Computing.Net > Forums > Windows XP > search page hijacked

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

search page hijacked

Reply to Message Icon

Name: nathany2k
Date: July 10, 2003 at 16:55:19 Pacific
OS: windows xp home
CPU/Ram: pentium 4 2.8 ghz 512mb r
Comment:

ok i have found out my search page was hijacked i deleted the file that was doing it but now i have no search page all i want is to have my msn search page back i have been over about 100 posts and many site no probelm fing out how to remove hijacker but nothing on getting old page back help please



Sponsored Link
Ads by Google

Response Number 1
Name: blender
Date: July 10, 2003 at 17:39:24 Pacific
Reply:

IE properties...Rt click on IE > properties> reset web settings> it will ask if you want webpage set ack to default too....say yes..will reset it.> Dont reboot yet...download program called "hijack this" run scan save log file and post results here...If tom41 answers...follow what he says...he good. You can also download spybot search and destroy...it catches lotsa junk that messes with yer browser and a whole lot of other stuff....just be sure to up[date it...there is patch in spybot update to prevent crash problem they had...then run scan and fix all selected
good luck


0

Response Number 2
Name: nathany2k
Date: July 11, 2003 at 02:16:36 Pacific
Reply:

Logfile of HijackThis v1.95.0
Scan saved at 10:02:46, on 11/07/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Personal Firewall\NISUM.exe
C:\Program Files\Norton Personal Firewall\ccPxySvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\PROGRA~1\NORTON~2\SPEEDD~1\nopdb.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\nathan\Local Settings\Temp\Temporary Directory 1 for hijackthis[2].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://g.msn.co.uk/0SEENGB/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://uk.my.yahoo.com/?myHome
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=203
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\System32\blank.htm
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: Packard Bell (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

this is what i got from hijackethis

i have used this already i took away things that never had a name

i found the file that was taking my search page over by taking part of its name and search for any files or folder then i deleted it

hope i havent made things worst


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


XP/Linux prob after Ghost Windows Product Activatio...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: search page hijacked

ie home page hijacking www.computing.net/answers/windows-xp/ie-home-page-hijacking/118435.html

XPSN Search engine Hijack www.computing.net/answers/windows-xp/xpsn-search-engine-hijack/96672.html

Search Engines Hijacked!? www.computing.net/answers/windows-xp/search-engines-hijacked/79830.html