Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hijack This Error!


  • Please log in to reply
14 replies to this topic

#1 Nuko

Nuko

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:04:02 AM

Posted 20 April 2006 - 03:26 AM

As you may have read in the description i have Surf Sidekick 3 installed on my computer, yes i have read the tut on getting rid of it, but i cant open hijack this, i downloaded it, extracted it etc then as soon as i go to run it i click on do a system scan and i get this msg:
"An Unexpected error has occured at procedure: modMain_CheckOther1Item()Error #75 - Path/File access error"

The message then goes on to say email merijn@spywareinfo.com which i have done and yet to receive a reply :thumbsup: . SO I was wondering if any 1 here could help me out so i can use hijack this to get rid of Surf Sidekick 3!

Thanks in advance
Nuko

BC AdBot (Login to Remove)

 


#2 Albert Frankenstein

Albert Frankenstein

  • Members
  • 2,707 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Michigan, USA
  • Local time:05:02 AM

Posted 20 April 2006 - 10:26 AM

Try uninstalling HJT by going to Start > Control Panel > Add/Remove Programs

Reboot your computer.

Download a new copy of HJT by clicking on THIS.

Install and see if works now.

Edited by Albert Frankenstein, 20 April 2006 - 10:26 AM.

ALBERT FRANKENSTEIN
I'M SO SMART IT'S SCARY!


Currently home chillin' with the fam and my two dogs!


#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,056 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:02 AM

Posted 20 April 2006 - 12:15 PM

Make sure you place and run HijackThis in its own folder (i.e. C:\HJT). DO NOT run it from within a zip manager, a temporary folder or the from the Desktop.

Was this the complete error message? If so, look at the last line.

An unexpected error has occurred at procedure: modMain_CheckOther1Item()
Error #75 - Path/File access error

Please email me at merijn@spywareinfo.com, reporting the following:
* What you were trying to fix when the error occurred, if applicable
* How you can reproduce the error
* A complete HijackThis scan log, if possible

Windows version: Windows NT 5.01.2600
MSIE version: 6.0.2900.2180
HijackThis version: 1.99.1

This message has been copied to your clipboard.
Click OK to continue the rest of the scan.


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 Nuko

Nuko
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:04:02 AM

Posted 20 April 2006 - 10:30 PM

Albert Frankenstein: I tryed this still no luck, i managed to remove it but now whenever i type in hijackthis in google or wateva and go to the page it shutsdown my browser :thumbsup: maybe my computer doesn't like any references to hjt.

Quietman7: Yes HJT was in its own folder in C: Drive and that was the full message that was displayed, but the message was only displayed for a split second before the program shut itself down, i had to try several times to read the message through and then a few more times to printscreen it.

I'm at a total loss at what to do, can any1 help me?

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,056 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:02 AM

Posted 21 April 2006 - 04:51 AM

Here are links to three direct downloads so you should not have to use google

Hijackthis 1.99.1 autoinstall
Alternate download site.
Alternate download site.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 Nuko

Nuko
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:04:02 AM

Posted 21 April 2006 - 06:00 AM

Tryed them all, still same thing HJT shutsdown as soon as i open in it... Dammit this is really making me angry, because i need HJT to get rid of Surf Sidekick 3

#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,056 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:02 AM

Posted 21 April 2006 - 06:20 AM

Try downloading and using an earlier version of Hijackthis (v.1.982) from here or here. Unzip the file into its own folder C:\HJT. If that works it will at least get you started. Make sure you post your log with a note explaining why you used this older version.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#8 Nuko

Nuko
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:04:02 AM

Posted 21 April 2006 - 06:57 AM

DAMMIT, it still didn't work, i am wondering will a windows system restore work for getting rid of this, or formatting c drive??

#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,056 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:02 AM

Posted 21 April 2006 - 09:51 AM

System Restore may work if you can find a good restore point prior to the infection.

Symantec has removal instructions without using HJT here but it requires backing up and working with the registry after uninstalling SurfSideKick using Add/Remove Programs in Control Panel.

However, another thing to keep in mind is that sometimes malware can keep Hijackthis from working properly and you may have other malware on your system besides SurfSidekick that is interfering with it. Here are a few safe things to try first.

Download and scan with CWShredder. - zipped version.
Stand-alone Exe
Stand-alone Exe
1. Double-click on cwshredder.exe to start the program.
2. Click the "Check for Update" button to ensure you have the latest version.
3. Click the "Fix" button (not "Scan Only").
4. Let it run completely and fix whatever if finds.
5. When the scan is completed and all files are removed, close the program.

If CWShredder does not run, a variant of CWS could be preventing it from running. In that case, download CoolWebSearch.Smartkiller Miniremoval Tool [delcwssk.zip].
Save/unzip it to a new folder named C:\CWS.
Open the folder and double-click miniremoval_coolwebsearch_smartkiller.exe to run and remove the variant of CoolWebSearch that is stopping CWShredder from running. Then try running CWShredder again.

Download Hoster
1. Extract the zip file to your desktop or a permanent folder on your hard drive.
2. Open the folder and double-click on the Hoster.exe
3. Press "Restore Original Hosts"
4. Press "OK" and exit the program

Note: if you were using a custom Hosts file you will need to replace any of those entries yourself.

Then try running Hijackthis again using the newest version in the links we originally gave you.

If no success continue as follows (you should be using Ad-aware and Spybot anyway):

If your running Win XP/2000, download and scan with Ewido Anti-Malware v3.5
Ewido Install and Scan Instructions

Download and scan with Ad-Aware SE Personal. Setup & Configure as shown here.
Download and scan with Spybot S&D 1.4. Setup & Configure as shown here.
[DO NOT choose the option to install TeaTimer]

Perform these online Virus scans:
[Watch the Address bar in IE. You may receive alerts that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component.]
Trend Micro Housecall Scan
Panda ActiveScan [ActiveScan Panda does not remove adware/spyware but will autoclean for viruses & worms.]

Then try running Hijackthis again. If you do get Hijackthis to run properly, I suggest you read and follow all instructions in the pinned topic titled Preparation Guide For Use Before Posting A Hijackthis Log. When you have done that, post a log in the HijackThis Logs and Analysis Forum, not here, for assistance by the HJT Team Experts.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#10 Nuko

Nuko
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:04:02 AM

Posted 21 April 2006 - 11:02 PM

Thankyou for all your help, i'm trying those things u suggested now

#11 Nuko

Nuko
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:04:02 AM

Posted 21 April 2006 - 11:10 PM

Ok, i'm up the Hoster bit, now when i open up Hoster i get this message "ERROR: Cannot open file C:\WINDOWS\system32\DRIVERS\ETC\Hosts" I click ok and it exits out of the program, whats that about?

#12 Nuko

Nuko
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:04:02 AM

Posted 21 April 2006 - 11:12 PM

One other thing, i'm using Firefox, would that effect the online scanners by any chance?

#13 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,056 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:02 AM

Posted 22 April 2006 - 06:29 AM

ZoneAlarm and other programs block access to the HOSTS file rather than just set the read-only attribute on the file as added protection. If your using ZA or a security program that blocks access, you need to temporarily disable it.

Trend Micro Housecall Scan for Firefox

If you cannot use IE to run your online scans and have Firefox, then install the IE Tab add-on extension. This should allow you to perform the scans through Firefox.

Install the Add-on from here.

After install, close & restart Firefox. Then you right click on the page (tab) you want to use in IE tab. This allows you to switch rendering engine.

If you go to View > Toolbars > make sure Bookmark Toolbar is checked. Then click "Customize" and look for the little IE logo. Click on that icon and drag it to your toolbar under the menu. This makes it much easier to use.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#14 Nuko

Nuko
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:04:02 AM

Posted 24 April 2006 - 02:19 AM

Ok, ive run the scans, few things picked up but surf sidekick is still on my computer, and i still can't open hijackthis, anything else come to mind?

#15 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,056 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:02 AM

Posted 24 April 2006 - 08:43 AM

Are you still getting the same error message or is hijackthis just opening & closing immediately afterwards?

You can try theself-help tutorial How to remove Surf Sidekick 2/2 . You will just have to skip the step for using hijackthis until you can get it working.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users