1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

XP log file\Hijackthis scan\explain

Discussion in 'Windows XP' started by jennyandalin, Mar 3, 2003.

Thread Status:
Not open for further replies.
  1. jennyandalin

    jennyandalin Thread Starter

    Joined:
    Feb 14, 2003
    Messages:
    3
    Internet explorer has been launching itself and coming up with multiple screens and script errors. I ran a scan of Hijackthis. Here is a sample. Please advise on how to proceed.
    Platform: XP SP1 (winNT 5.01.2600)
    MSIE:Internet Explorer v 6.00 SP1 (6.00.2800.1106)
    R1-HKCU\Software\Microsoft|Internet Explorer\Main,search.Bar=http://www.commonname/english/toolbar/sidebar.asp
    There are 3 of theese with different web addresses
    Two more start with HKLM\ and continue as above
    01-Hoasts:216.177.73.139 auto.search.msn.com
    There are 4 of these with different addresses
    02-BHO(no name) {lots of letters and #}-c:\Windows\System32\FOne.d11
    Other prefixes include:
    HKCU
    Global Startup
    Extra content menu item
    Extra button
    Hijacked internet access By New.Net
    DPF
    etc...
    Please help !!
    Thanks----Aline
     
  2. The_Egg

    The_Egg

    Joined:
    Sep 16, 2002
    Messages:
    1,157
    Those 3 examples are:

    CommonName Toolbar (aka: CNBabe / WinNet)
    http://doxdesk.com/parasite/CommonName.html

    New.Net domains (NewDotNet browser hijacker)
    http://doxdesk.com/parasite/NewDotNet.html

    Favorite Man (Fone.DLL)
    http://www.doxdesk.com/parasite/FavoriteMan.html

    These are notorious spyware/scumware/parasiteware items usually installed by file-sharing programs such as Kazaa, Morpheus, Grokster, iMesh, Limewire, Audiogalaxy, Bearshare, and more.

    Further info here


    I strongly suggest you uninstall whichever p.o.s. p2p program you installed, and then download and install Spybot Search & Destroy

    Close all browser windows

    Open Spybot S&D for the first time
    Select Country & click out of the setup section (Next button)

    Click "Online" button, click "check for updates"
    (note: you need to be online for this)
    Checkmark and download the latest Includes/Updates
    (skins/languages aren't important)

    "Settings" button, click "File Sets"
    Uncheck "Usage Tracking" and "System Internals"

    Go back to main "Spybot S&D" button
    Click "Check for problems"

    Let the scan run

    When done, all spyware/adware/etc will be auto checked in the results,
    so just click "Fix selected problems"

    If you are prompted that some files are in use and can't be deleted,
    Click "Yes" to allow Spybot S&D to run on reboot.

    Reboot
    Spybot S&D will load before the Windows GUI
    Run the scan again and let Spybot S&D complete its task.
    When you see "congratulations, no spybots found" in the main window,
    that's when you know you're clean.

    Close Spybot S&D and Windows GUI will load.


    If you want, you can also download and run StartUpList and post the result file here. If you do this before and after running Spybot S&D, we can then keep tabs on the progress and maybe offer further advice/tips. :)
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/121918

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice