Jump to content


browser hijacked need help

  • This topic is locked This topic is locked
3 replies to this topic

#1 nikster



  • Full Member
  • Pip
  • 3 posts

Posted 23 May 2004 - 12:32 PM

hi ,
i keep getting about blank coming up as my startpage tried ad adaware ,spybot,pestpatrol and cwshredder in safe mode but its coming back all the time

heres my hijack this log

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\pabfdaa.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\pabfdaa.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\pabfdaa.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\pabfdaa.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\pabfdaa.dll/sp.html (obfuscated)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\pabfdaa.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1.1\SDHelper.dll
O2 - BHO: (no name) - {A25706EF-87AE-4642-82FC-B407248034D7} - (no file)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O2 - BHO: (no name) - {C5750D7B-D381-4E24-8229-F08A1C19297D} - C:\WINDOWS\System32\pabfdaa.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

i would really appreciate some guidance i have beat some hijackers before but this one is really bugging the crap out of me.

#2 tpwaco



  • New Member
  • Pip
  • 3 posts

Posted 23 May 2004 - 12:57 PM

go to lava soft.com and check out ad ware. It go rid of it for me Make sure you get the updated version. Good luck...It took me 2 weeks to find a fix.

#3 nikster



  • Full Member
  • Pip
  • 3 posts

Posted 23 May 2004 - 01:15 PM

thanks tony i'll give that a try .this one has been bugging me for a week now


#4 nikster



  • Full Member
  • Pip
  • 3 posts

Posted 23 May 2004 - 03:24 PM

okay updated adaware to 6 and it fixed the problem.

if anyone has the same problem they may notice notepad has stopped working as a side effect of cool web search removal(or) infection i found if you install this notepad found here
into your windows/win32 folder and delete the old notepad and hey presto

try again mr cws

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button