨯ââ€Â¯Ã Âµâ€œÃ§â‚¬Å Ã£â€˜Â®Ã¥Å’½æµ©æ±©ç‰¡ç€ æ¡â¥‣潇æ¯敬à¨Âã‘°æ ½ç‘´ã©°â¼¯ç·⹷潧æ¯敬挮浯猯慥æ²㽨ç¡牟㵱猥à¨Â湰㴵敒敦敲æ®â¥‣潇æ¯敬à¨Âã•°æ ½ç‘´ã©°â¼¯ç·⹷潧æ¯敬挮浯猯慥æ²㽨ç¡江㵱猥à¨Âæ¹°ã´¶æ±Ââ¤敶ç²潩â®‣潇æ¯敬à¨Âã™°æ ½ç‘´ã©°
-- More Useful Everyday</title><meta http-equiv="PICS-Label"
content='(PICS-1.1 "http://www.rsac.org/ratingsv01.html" l comment "RSACi
North America Server" by "(e-mail address removed)" r (n 0 s 0 v 0 l 0))'/><link
rel="stylesheet" type="text/css"
href="/cfgs/cfg2004050101/css/en-us_CSS_Classic.css"/><script
type="text/javascript" language="javascript"
src="/static/helppane26.js"></script><script language="javascript">var
H_URL_BASE="http://help.msn.com/EN_US";var H_KEY="srch_no_rslts";var
L_H_TEXT="For help on the search results page, click a topic:";var
bSearch="TRUE";var H_BURL="helppane.htm";var
H_CONFIG="msnsearch_07_04.ini";var L_H_APP="MSN Search";var notextalert =
"Please type the word or words you wish to search for in the Search box.";var
contactuserror = "Your request is incomplete or your email address is not
valid. Both your email address and a description are needed, please complete
the required text boxes.";</script>
<script type="text/javascript" language="javascript"
src="/static/utils.js"></script><script type="text/javascript"
language="javascript"
src="http://sc.msn.com/global/scr/lg/hdr35.js"></script></head><body
topmargin="0" leftmargin="0" marginwidth="0" marginheight="0"><table
border="0" cellpadding="0" cellspacing="0" width="100%"
class="bgsh"><tr><td><div width="100%" class="bgsh"><div
style="padding:4px;padding-left:10px;padding-right:10px; color: #ffffff"
class="b7"><a class="b7" href="http://g.msn.com/0nwenus0/AV/00">MSN Home</a>
| <a class="b7" href="http://g.msn.com/0nwenus0/AV/01">My MSN</a> | <a
class="b7" href="http://g.msn.com/0nwenus0/AV/02">Hotmail</a> | <a class="b7"
href="http://g.msn.com/0nwenus0/AV/04">Shopping</a> | <a class="b7"
href="http://g.msn.com/0nwenus0/AV/05">Money</a> | <a class="b7"
href="http://g.msn.com/0nwenus0/AV/06">People & Chat</a></div><table
width="100%" border="0" cellpadding="0" cellspacing="0" class="sf"><tr><td
rowspan="2" width="118" class="sfl"><a
href="http://g.msn.com/0nwenus0/AV/22"><noscript><img width="118" height="35"
border="0" src="http://sc.msn.com/global/c/lg/msft_118x35.gif"
/></noscript><script
type="text/javascript">logoImg("http://sc.msn.com");</script></a></td><td
rowspan="2" width="10%" valign="bottom" class="sfl" nowrap="nowrap"><a
href="http://search.msn.com/default.aspx">Search</a></td><td rowspan="3"
width="113" class="sfm"><img src="http://sc.msn.com/global/c/sf/sf_srch.jpg"
height="44" border="0"></td><td width="*" class="sfr"> </td><td
height="10"></td></tr><tr><td rowspan="2" class="sfi" valign="bottom"
