Tech Support Forum - View Single Post

**LonnyRJones** · 05-01-2007, 06:56 AM

Start Hijackthis Scan and place a check next to these items If there.
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [infomathfragdupe] C:\Documents and Settings\All Users\Application Data\PopUploadInfoMath\Time Amok.exe
O4 - HKCU\..\Run: [SafeClose] C:\DOCUME~1\Pravin\APPLIC~1\BAITBA~1\does boob.exe

====================================
Hit fix checked and close Hijackthis.
Restart the PC
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Put in place a good hosts file
http://www.mvps.org/winhelp2002/hosts.htm
How To Download and Extract the HOSTS file:
http://www.mvps.org/winhelp2002/hosts2.htm
Repeat that proccess about once or twice a month

To help avoid reinfection see "So how did I get infected in the first place?"
http://castlecops.com/postlite7736-.html

Any problems now ?

05-01-2007, 06:56 AM	#10 (permalink)
LonnyRJones Expert Analyst, Moderator, Security Team Join Date: Sep 2006 Posts: 1,646 OS: xp	Re: IE6 Hijacked Start Hijackthis Scan and place a check next to these items If there. R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O4 - HKLM\..\Run: [infomathfragdupe] C:\Documents and Settings\All Users\Application Data\PopUploadInfoMath\Time Amok.exe O4 - HKCU\..\Run: [SafeClose] C:\DOCUME~1\Pravin\APPLIC~1\BAITBA~1\does boob.exe ==================================== Hit fix checked and close Hijackthis. Restart the PC ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Put in place a good hosts file http://www.mvps.org/winhelp2002/hosts.htm How To Download and Extract the HOSTS file: http://www.mvps.org/winhelp2002/hosts2.htm Repeat that proccess about once or twice a month To help avoid reinfection see "So how did I get infected in the first place?" http://castlecops.com/postlite7736-.html Any problems now ?