Jump to content


Photo

please help-me to remove this hijacker


  • Please log in to reply
13 replies to this topic

#1 slnn

slnn

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 25 May 2004 - 02:39 PM

Hi, i new here. I read he tutorial to remove the hijacker but didn't work...

the log file of hijack this:

Logfile of HijackThis v1.97.7
Scan saved at 16:28:38, on 25/5/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Arquivos de programas\MSN Messenger\msnmsgr.exe
C:\Arquivos de programas\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Arquivos de programas\Internet Explorer\iexplore.exe
C:\Documents and Settings\Apollo da Geb\Configurações locais\Temp\Diretório temporário 15 para hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\jon.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\jon.dll/sp.html (obfuscated)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\jon.dll/sp.html (obfuscated)
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\jon.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\jon.dll/sp.html (obfuscated)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\jon.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {40826CF6-678B-456C-ABDE-8ACA6C77D5D3} - C:\WINDOWS\System32\jon.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\..\{19567317-1E0E-41D3-94E6-9CB282A6814D}: NameServer = 200.221.11.100 200.221.11.101
O17 - HKLM\System\CS1\Services\Tcpip\..\{19567317-1E0E-41D3-94E6-9CB282A6814D}: NameServer = 200.221.11.100 200.221.11.101

#2 slnn

slnn

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 27 May 2004 - 04:57 PM

Bump

#3 slnn

slnn

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 28 May 2004 - 11:10 AM

bump!!!

#4 Gramps

Gramps

    Member

  • New Member
  • Pip
  • 1 posts

Posted 28 May 2004 - 02:45 PM

bump up

#5 slnn

slnn

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 30 May 2004 - 02:40 PM

Help PLEASE!!!

#6 slnn

slnn

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 30 May 2004 - 06:39 PM

anybody help me!!!!!!!!!!!!!!!

#7 slnn

slnn

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 31 May 2004 - 04:47 PM

Bump again!!!!!! :grrr:

#8 slnn

slnn

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 02 June 2004 - 06:58 AM

I'm over here!!!!!!!!!!!! Plese help-me!!!!!!!!!

#9 slnn

slnn

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 03 June 2004 - 07:28 AM

:techsupport: :techsupport: !!!!!!!!!!!!!!

Ahhhh, help me please!!!!!!!!!!
:blush: :blush: :blush:

#10 slnn

slnn

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 04 June 2004 - 06:30 AM

Why nobody help-me... I format my HD, but the problem come back....

#11 slnn

slnn

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 07 June 2004 - 05:52 PM

I give up!!!

In this forum nobody help :thumbsdown: :thumbsdown: :thumbsdown:

#12 the_smiling_bone

the_smiling_bone

    Member

  • New Member
  • Pip
  • 3 posts

Posted 07 June 2004 - 06:59 PM

Patience is a virtue. Despite the number of helpers here, it can take awhile to help someone.

http://www.spywarein...his new version

#13 slnn

slnn

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 08 June 2004 - 08:47 AM

Patience is a virtue but who not help do not confuse:rofl:

Edited by slnn, 08 June 2004 - 08:50 AM.


#14 the_smiling_bone

the_smiling_bone

    Member

  • New Member
  • Pip
  • 3 posts

Posted 08 June 2004 - 03:32 PM

You are looking at it the wrong way. These people DO want to help people, but they cant reply to every new request for help since they got their hands full with helping everyone else. They will eventually get here to help.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button