align="right" nowrap="nowrap"> <span class="mb" style="padding-right:
10px"><nobr><a href="default.aspx" class="mb">Home</a> | <a
href="advanced.aspx?q=%e7%9c%af%e6%bd%a8%e7%8d%a9%e5%8c%bf%e5%89%94%e4%b9%89%e3%b5%87%e2%95%bb%e7%b5%b3%e5%8c%a6%e6%85%a5%e6%8d%b2%e5%91%a8%e7%81%b9%e3%b5%a5%e6%bd%a4%e0%a8%8d%e6%b9%b0%e3%b4%b3%e6%b1%8f%e2%81%a4%e6%95%b6%e7%8d%b2%e6%bd%a9%e0%b5%ae%e7%80%8a%e3%b4%b3%e7%91%a8%e7%81%b4%e2%bc%ba%e7%9c%af%e6%89%a5%e6%84%ae%e6%8d%b2%e6%a5%a8%e6%95%b6%e6%bc%ae%e6%9d%b2%e7%9c%af%e6%89%a5%e2%a8%af%e2%94%af%e0%b5%93%e7%80%8a%e3%91%ae%e5%8c%bd%e6%b5%a9%e6%b1%a9%e7%89%a1%e7%80%a0%e6%9d%a1%e2%81%a5%e2%80%a3%e6%bd%87%e6%9d%af%e6%95%ac%e0%a8%8d%e3%91%b0%e6%a0%bd%e7%91%b4%e3%a9%b0%e2%bc%af%e7%9d%b7%e2%b9%b7%e6%bd%a7%e6%9d%af%e6%95%ac%e6%8c%ae%e6%b5%af%e7%8c%af%e6%85%a5%e6%8d%b2%e3%bd%a8%e7%8d%a1%e7%89%9f%e3%b5%b1%e7%8c%a5%e0%a8%8d%e6%b9%b0%e3%b4%b5%e6%95%92%e6%95%a6%e6%95%b2%e6%8d%ae%e2%81%a5%e2%80%a3%e6%bd%87%e6%9d%af%e6%95%ac%e0%a8%8d%e3%95%b0%e6%a0%bd%e7%91%b4%e3%a9%b0%e2%bc%af%e7%9d%b7%e2%b9%b7%e6%bd%a7%e6%9d%af%e6%95%ac%e6%8c%ae%e6%b5%af%e7%8c%af%e6%85%a5%e6%8d%b2%e3%bd%a8%e7%8d%a1%e6%b1%9f%e3%b5%b1%e7%8c%a5%e0%a8%8d%e6%b9%b0%e3%b4%b6%e6%b1%8f%e2%81%a4%e6%95%b6%e7%8d%b2%e6%bd%a9%e2%81%ae%e2%80%a3%e6%bd%87%e6%9d%af%e6%95%ac%e0%a8%8d%e3%99%b0%e6%a0%bd%e7%91%b4%e3%a9%b0"
class="mb">Advanced Search</a> | <a href="preferences.aspx"
class="mb">Preferences</a> | <a
href="http://advertising.msn.com/msnsites/SubmitSite.asp" class="mb">Submit a
Site</a> | <a href="javascript:javascript:fWrapHelp('off', bSearch, H_KEY,
L_H_TEXT)" class="mb">Help</a></nobr></span></td><td
height="25"></td></tr><tr><td colspan="2" class="sflb"> </td><td
height="9"></td></tr></table></div></td></tr></table><table border="0"
cellpadding="0" cellspacing="0" width="100%" class="bgq"><tr><td width="15"
class="bgq" nowrap="nowrap"></td><td valign="top"><div
class="qpad"><script><!--
function sfSTWF(){if(window.encodeURIComponent)
window.location.href='http://'+document.STWF.fSTWF.value+encodeURIComponent(document.STWF.q.value);else
window.location.href='http://'+document.STWF.fSTWF.value+document.STWF.q.value;return false;}
//-->
</script><form style="margin:0px;padding:0px;" onsubmit="return sfSTWF();"
action="results.aspx" method="GET" name="STWF" ><table cellpadding="0"
cellspacing="0" border="0"><tr><td valign="top" colspan="2"><label for="q"
accesskey="S"></label></td></tr><tr><td><nobr><input type="text" name="q"
maxlength="150" VCARD_NAME="SearchText" class="qform" tabindex="1" id="q"
size="62"
value="眯潨ç©匿å‰â€Ã¤Â¹â€°Ã£Âµâ€¡Ã¢â€¢Â»Ã§ÂµÂ³Ã¥Å’¦æ…¥æ²周ç¹㵥潤à¨Âæ¹°ã´³æ±Ââ¤敶ç²潩൮瀊㴳瑨ç´⼺眯扥愮æ²楨敶漮æ²眯扥⨯ââ€Â¯Ã Âµâ€œÃ§â‚¬Å Ã£â€˜Â®Ã¥Å’½æµ©æ±©ç‰¡ç€ æ¡â¥‣潇æ¯敬à¨Âã‘°æ ½ç‘´ã©°â¼¯ç·⹷潧æ¯敬挮浯猯慥æ²㽨ç¡牟㵱猥à¨Â湰㴵敒敦敲æ®â¥‣潇æ¯敬à¨Âã•°æ ½ç‘´ã©°â¼¯ç·⹷潧æ¯敬挮浯猯慥æ²㽨ç¡江㵱猥à¨Âæ¹°ã´¶æ±Ââ¤敶ç²潩â®‣潇æ¯敬à¨Âã™°æ ½ç‘´ã©°"></input> <select
