Jump to content


Browser HiJack

  • Please log in to reply
1 reply to this topic

#1 captzap



  • New Member
  • Pip
  • 1 posts

Posted 30 June 2004 - 11:40 PM

A friend of mine in another city has a browser hijack and HIJACKTHIS reports the following.

Posted Image

I had them remove all the R*, O2 BHO (no name) & the 2) O4 RunOnce files and the page still returns. Any other suggestions.

Thanks, CaptZap

#2 Scoff


    SWI Junkie

  • Retired Staff
  • PipPipPipPip
  • 294 posts

Posted 06 July 2004 - 02:46 AM

There is a special tool required to remove this hijack. Get another fresh hijackthis log and copy and paste the text of it here (rather than image attaching it) here and we'll look at it. The files responsible morph so they probably won't be the same now. Ideally he needs to avoid using IE after creating the log. Downloading and using Mozilla's firefox to use in the meantime would help.

We've heard that a million monkeys at a million keyboards could produce the complete works of Shakespeare; now, thanks to the Internet, we know that is not true. - Robert Wilensky

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button