Thread: Browser Hijack?
View Single Post
Old 12-11-2007, 05:32 PM   #12 (permalink)
tetonbob
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,809
OS: 2000 Pro; XP Pro; XP Home


Re: Browser Hijack?

Thanks for uploading the file.

Open HijackThis and click on 'Do a System Scan Only'. Check the following entries and click Fix Checked

O4 - HKLM\..\Run: [combofix] "C:\WINDOWS\system32\cmd.exe" /c "cd /d C:\ComboFix\ & Combobatch.bat"

Close HijackThis now.

---------------------------------------------------------------------------------------------

Open notepad and copy/paste the text in the quotebox below into it:

Quote:
@echo off
sc config start= disabled windownetpker
sc stop windownetpker
sc delete windownetpker
exit
Save this as fix.bat Choose to "Save type as - All Files"
It should look like this:
Double click on fix.bat & allow it to run


Run ComboFix once again, this time just by double clicking on the ComboFix.exe file. Post the log produced, and a new HijackThis log.
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Microsoft MVP - Consumer Security 2009
tetonbob is offline