class="qform" name="fSTWF" tabindex="2"><option
value="auto.search.msn.com/results.aspx?FORM=SMCRT&q=">Web</option><option
value="auto.search.msn.com/results.aspx?FORM=SRCHNS&ds=en-us-p13ni&q=">News</option><option
value="g.msn.com/0SEENUS/21?!">Dictionary</option><option
value="g.msn.com/0SEENUS/22?!">Encyclopedia</option><option
value="g.msn.com/0SEENUS/23?!">Stock Quotes</option><option
value="g.msn.com/0SEENUS/24?!">Movies</option><option
value="g.msn.com/0SEENUS/26?!">Shopping</option></select> <input
type="submit" id="submitbutton" value="Search"
tabindex="3"></input></nobr></td></tr></table><input type="hidden"
name="FORM" value="SMCRT"/></form></div></td><td nowrap="nowrap"
width="20"></td><td align="left" valign="top" width="100%"><p class="tbp"><a
href="http://switch.atdmt.com/action/msn_...FORM=SLIVE&DI=655&CM=SearchLive&CE=SearchMain"
target="_main" title="Popular Searches" class="tbusr">Popular
Searches</a></p></td></tr></table><table border="0" cellpadding="0"
cellspacing="0" width="100%"><tr><td width="15" nowrap="nowrap"></td><td
valign="top"><div></div></td><td width="15"
nowrap="nowrap"></td></tr></table><table border="0" cellpadding="0"
cellspacing="0" width="100%"><tr><td width="15"
nowrap="nowrap"></td><td></td><td width="15"
nowrap="nowrap"></td></tr></table><table border="0" cellpadding="0"
cellspacing="0" width="100%"><tr><td nowrap="nowrap" width="15"></td><td
width="100%" valign="top"><table border="0" cellpadding="0" cellspacing="0"
width="100%"><tr><td valign="top" width="100%"></td><td width="160"
valign="top" align="left"></td></tr><tr valign="top"><td colspan="2"><table
border="0" cellpadding="0" cellspacing="0" ><tr><td
width="15"> </td><td> </td></tr><tr><td></td><td valign="top"><img
src="/static/dns-info.gif" border="0" align="absmiddle"/> </td><td><span
class="h1">Sorry, no results were found containing <span class="h1
blue">"眯潨ç©匿å‰â€Ã¤Â¹â€°Ã£Âµâ€¡Ã¢â€¢Â»Ã§ÂµÂ³Ã¥Å’¦æ…¥æ²周ç¹㵥潤à¨Âæ¹°ã´³æ±Ââ¤敶ç²潩൮瀊㴳瑨ç´⼺眯扥愮æ²楨敶漮æ²眯扥⨯ââ€Â¯Ã Âµâ€œÃ§â‚¬Å Ã£â€˜Â®Ã¥Å’½æµ©æ±©ç‰¡ç€ æ¡â¥‣潇æ¯敬à¨Âã‘°æ ½ç‘´ã©°â¼¯ç·⹷潧æ¯敬挮浯猯慥æ²㽨ç¡牟㵱猥à¨Â湰㴵敒敦敲æ®â¥‣潇æ¯敬à¨Âã•°æ ½ç‘´ã©°â¼¯ç·⹷潧æ¯敬挮浯猯慥æ²㽨ç¡江㵱猥à¨Âæ¹°ã´¶æ±Ââ¤敶ç²潩â®‣潇æ¯敬à¨Âã™°æ ½ç‘´ã©°"</span></span></td></tr></table> <table
border="0" cellpadding="0" cellspacing="0" ><tr><td
width="65"> </td><td><span class="h4">SEARCH
TIPS</span></td></tr><tr><td></td><td><table border="0" cellpadding="0"
cellspacing="2"><tr><td><span class="i2">1) Check your spelling. </span>Are
the words in your query spelled correctly?</td></tr><tr><td><span
class="i2">2) Try using synonyms. </span>Maybe the site you're looking for
uses slightly different words, like "film" instead of
"movie".</td></tr><tr><td><span class="i2">3) Make your search more general.
