Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Domain Hijack


  • This topic is locked This topic is locked
2 replies to this topic

#1 marell16

marell16

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:12:48 AM

Posted 29 January 2008 - 09:41 PM

Hi,

Please be patient as I am not very familiar with these processes.

I have a problem.

I first ran into this problem when i started being "redirected" from internet email. A 'Hijack This' scan (log file attached) shows a domain hijack (017). (my operating system is XP Pro).

"Hijack This' will delete it but it would create its own backup on my desktop. This would also delete but reinstall on reboot. Even with the 'create backup' deselected it would create a backup file anyway. This would also delete but would re-install itself on reboot. I disabled 'System Resore' but this did not help. I also tried 'Hijack This' misc tools to delete on reboot. This appeared to work but it now reinstalls itself with IPS log-in or IE being opened.

Right now I am not seeing anything overtly disruptive but , bottom line it is still there.

Any help is much appreciated.

Thanks,
Mark

Attached Files



BC AdBot (Login to Remove)

 


#2 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:12:48 PM

Posted 11 February 2008 - 03:47 PM

Hello marell16,

Welcome to Bleeping Computer :thumbsup:

Sorry about the delay.:blink: If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.

Thanks,
tea
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#3 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:12:48 PM

Posted 25 February 2008 - 07:09 PM

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users