Jump to content


Photo

Help me with about:blank


  • Please log in to reply
1 reply to this topic

#1 trepeter

trepeter

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 31 July 2004 - 04:07 PM

Please someone help me, have had it for months...
Here's the log

Logfile of HijackThis v1.98.0
Scan saved at 23:05:58, on 2004-07-31
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\System32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\Explorer.EXE
E:\Program\ATI Technologies\ATI Control Panel\atiptaxx.exe
E:\Program\Java\j2re1.4.2_04\bin\jusched.exe
E:\Program\MSN Messenger\MsnMsgr.Exe
E:\WINDOWS\System32\tcpsvcs.exe
E:\WINDOWS\System32\snmp.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\System32\devldr32.exe
E:\WINDOWS\System32\wuauclt.exe
E:\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://E:\DOCUME~1\Dimberg\LOKALA~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://E:\DOCUME~1\Dimberg\LOKALA~1\Temp\sp.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.tele2.se
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://E:\DOCUME~1\Dimberg\LOKALA~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://E:\DOCUME~1\Dimberg\LOKALA~1\Temp\sp.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://E:\DOCUME~1\Dimberg\LOKALA~1\Temp\sp.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://E:\DOCUME~1\Dimberg\LOKALA~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Tele2
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Lšnkar
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {6B28A765-4D46-4C7D-908E-EF1091782C8E} - E:\WINDOWS\System32\cilgada.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ATIPTA] E:\Program\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Openwares LiveUpdate] C:\Program Files\LiveUpdate\LiveUpdate.exe
O4 - HKLM\..\Run: [zSPGuard] e:\program\pjw\spguard\spguard.exe /s /r
O4 - HKLM\..\Run: [Settings Sentry] E:\Program\SpyBlocker Software\Settings Sentry\startss.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] E:\Program\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKCU\..\Run: [MsnMsgr] "E:\Program\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Microsoft Office.lnk = E:\Program\Microsoft Office\Office10\OSA.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://E:\Program\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program\Messenger\MSMSGS.EXE
O14 - IERESET.INF: START_PAGE_URL=http://start.tele2.se
O17 - HKLM\System\CCS\Services\Tcpip\..\{766A579F-372F-4E3D-8FED-57A2EADE05F6}: NameServer = 130.244.127.161 130.244.127.169
O17 - HKLM\System\CCS\Services\Tcpip\..\{8333E7F4-E3E5-48E6-8193-4F67A2F03190}: NameServer = 195.67.199.2,195.67.199.3
O17 - HKLM\System\CCS\Services\Tcpip\..\{D6703AE2-E056-4919-AFA3-862F0E489EBB}: NameServer = 195.67.199.2,195.67.199.3
O18 - Filter: text/html - {C165CB3D-D83E-4CD5-B171-AB0186C2E29B} - E:\WINDOWS\System32\cilgada.dll
O18 - Filter: text/plain - {C165CB3D-D83E-4CD5-B171-AB0186C2E29B} - E:\WINDOWS\System32\cilgada.dll

/Peter

#2 trepeter

trepeter

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 31 July 2004 - 06:14 PM

FINALLY!!!

I have finally managed to get free from this nasty troja!
WOHO! Boy i am so happy. :bounce:

It took me just 3 months or so to figure out how ;)
WIEE!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button