Browser Hijacked / Hijackthis log - Page 2

woozygrrl · 10-20-2006, 07:58 AM

done.

--- uninstall log---------------------

Ad-Aware SE Personal
Adobe Acrobat - Reader 6.0.2 Update
Adobe Acrobat 5.0
Adobe Acrobat 7.0 Professional
Adobe Acrobat 7.0.1 and Reader 7.0.1 Update
Adobe Acrobat 7.0.2 and Reader 7.0.2 Update
Adobe Acrobat 7.0.3 and Reader 7.0.3 Update
Adobe Acrobat and Reader 6.0.3 Update
Adobe Atmosphere Player for Acrobat and Adobe Reader
Adobe Photoshop 7.0
Adobe Photoshop CS
Adobe Reader 6.0.1
AlfaClock version 1.83 Free Edition
AOL Instant Messenger
Apple Software Update
ATI Display Driver
Avanquest update
AvantGo Client
avast! Antivirus
AVG Anti-Spyware 7.5
Beta 1.0.3
Bloglines Notifier 3.0
CleanUp!
CLIE SCSI Driver
Data Export
DeepBurner v1.8.0.224
Experience VAIO
Google Gmail Notifier
Grey Olltwit's Stopwatch
GTK+ Runtime 2.6.9 rev a (remove only)
HijackThis 1.99.1
HotKey Utility
Intel(R) PRO Network Adapters and Drivers
InterActual Player
Internet Explorer Q832894
iTunes
Java 2 Runtime Environment, SE v1.4.0_03
Java Web Start
Kaspersky Online Scanner
Link Ripper 7
Macromedia Dreamweaver MX
Macromedia Extension Manager
Macromedia Flash Player 8
Macromedia Shockwave Player
MARGI Presenter-to-Go
Memory Stick Formatter
Microsoft AntiSpyware
Microsoft Broadband Networking
Microsoft Money 2005
Microsoft Office Professional Edition 2003
Microsoft Office XP Professional with FrontPage
Microsoft Upgrade Offer
Microsoft Visual C++ 2005 Redistributable
MoodLogic
Mozilla Firefox (1.5.0.7)
Music Visualizer Library 1.4.00
Netscape (7.02)
Network Smart Capture
Network Stumbler 0.4.0 (remove only)
OpenMG Limited Patch 3.2-03-02-21-08
OpenMG Limited Patch 3.2-03-02-25-01
OpenMG Secure Module 3.2
Outlook Express Update Q330994
Palm Desktop
Panda ActiveScan
PCFriendly
POP Peeper
PRISM 11Mbps Wireless LAN for Windows
Quicken 2003 New User Edition
QuickTime
reFreshreLoad v1_5 Screen Saver
Ringtone Media Studio
Rio Music Manager
SetBrowser (remove only)
Shockwave
SmartFix (remove only)
SmartFTP
SmartFTP Client 2.0
SmartFTP Client 2.0 Setup Files (remove only)
SoftK56 Data Fax
Sonic Foundry Sound Forge v4.5a
SonicStage 1.5.50
Sony Certificate PCH
Sony Notebook Setup
Sony USB Mouse
Sony Utilities DLL
Sony Video Shared Library
Spybot - Search & Destroy 1.4
SpywareBlaster v3.5.1
Sweepi 5.1
SWF Opener
SWiSHmax
Talking Alarm Clock
Turbo Tax Offer
VAIO DeepSea Wallpaper
VAIO Help and Support
VAIO Media 2.5
VAIO Media Music Server 2.5
VAIO Media Photo Server 2.5
VAIO Media Platform 2.5
VAIO Media Redistribution 2.5
VAIO Media Setup 2.5
VAIO Registration
VAIO Support
VAIO Survey Standalone
VAIO Wireless Utility
Viewpoint Manager (Remove Only)
Viewpoint Media Player
VindigoLink
Weather Pulse
Winamp (remove only)
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows Media Player Hotfix [See wm828026 for more information]
Windows Tetris 1.01
Windows XP Hotfix - KB821253
Windows XP Hotfix - KB821557
Windows XP Hotfix - KB823182
Windows XP Hotfix - KB823559
Windows XP Hotfix - KB823980
Windows XP Hotfix - KB824105
Windows XP Hotfix - KB824141
Windows XP Hotfix - KB824146
Windows XP Hotfix - KB825119
Windows XP Hotfix - KB828028
Windows XP Hotfix - KB828035
Windows XP Hotfix - KB842773
Windows XP Hotfix - KB887811
Windows XP Hotfix (SP2) Q329441
Windows XP Hotfix (SP2) Q811493
Windows XP Hotfix (SP2) Q814033
Windows XP Hotfix (SP2) Q815021
Windows XP Hotfix (SP2) Q817287
Windows XP Hotfix (SP2) Q817606
WinHTTrack Website Copier 3.30
WinPatrol
WinRAR archiver
WinZip
Wireless LAN
Wireless Manager
XoftSpy
Yahoo! Messenger
YahooPOPs! 0.6
YOU DON'T KNOW JACK Volume 2

-------- uninstall log end----------------------------------

yep everything has been fine since the first set of tools we ran.
much appreciated.

**Eclipse2003** · 10-22-2006, 01:24 PM

Update Java

We need to update your Java as it is out of date. The older version is a security risk, as malware writers exploit the weaknesses in it's code.

Updating Java and Clearing Cache

Go to Start > Control Panel double-click on the Java Icon (coffee cup) in the Control Panel.
It will say "Java Plug-in" under the icon.
If it is not visible, click on 'Switch to Classic View' in the left pane of the Control Panel or 'Other Control Panel Options'
Please find the Update button or tab in the Java Control Panel. Update your Java then reboot.
If you are unable to update you can manually update by going here:
- http://www.java.com/en/download/manual.jsp
After the reboot, go back into the Control Panel and double-click the Java Icon.
Under the Advanced Tab, click <Applet> tag support and select the browser(s) you are using.
Under "Temporary Internet Files", click the Delete Files button.
There are three options in the window to clear the cache - Leave ALL 3 Checked
- Downloaded Applets
- Downloaded Applications
- Other Files
Click OK on Delete Temporary Files Window
Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
Click OK to leave the Java Control Panel.

====================================================================================================

Deleting Files and Folders

Delete the following Files indicated in RED and Folders indicated in BLUE if they still exist.

C:\Program Files\netris32.zip
====================================================================================================

Now please follow the next steps to prevent further infections:

Rehide System and hidden files

Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View tab.
Deselect the Show hidden files and folders option.
Select the Hide file extensions for known types option.
Select the Hide protected operating system files option.
Click Yes to confirm.
Click OK.

Setting a clean restore point

To turn off System Restoreclick Start > Right Click My Computer > Properties. Click the System Restore tab and Check "Turn off System Restore" or "Turn off System Restore on all drives" Click Apply. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this then Click OK.

To turn System Restore back on Uncheck "Turn off System Restore" or "Turn off System Restore on all drives." Click Apply, and then OK.

Microsoft Updates

It is very important that you get all of the critical updates for your Operating System and Internet Explorer. Please go to Microsoft and download all the critical updates to help prevent possible re-infection.

Spyware Prevention

This is a good time to set up protection against further attacks. Read How Did I Get Infected In The First Place?. You need an antivirus that is continually updated, a good firewall, a spyware blocker such as Spyware Blaster, and a real time spyware program such as Spyware Guard, to prevent spyware intrusions. IE-Spyad is another excellent program that places over 4000 websites and domains in the IE Restricted list, which will help prevent attempts to infect your system. All of the above have good free versions available. However, be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them.

More information and downloads are available at the following links:

Spyware Blaster
Spyware Guard
IE-Spyad

Please respond to this once more to let us know that everything is fine and we can mark this thread as resolved. Thanks!

woozygrrl · 10-22-2006, 09:07 PM

I really appreciate the help. i cant thank you enough.
everything is running great and all steps have been completed.

you've been great.

-marina-

**Eclipse2003** · 10-23-2006, 06:04 AM

Glad we could help

10-22-2006, 01:24 PM	#22 (permalink)
Eclipse2003 TSF Enthusiast Join Date: Apr 2005 Location: Ohio Posts: 1,114 OS: XP	Update Java We need to update your Java as it is out of date. The older version is a security risk, as malware writers exploit the weaknesses in it's code. Updating Java and Clearing Cache Go to Start > Control Panel double-click on the Java Icon (coffee cup) in the Control Panel. It will say *"Java Plug-in"* under the icon. If it is not visible, click on *'Switch to Classic View'* in the left pane of the Control Panel or *'Other Control Panel Options'* Please find the Update button or tab in the Java Control Panel. Update your Java then reboot. If you are unable to update you can manually update by going here: http://www.java.com/en/download/manual.jsp After the reboot, go back into the Control Panel and double-click the Java Icon. Under the Advanced Tab, click <Applet> tag support and select the browser(s) you are using. Under "Temporary Internet Files", click the Delete Files button. There are three options in the window to clear the cache - Leave ALL 3 Checked Downloaded Applets Downloaded Applications Other Files Click OK on Delete Temporary Files Window Note: This deletes ALL the Downloaded Applications and Applets from the CACHE. Click OK to leave the Java Control Panel. ==================================================================================================== Deleting Files and Folders Delete the following Files indicated in RED and Folders indicated in BLUE if they still exist. C:\Program Files\netris32.zip ==================================================================================================== Now please follow the next steps to prevent further infections: Rehide System and hidden files Click Start. Open My Computer. Select the Tools menu and click Folder Options. Select the View tab. Deselect the Show hidden files and folders option. Select the Hide file extensions for known types option. Select the Hide protected operating system files option. Click Yes to confirm. Click OK. Setting a clean restore point To turn off System Restoreclick Start > Right Click My Computer > Properties. Click the System Restore tab and Check "Turn off System Restore" or "Turn off System Restore on all drives" Click Apply. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this then Click OK. To turn System Restore back on Uncheck "Turn off System Restore" or "Turn off System Restore on all drives." Click Apply, and then OK. *Microsoft Updates* It is very important that you get all of the critical updates for your Operating System and Internet Explorer. Please go to Microsoft and download all the critical updates to help prevent possible re-infection. *Spyware Prevention* This is a good time to set up protection against further attacks. Read How Did I Get Infected In The First Place?. You need an antivirus that is continually updated, a good firewall, a spyware blocker such as Spyware Blaster, and a real time spyware program such as Spyware Guard, to prevent spyware intrusions. IE-Spyad is another excellent program that places over 4000 websites and domains in the IE Restricted list, which will help prevent attempts to infect your system. All of the above have good free versions available. However, be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them. More information and downloads are available at the following links: Spyware Blaster Spyware Guard IE-Spyad Please respond to this once more to let us know that everything is fine and we can mark this thread as resolved. Thanks!

10-20-2006, 07:58 AM	#21 (permalink)
woozygrrl Registered User Join Date: Oct 2006 Posts: 13 OS: winxp	done. --- uninstall log--------------------- Ad-Aware SE Personal Adobe Acrobat - Reader 6.0.2 Update Adobe Acrobat 5.0 Adobe Acrobat 7.0 Professional Adobe Acrobat 7.0.1 and Reader 7.0.1 Update Adobe Acrobat 7.0.2 and Reader 7.0.2 Update Adobe Acrobat 7.0.3 and Reader 7.0.3 Update Adobe Acrobat and Reader 6.0.3 Update Adobe Atmosphere Player for Acrobat and Adobe Reader Adobe Photoshop 7.0 Adobe Photoshop CS Adobe Reader 6.0.1 AlfaClock version 1.83 Free Edition AOL Instant Messenger Apple Software Update ATI Display Driver Avanquest update AvantGo Client avast! Antivirus AVG Anti-Spyware 7.5 Beta 1.0.3 Bloglines Notifier 3.0 CleanUp! CLIE SCSI Driver Data Export DeepBurner v1.8.0.224 Experience VAIO Google Gmail Notifier Grey Olltwit's Stopwatch GTK+ Runtime 2.6.9 rev a (remove only) HijackThis 1.99.1 HotKey Utility Intel(R) PRO Network Adapters and Drivers InterActual Player Internet Explorer Q832894 iTunes Java 2 Runtime Environment, SE v1.4.0_03 Java Web Start Kaspersky Online Scanner Link Ripper 7 Macromedia Dreamweaver MX Macromedia Extension Manager Macromedia Flash Player 8 Macromedia Shockwave Player MARGI Presenter-to-Go Memory Stick Formatter Microsoft AntiSpyware Microsoft Broadband Networking Microsoft Money 2005 Microsoft Office Professional Edition 2003 Microsoft Office XP Professional with FrontPage Microsoft Upgrade Offer Microsoft Visual C++ 2005 Redistributable MoodLogic Mozilla Firefox (1.5.0.7) Music Visualizer Library 1.4.00 Netscape (7.02) Network Smart Capture Network Stumbler 0.4.0 (remove only) OpenMG Limited Patch 3.2-03-02-21-08 OpenMG Limited Patch 3.2-03-02-25-01 OpenMG Secure Module 3.2 Outlook Express Update Q330994 Palm Desktop Panda ActiveScan PCFriendly POP Peeper PRISM 11Mbps Wireless LAN for Windows Quicken 2003 New User Edition QuickTime reFreshreLoad v1_5 Screen Saver Ringtone Media Studio Rio Music Manager SetBrowser (remove only) Shockwave SmartFix (remove only) SmartFTP SmartFTP Client 2.0 SmartFTP Client 2.0 Setup Files (remove only) SoftK56 Data Fax Sonic Foundry Sound Forge v4.5a SonicStage 1.5.50 Sony Certificate PCH Sony Notebook Setup Sony USB Mouse Sony Utilities DLL Sony Video Shared Library Spybot - Search & Destroy 1.4 SpywareBlaster v3.5.1 Sweepi 5.1 SWF Opener SWiSHmax Talking Alarm Clock Turbo Tax Offer VAIO DeepSea Wallpaper VAIO Help and Support VAIO Media 2.5 VAIO Media Music Server 2.5 VAIO Media Photo Server 2.5 VAIO Media Platform 2.5 VAIO Media Redistribution 2.5 VAIO Media Setup 2.5 VAIO Registration VAIO Support VAIO Survey Standalone VAIO Wireless Utility Viewpoint Manager (Remove Only) Viewpoint Media Player VindigoLink Weather Pulse Winamp (remove only) Windows Installer 3.1 (KB893803) Windows Media Format Runtime Windows Media Player Hotfix [See wm828026 for more information] Windows Tetris 1.01 Windows XP Hotfix - KB821253 Windows XP Hotfix - KB821557 Windows XP Hotfix - KB823182 Windows XP Hotfix - KB823559 Windows XP Hotfix - KB823980 Windows XP Hotfix - KB824105 Windows XP Hotfix - KB824141 Windows XP Hotfix - KB824146 Windows XP Hotfix - KB825119 Windows XP Hotfix - KB828028 Windows XP Hotfix - KB828035 Windows XP Hotfix - KB842773 Windows XP Hotfix - KB887811 Windows XP Hotfix (SP2) Q329441 Windows XP Hotfix (SP2) Q811493 Windows XP Hotfix (SP2) Q814033 Windows XP Hotfix (SP2) Q815021 Windows XP Hotfix (SP2) Q817287 Windows XP Hotfix (SP2) Q817606 WinHTTrack Website Copier 3.30 WinPatrol WinRAR archiver WinZip Wireless LAN Wireless Manager XoftSpy Yahoo! Messenger YahooPOPs! 0.6 YOU DON'T KNOW JACK Volume 2 -------- uninstall log end---------------------------------- yep everything has been fine since the first set of tools we ran. much appreciated.

10-22-2006, 09:07 PM	#23 (permalink)
woozygrrl Registered User Join Date: Oct 2006 Posts: 13 OS: winxp	I really appreciate the help. i cant thank you enough. everything is running great and all steps have been completed. you've been great. -marina-

10-23-2006, 06:04 AM	#24 (permalink)
Eclipse2003 TSF Enthusiast Join Date: Apr 2005 Location: Ohio Posts: 1,114 OS: XP	Glad we could help