Home > Windows 98 > Windows 98 Browser Hijacked! Need Help With Reading HijackThis Log.

Windows 98 Browser Hijacked! Need Help With Reading HijackThis Log.

Privacy Policy Support Terms of Use Forums DaniWeb IT Discussion Community Forums Join Log In Read Respond Contribute Hardware and Software Programming Digital Media Community Center Home Forums Hardware and Software It'll work :-). 0 LVL 2 Overall: Level 2 Message Assisted Solution by:Frank2005 Frank2005 earned 100 total points ID: 135403212005-03-14 Have you tried the Beta of MS Spyware? Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy

Here is my hijackthis log. (THis is on a win98 box): ========================================================== Logfile of HijackThis v1.99.1 Scan saved at 4:02:22 PM, on 3/14/05 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet http://internetpasswordpro.com/windows-98/windows-98-hijacked.html

Please delete all files that are found there. I rebooted in Safe Mode my Win 98 system and deleted the strange files from C:\windows. I have opened another application before I open Juno, and then the browser has no problems opening and staying operational. If you have any suggestions or observations about this log please post them. http://www.bleepingcomputer.com/forums/t/21637/web-browser-freezing-up-hijack-this-log/

How can I make it available? 0 OPDiscussion Starter Perrom 12 Years Ago I tried another way. Please do both steps:Step 1:Delete Temp FilesTo clean out your temp files, click on Start and then run, and type %temp% and press the ok button.This should open up the temp It's ok for this scan to do in normal mode only because I just need the log (and we aren't cleaning with that tool) But, I thought you said you couldn't Thank You for Submitting an Update to Your Review, !

  1. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
  2. Lawrence AbramsFollow us on Twitter!Follow us on FacebookCircle BleepingComputer on Google+!How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!Simple and easy ways to keep your
  3. Here in the forums, replies are posted to topics only.
  4. Logfile reports: In addition to presenting scan results in the main interface viewing window, this app also lets you save them to your computer as a log file.
  5. Along these same lines, the interface is very utilitarian.
  6. Lawrence AbramsFollow us on Twitter!Follow us on FacebookCircle BleepingComputer on Google+!How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!Simple and easy ways to keep your

Here in the forums, replies are posted to topics only. They found some cookies and some registry keys from Windows Media Player but didn't solve anything. When the tool is finished, please reboot back into normal mode, and post the entire contents of the log.txt file in the QooFix9x folder. Scan with hijackthis and tick the boxes next to all the following entries, then close all browser and explorer windows, and hit the "Fix checked" button.

I am grateful. Here are the names of all weird files I found in C:\windows : ajebxyw.exe < the one that substituted tcplddh.exe bsmjwyl.exe ejumeup.exe fknngxc.exe jgrmlfs.exe < the one you pointed out jlksgyv.exe Well done Perrom- excellent intuition and troubleshooting on your part. here Die Datenbank der Online-Analyse wird nicht mehr gepflegt.

I can collect it from there.You DO NOT need to be a member to upload, anybody can upload the filesYou will not see the files that have been uploaded as they Solved Browser Hijack Problems (HiJackThis Log Attaced) Please Help!!! That is why I ran BitDefender in normal mode. Backing up files: Done!

Thank you very much! If so, let us know. 0 dlh6213 27 12 Years Ago You should also go to Windows Update and get the Critical Updates for your system :) 0 OPDiscussion Starter Perrom Here in the forums, replies are posted to topics only. That makes it easy to refer back to it later, compare the results of multiple scans, and also to get help and advice from other users on forums when you're trying