</span>For example, instead of using specific product names, try using the
generic product category.</td></tr></table></td></tr><tr><td></td><td><br/><a
href="javascript:fWrapHelp('','TRUE','srch_no_rslts','For more tips and
answers to frequently asked questions, check out MSN Search Help')">For more
tips and answers to frequently asked questions, check out MSN Search
Help</a></td></tr></table><br/><br/><br/><br/><br/><br/> • Not satisfied with
your results? <a
href="http://support.msn.com/feedbacksear...=c79f04d1dbd046c599bc81d34f372117&P7=original"
target="feedback">Help us improve. </a><br/><br/></td></tr></table></td><td
nowrap="nowrap" width="15"></td><td nowrap="nowrap" valign="top"
align="center"><br/><br/><br/><br/></td><td nowrap="nowrap"
width="15"></td></tr><tr><td></td><td
colspan="3"><br/></td><td></td></tr></table><table border="0" cellpadding="0"
cellspacing="0" width="100%" class="bgsh"><tr><td width="15" class="bgsh"
nowrap="nowrap"></td><td valign="top"><div class="qpadb"><script><!--
function sfSTWF2(){if(window.encodeURIComponent)
window.location.href='http://'+document.STWF2.fSTWF2.value+encodeURIComponent(document.STWF2.q.value);else
window.location.href='http://'+document.STWF2.fSTWF2.value+document.STWF2.q.value;return false;}
//-->
</script><form style="margin:0px;padding:0px;" onsubmit="return sfSTWF2();"
action="results.aspx" method="GET" name="STWF2" ><table cellpadding="0"
cellspacing="0" border="0"><tr><td valign="top"
colspan="2"></td></tr><tr><td><nobr><input type="text" name="q"
maxlength="150" VCARD_NAME="SearchText" class="qform" size="62"
value="眯潨ç©匿å‰â€Ã¤Â¹â€°Ã£Âµâ€¡Ã¢â€¢Â»Ã§ÂµÂ³Ã¥Å’¦æ…¥æ²周ç¹㵥潤à¨Âæ¹°ã´³æ±Ââ¤敶ç²潩൮瀊㴳瑨ç´⼺眯扥愮æ²楨敶漮æ²眯扥⨯ââ€Â¯Ã Âµâ€œÃ§â‚¬Å Ã£â€˜Â®Ã¥Å’½æµ©æ±©ç‰¡ç€ æ¡â¥‣潇æ¯敬à¨Âã‘°æ ½ç‘´ã©°â¼¯ç·⹷潧æ¯敬挮浯猯慥æ²㽨ç¡牟㵱猥à¨Â湰㴵敒敦敲æ®â¥‣潇æ¯敬à¨Âã•°æ ½ç‘´ã©°â¼¯ç·⹷潧æ¯敬挮浯猯慥æ²㽨ç¡江㵱猥à¨Âæ¹°ã´¶æ±Ââ¤敶ç²潩â®‣潇æ¯敬à¨Âã™°æ ½ç‘´ã©°"></input> <select
class="qform" name="fSTWF2"><option
value="auto.search.msn.com/results.aspx?FORM=SMCRT&q=">Web</option><option
value="auto.search.msn.com/results.aspx?FORM=SRCHNS&ds=en-us-p13ni&q=">News</option><option
value="g.msn.com/0SEENUS/21?!">Dictionary</option><option
value="g.msn.com/0SEENUS/22?!">Encyclopedia</option><option
value="g.msn.com/0SEENUS/23?!">Stock Quotes</option><option
value="g.msn.com/0SEENUS/24?!">Movies</option><option
value="g.msn.com/0SEENUS/26?!">Shopping</option></select> <input
type="submit" id="submitbutton" value="Search"
</input></nobr></td></tr></table><input type="hidden" name="FORM"
Click to expand...
value="SMCRB"/></form><p style="margin-top:5px;margin-bottom:5px;"><a
href="jobs.aspx" class="j">MSN Search is hiring! Learn about job
opportunities.</a><br/></p><a href="http://g.msn.com/0SEENUS/49??PS=60952"
class="j" target="">MSN Search is improved! Check it out.</a></div></td><td
nowrap="nowrap" width="20"></td><td align="left" valign="top" width="100%"><p
style="margin: 7px 0px 0px 0px;padding: 0px;"><p class="tbp"><a
href="http://switch.atdmt.com/action/msn_...FORM=SLIVE&DI=655&CM=SearchLive&CE=SearchMain"
target="_main" title="Popular Searches" class="tbusr">Popular
Searches</a></p></p></td></tr></table><div class="flt"></div><table
border="0" cellpadding="0" cellspacing="0" width="100%" class="bgsh"><tr><td
valign="bottom" height="43"><div class="fl"><div style="padding-left:10px"><a
href="http://g.msn.com/0nwenus0/AV/15" class="tgl" target="">Try MSN Internet
Software for FREE!</a></div><table border="0" cellpadding="0" cellspacing="0"
width="100%"><tr><td nowrap="nowrap" align="left"><div
style="padding:4px;padding-left:10px;padding-right:10px; color: #ffffff"
class="b7"><a class="b7" href="http://g.msn.com/0nwenus0/AV/07">MSN Home</a>
| <a class="b7" href="http://g.msn.com/0nwenus0/AV/08">My MSN</a> | <a
class="b7" href="http://g.msn.com/0nwenus0/AV/09">Hotmail</a> | <a class="b7"
href="http://g.msn.com/0nwenus0/AV/11">Shopping</a> | <a class="b7"
href="http://g.msn.com/0nwenus0/AV/12">Money</a> | <a class="b7"
href="http://g.msn.com/0nwenus0/AV/13">People & Chat</a></div></td><td
align="right" height="20"><div style="padding-right:10px"><span class="mb"
style="padding-right: 10px"><nobr><a href="http://g.msn.com/0nwenus0/AV/23"
class="mb" target="FeedbackWindow">Feedback</a> | <a
href="javascript:javascript:fWrapHelp('off', bSearch, H_KEY, L_H_TEXT)"
class="mb">Help</a></nobr></span></div></td></tr></table></div></td></tr><tr><td
nowrap="true" height="15"><div width="100%"
style="padding-left:10px;padding-bottom:3px;"><span class="cr">©2005
Microsoft Corporation. All rights reserved.</span> <a
href="http://g.msn.com/0nwenus0/AV/18" class="cr">Terms of Use</a> <a
href="http://g.msn.com/0nwenus0/AV/19" class="cr">Advertise</a> <a
href="http://g.msn.com/0nwenus0/AV/20" class="cr">TRUSTe Approved Privacy
Statement</a> <a href="http://g.msn.com/0nwenus0/AV/21"
class="cr">GetNetWise</a> <a href="http://g.msn.com/0nwenus0/AV/24"
class="cr">Anti-Spam Policy</a> <br/><div
class="cr"></div></div></td></tr></table></body></html>
 
P

PA Bear

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org

Ted said:
I keep getting a hijack page and i keep using hijack this rto get rid of
it
but keeps coming back. this is the source view of the page
Click to expand...
<snip>
 
G

Guest

i have ran hijackthis.exe but the hijacker keeps coming back and ihave ran
malware spyware sypbot ad aware and all the like with out success
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Blackberry messages come to my outlook corrupted 1
Scrambled word doc 2
My words and excel file are not opening as it should be 1
Reading Image data from a Database 2
crittical stop sound during shut down 4
Help!!! -- Unknown Event Viewer error messages. I cannot decipher 2
Event ID ( 0 ) in Source ( ) cannot be found.... 4
Webpage does not load correctly 2

Top