HijackThis question for IE hijacker

[Guest]

CWSI'm hoping for some help, and this forum seems very knowledgable. Here's my problem...my IE gets hijacked sporadically. Sometimes I can connect and go right to my homepage, but if I try to do much web browsing, I end up stalling out and have to exit. Other times, for days at a time, I'll try to connect through IE, and it says the webpage (my homepage) isn't available, and it takes me to prosearching.com. In the browser is something about "MediaExtra aim" which I haven't been able find anywhere on my PC.

I've installed and run Adaware, Spybot, CWShredder, and HijackThis. I've run them in the safe mode, and updated them. The first three come back with a couple things for me to fix or delete, but my problem still persists. By HijackThis has a list of things for me to address, but there is this warning not to remove anything without checking into what they are. Even with reading the info on the items, I'm still not sure if I should delete them or not. Is it safe to just get rid of everything HijackThis has scanned and picked up? If I can clean up that, and my problem is still there, then I can try something else.

Thanks for any suggestions,
Crissi

 

[Shenan Stanley]

CWSI'm hoping for some help, and this forum seems very knowledgable.
Here's my problem...my IE gets hijacked sporadically. Sometimes I
can connect and go right to my homepage, but if I try to do much web
browsing, I end up stalling out and have to exit. Other times, for
days at a time, I'll try to connect through IE, and it says the
webpage (my homepage) isn't available, and it takes me to
prosearching.com. In the browser is something about "MediaExtra aim"
which I haven't been able find anywhere on my PC.

I've installed and run Adaware, Spybot, CWShredder, and HijackThis.
I've run them in the safe mode, and updated them. The first three
come back with a couple things for me to fix or delete, but my
problem still persists. By HijackThis has a list of things for me to
address, but there is this warning not to remove anything without
checking into what they are. Even with reading the info on the
items, I'm still not sure if I should delete them or not. Is it safe
to just get rid of everything HijackThis has scanned and picked up?
If I can clean up that, and my problem is still there, then I can try
something else.

Clean up AND Immunize with Spybot Search and Destroy.
Also immunize with SpywareBlaster and IE-SpyAd.

 

[Wesley Vogel]

If you have any of these, check them and have HijackThis fix 'em.

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://prosearching.com/passthrough...p://www.cnn.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://prosearching.com/searchbar.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://prosearching.com/searchbar.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://prosearching.com/searchbar.html

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://prosearching.com/searchbar.html

=================

HijackThis log tutorial
http://www.spywareinfo.com/~merijn/htlogtutorial.html

HijackThis Log Tutorial
http://www.aumha.org/a/hjttutor.htm

How to use HijackThis to remove Browser Hijackers & Spyware
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42#warning

How To Install Spybot Search and Destroy & a brief tutorial
http://tomcoyote.com/SPYBOT/index1.php

 

[Wesley Vogel]

Crissi,

BHOList.exe download
http://www.spywareinfo.com/~merijn/files/bholist.zip

Or you can search the list here w/o having to download anything:

CLSID - BHO List - Toolbar List
[[Reprinted with permission from Tony Klein who owns the copyright to the
list. This list is mirrored here for easy online access and research. Thanks
to Tony and crew for maintaining the list. Each CLSID is hyperlinked to its
own informational page.]]
http://computercops.biz/CLSID.html

TTonyKlein's BHO Collection
BHOList by Merijn
http://computercops.biz/clsid.php?type=5

==================

Pacman's Startups - Contents
http://www.pacs-portal.co.uk/startup_content.php

Mirror sites for Pacman's Startup List>>

Startup Applications List
http://www.sysinfo.org/startuplist.php

Startup Applications List
http://www.michaelpreslar.com/sysinfo/startuplist.php

Start-Up Applications - All
http://members.shaw.ca/austin.powers/