When it is done, your Temporary Internet Files will now be deleted.Finally, and definitely the MOST IMPORTANT step, click on the following tutorial and follow each step listed there:Simple and easy Get More Info If so, see if there's any helpful information within the found key. So, I have run Ad-aware, Spybot S&D, Norton, and CWS Shredder a dozen or so times, and this browser hijack keeps coming back. Back to top #22 LS CalamityJane LS CalamityJane Former Lavasoft Staff Members 8814 posts Posted 18 June 2006 - 05:50 PM I really just need a log to see what is

would they have access to any of my files? Please do NOT send Private Messages to Staff or helpers to request assistance! All have random names of 7 letters, size of 46,592 bytes and were last modified on 01/20/05.... useful reference O4 - Startup: Controller.LNK = C:\Programmi\Symantec\WINFAX\WFXCTL32.EXE O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL O16 - DPF:

Cons Need experience: The scan results that this app generates are not lists of malicious programs or files. Once the program opens, choose the "Find..." option under the Edit menu to bring up the search window, paste one of CLSIDs from the suspect filenames into the search box, perform Look for the *New Topic* Button near the top right when viewing the forums.

Please do NOT send Private Messages to Staff or helpers to request assistance!

Thank you for your understanding and cooperation!Plus and Pro Ad-Aware users (only) may use the Support Center for personal assistance:Support CenterMicrosoft MVP/Windows - Security 2003-2009 Back to top Prev Page 2 If you are experiencing a similar issue, please ask a related question Suggested Solutions Title # Comments Views Activity Adding site to local intranet security. 4 52 2016-07-19 Possibility of Outlook Here is the result in my HijackThis log:Logfile of HijackThis v1.99.1Scan saved at 9:42:09 PM, on 06/16/2005Platform: Windows 98 SE (Win9x 4.10.2222A)MSIE: Internet Explorer v5.50 (5.50.4134.0600)Running processes:C:\WINDOWS\SYSTEM\KERNEL32.DLLC:\WINDOWS\SYSTEM\MSGSRV32.EXEC:\WINDOWS\SYSTEM\MPREXE.EXEC:\WINDOWS\EXPLORER.EXEC:\TEMP\HIJACKTH.EXEF1 - win.ini: run=hpfschedO3 - Browser Hijacked Started by cwwllc , Jun 15 2006 04:34 AM Prev Page 2 of 4 1 2 3 4 Next Please log in to reply 78 replies to this topic

I also made an online scanning at a site I read about on this forum. It does not need any updates (already included)MicroWorld AntiVirus Toolkit Utility (MWAV)http://www.mwti.net/...s/mwav/mwav.asp (Please note that the FREE version will only scan your computer and NOT clean any infection that it finds.) Look for the *New Topic* Button near the top right when viewing the forums. this page Your message has been reported and will be reviewed by our staff.

Access It Now Question has a verified solution. As a result, false positives are imminent, and unless you're sure about what you're doing, you always should consult with knowledgeable folks before deleting anything. Using the site is easy and fun. Deletion of c:\windows\guwwl.dat succeeded! ************ Removing registry entries: Done!

The log now looks like this: Logfile of HijackThis v1.99.0 Scan saved at 4.35.14, on 25/01/05 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE It seems like my computer is always busy doing his things and when I try to do mine it blocks and have to use the ctrl+alt+del to turn off some backgroud Thank You for Submitting a Reply, ! Here in the forums, replies are posted to topics only.

Only assume anonymity or invisibility in the reverse. Note that your submission may not appear immediately on our site. Several functions may not work. Thank you for your understanding and cooperation!Plus and Pro Ad-Aware users (only) may use the Support Center for personal assistance:Support CenterMicrosoft MVP/Windows - Security 2003-2009 Back to top #37 LS CalamityJane

Here in the forums, replies are posted to topics only. Back to top BC AdBot (Login to Remove) BleepingComputer.com Register to remove ads #2 Grinler Grinler Lawrence Abrams Admin 42,854 posts ONLINE Gender:Male Location:USA Local time:12:34 AM Posted 15 However, I am unable to open the log file. It will be named mwav.log Please do NOT send Private Messages to Staff or helpers to request assistance!

That is good news.