Computing.Net > Forums > Security and Virus > browser hijacked

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

browser hijacked

Reply to Message Icon

Name: bigab
Date: December 16, 2008 at 16:38:31 Pacific
OS: Windowns XP SP3
CPU/Ram: Pentium 4 3Ghz/ .5 g
Product: Del / DIMENSION 3000
Comment:

I recently have encountered a Internet Hijacker I cannot get rid of. I have run the following with all the current updates:

Norton Internet Security
Disk Cleanup
AdAware
Windows Advance System Care
Disk Defragmentor
Malwarebytes Anti-malware


The only one that picks anything up is Malwarebytes Anti-malware as the following:


C:\windows\system32\B.tmp

C:\windows\system32\C.tmp


It cleans them off just fine and it works maybe for a half hour. I get redirected all over the place, but this has taken my DSL speed from moderately 3Mbps to 21 Kbps - yeah slower than a 56k modem and it's really frustrating. I have toyed with the thought of reformatting, but I have so much on my computer. I have my service through Verizon and they have tested the on site line speed and it is good. I have a home network and even when I remove the router I get the same poor results. I defaulted the router and reconfigured it to see if that makes a difference, but it does not. Additionally, it seems the other computer on my network operates wonderfully, but also suffers from the slow speeds of the Internet which made me thin ISP. I used the hijack this auto analyzer and these two come up with question marks

O20 - AppInit_DLLs: C:\WINDOWS\System32\extmgr32.dll

O20 - Winlogon Notify: dc2691f5509 - C:\WINDOWS\System32\extmgr32.dll

I tried to manually remove using the Hijack This utility, but they come right back after a reboot.


Please help!



Sponsored Link
Ads by Google

Response Number 1
Name: jabuck
Date: December 16, 2008 at 16:43:34 Pacific
Reply:

Are you using a router?

Once you get SDFix downloaded go offline and turn of your antivirus and any antispyware that you have, run SDFix from safe mode and restart the Antivirus before you get back on line to post the log.

Download SDFix.exe and save it to your Desktop.
Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with SDFix or remove some of its embedded files which may cause "unpredictable results".
Click on This Link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
Remember to re-enable the protection again afterwards before connecting to the Internet.

1.Double click SDFix.exe and choose Install to extract it to its own folder on the Desktop. Please then reboot your computer in Safe Mode by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select the first option, to run Windows in Safe Mode, then press "Enter".
Choose your usual account.
2. Open the c:\SDFix folder and double click RunThis.cmd to start the script.
Type Y to begin the script.
It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
3. Your system will take longer that normal to restart as the fixtool will be running and removing files.
When the desktop loads the Fixtool will complete the removal and display Finished, then press any key to end the script and load your desktop icons.
4. Finally open the SDFix folder on your desktop and copy and paste the contents of the results file Report.txt


0

Response Number 2
Name: XpUser4Real
Date: December 16, 2008 at 23:57:02 Pacific
Reply:

bigab, you may have to turn your system
restore off to remove the problems

Some HELP in posting on Computing.net plus free progs and instructions Cheers


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: browser hijacked

Browser Hijack www.computing.net/answers/security/browser-hijack/13936.html

Browser hijacking www.computing.net/answers/security/browser-hijacking/8374.html

Browser Hijacking www.computing.net/answers/security/browser-hijacking/6714.html