Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Name: nathany2k
ok i have found out my search page was hijacked i deleted the file that was doing it but now i have no search page all i want is to have my msn search page back i have been over about 100 posts and many site no probelm fing out how to remove hijacker but nothing on getting old page back help please

IE properties...Rt click on IE > properties> reset web settings> it will ask if you want webpage set ack to default too....say yes..will reset it.> Dont reboot yet...download program called "hijack this" run scan save log file and post results here...If tom41 answers...follow what he says...he good. You can also download spybot search and destroy...it catches lotsa junk that messes with yer browser and a whole lot of other stuff....just be sure to up[date it...there is patch in spybot update to prevent crash problem they had...then run scan and fix all selected
good luck

Logfile of HijackThis v1.95.0
Scan saved at 10:02:46, on 11/07/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Personal Firewall\NISUM.exe
C:\Program Files\Norton Personal Firewall\ccPxySvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\PROGRA~1\NORTON~2\SPEEDD~1\nopdb.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\nathan\Local Settings\Temp\Temporary Directory 1 for hijackthis[2].zip\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://g.msn.co.uk/0SEENGB/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://uk.my.yahoo.com/?myHome
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=203
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\System32\blank.htm
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: Packard Bell (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dllthis is what i got from hijackethis
i have used this already i took away things that never had a name
i found the file that was taking my search page over by taking part of its name and search for any files or folder then i deleted it
hope i havent made things worst

![]() |
XP/Linux prob after Ghost
|
Windows Product Activatio...
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |