Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hijackthis Log Needing Review And Fix Suggestions


  • Please log in to reply
1 reply to this topic

#1 jpi

jpi

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:06:52 AM

Posted 05 November 2007 - 07:13 AM

Hi,

A friend used a flashdrive on my laptop a couple days ago and ever since my IE home page has been stuck on www.sujin.com.np . The page says a bunch of stuff about Apache software being installed on my system by the web server administrator. Anyway...neither Norton or Adaware seem to recognize it (hijack/virus/malware/whatever it is). Spybot S&D (Resident) recognizes that something is trying to change the Registry (key?) and prevents it from doing so- prevents it from changing the homepage from my homepage back to www.sujin.com.np but everytime it prevents it from doing so (about every three seconds) I get an annoying pop up message (I can't seem to turn it off) from the Spybot S&D Resident that it has prevented the start(home) page from being changed. While Spybot S&D recognizes and prevents itthe problem it can't seem to fix it. On the hijackthis log you will see "R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Sujin.com.np" listed. I believe this is where the problem is since "Sujin.com.np" is the symptom of the hijack (?). I don't know what to do from here and could use some help. The log is attached. Thanks,

jpi

Attached Files



BC AdBot (Login to Remove)

 


#2 AndyManchesta

AndyManchesta

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Manchester, UK
  • Local time:06:52 AM

Posted 24 November 2007 - 03:13 AM

Hi jpi, Welcome to the forum,

We are sorry for the delay in responding. The volunteers here are swamped and unfortunately not all logs get answered as quickly as we'd like. If you still require assistance please post a new HijackThis log into this topic and I'd be happy to help you clean up the machine.

Thanks

Andy




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users