Solved Jzip have stolen my browser home page

July 29, 2011 at 09:23:05
Specs: Windows 7
There is already a fix on tom's guide but I do not understand "FF" where to open it etc.

See More: Jzip have stolen my browser home page

Report •


✔ Best Answer
July 29, 2011 at 14:05:47
gayhalo,

Looks as if you already uninstalled jZip, but some remnants are left…

Please run HijackThis once again
Check the box next to the following entries:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.jzip.com/

O2 - BHO: jZip Toolbar - {1e48c56f-08cd-43aa-a6ef-c1ec891551ab} - C:\PROGRA~1\WIF0E7~1\Datamngr\ToolBar\jzipdtx.dll (file missing)

O3 - Toolbar: jZip Toolbar - {1e48c56f-08cd-43aa-a6ef-c1ec891551ab} - C:\PROGRA~1\WIF0E7~1\Datamngr\ToolBar\jzipdtx.dll (file missing)

O4 - HKLM\..\RunOnce: [removejZipdatamngr] cmd.exe /c RD /S /Q "C:\Program Files\Windows jZip Toolbar"

O4 - HKLM\..\RunOnce: [removejZiptoolbar] cmd.exe /c RD /S /Q "C:\Program Files\Windows jZip Toolbar\Datamngr\ToolBar"

O20 - AppInit_DLLs:
(You may get an error message for this one. If so, disregard.)

Click on: Fix Checked

Now, display hidden files and folders in Windows 7:
Open 'Folder Options' by clicking the Start button
Select: Control Panel
Clicking 'Appearance and Personalization'
And then click 'Folder Options'.
Click the 'View' tab.
Under 'Advanced Settings', click: Show hidden files and folders
ClickL OK


Search for the following folder (in bold), right click on it, and select: Delete
C:\Program Files\Windows jZip Toolbar

Delete the following file (in bold):
C:\PROGRA~1\WIF0E7~1\Datamngr\ToolBar\jzipdtx.dll
If the file is not found, move on.

Restart the computer.

Open Internet Explorer 9
Navigate to the webpage you want to set as the home page.

Click the ‘Tools’ button, and then click ‘Internet Options‘.
To set the current webpage as the home page, click: ‘Use current’
Click: OK


See if you now have the Home Page you like. ;-)

Post back.

~~~~
Retired - Doin' Dis, Dat, and slapping malware.



#1
July 29, 2011 at 09:29:04
FF = FireFox

Is that what you use?

~~~~
Retired - Doin' Dis, Dat, and slapping malware.


Report •

#2
July 29, 2011 at 09:33:51
I don't think so.

Report •

#3
July 29, 2011 at 09:38:17

FireFox is another browser.

If you use Internet Explorer, please do the following so we can see how your system was hijacked, and get rid of it:

Please download the latest version of HijackThis:
http://www.bleepingcomputer.com/fil...

Save to the Desktop.
Double-click on HJTInstall.exe to install the program.
A prompt appears showing that, by default, it installs to:
C:\Program Files\Trend Micro\HijackThis
Click: Install

At the main screen of the program, click on: Do a system scan and save a log file
When done scanning, a log appears on your Desktop.

>>Please post the HijackThis log in your reply.<<


Start HijackThis once again. This time, click on Config > Misc Tools > Open Uninstall Manager

>>Save the Uninstall Manager list to the Desktop, and also post in your reply.<<

~~~~
Retired - Doin' Dis, Dat, and slapping malware.


Report •

Related Solutions

#4
July 29, 2011 at 10:00:22
Here is the logfile


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:59:12, on 29/07/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Trusteer\Rapport\bin\RapportService.exe
C:\Windows\Explorer.EXE
C:\Program Files\Norton AntiVirus\Engine\18.6.0.29\ccSvcHst.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\BT Broadband Desktop Help\btbb\BTHelpNotifier.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Common Files\Bluebeam Software\Brewery\V45\Printer Support\BBPrint.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Printer Pro Desktop\PrinterProDesktop.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\IncrediMail\Bin\IncMail.exe
C:\Program Files\IncrediMail\Bin\ImApp.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Windows\system32\Macromed\Flash\FlashUtil10b.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USCON/2
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?Lin...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.jzip.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USCON/2
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?Lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?Lin...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?Lin...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll
R3 - URLSearchHook: NCH EN Toolbar - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files\NCH_EN\prxtbNCH_.dll
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\Snagit 10\SnagitBHO.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: jZip Toolbar - {1e48c56f-08cd-43aa-a6ef-c1ec891551ab} - C:\PROGRA~1\WIF0E7~1\Datamngr\ToolBar\jzipdtx.dll (file missing)
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: NCH EN - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files\NCH_EN\prxtbNCH_.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\18.6.0.29\IPS\IPSBHO.DLL
O2 - BHO: Google Gears - {743C2EC4-06BA-4CFF-8BC4-B3E33A3AC481} - C:\Users\David Moger\AppData\Roaming\GoogleGears\IE\GoogleGears.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: Ten PDF Creator Toolbar - {C77F8051-03F7-432D-AE30-5B1D19927086} - C:\Program Files\PDFCreator\Toolbar\MaxPDFCreatorToolbar.dll
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\Snagit 10\SnagitIEAddin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: NCH EN Toolbar - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files\NCH_EN\prxtbNCH_.dll
O3 - Toolbar: jZip Toolbar - {1e48c56f-08cd-43aa-a6ef-c1ec891551ab} - C:\PROGRA~1\WIF0E7~1\Datamngr\ToolBar\jzipdtx.dll (file missing)
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [btbb_McciTrayApp] "C:\Program Files\BT Broadband Desktop Help\btbb\BTHelpNotifier.exe"
O4 - HKLM\..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [BbPrintMonitor] C:\Program Files\Common Files\Bluebeam Software\Brewery\V45\Printer Support\BBPrint.exe
O4 - HKLM\..\Run: [BbInstallUser] C:\Program Files\Bluebeam Software\Pushbutton PDF\Bluebeam Admin User.exe
O4 - HKLM\..\RunOnce: [removejZipdatamngr] cmd.exe /c RD /S /Q "C:\Program Files\Windows jZip Toolbar"
O4 - HKLM\..\RunOnce: [removejZiptoolbar] cmd.exe /c RD /S /Q "C:\Program Files\Windows jZip Toolbar\Datamngr\ToolBar"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [PrinterProDesktop] C:\Program Files\Printer Pro Desktop\PrinterProDesktop.exe /autorun
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://novastor.cleverreach.com
O15 - Trusted Zone: http://*.google-analytics.com
O15 - Trusted Zone: http://*.novastor.com
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs:
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_028821c569ae5894\aestsrv.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\Windows\system32\brsvc01a.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: Norton AntiVirus (NAV) - Symantec Corporation - C:\Program Files\Norton AntiVirus\Engine\18.6.0.29\ccSvcHst.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\Blaze Media Pro\NMSAccess32.exe
O23 - Service: NovaStor NovaBACKUP Backup/Copy Engine (nsService) - Unknown owner - C:\Program Files\NovaStor\NovaStor NovaBACKUP\nsService.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - Trusteer Ltd. - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_028821c569ae5894\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: TwonkyMedia - PacketVideo - C:\Program Files\Nokia\Nokia Home Media Server\Media Server\TwonkyMedia.exe
O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe

--
End of file - 14195 bytes


Report •

#5
July 29, 2011 at 10:35:24
And the Uninstall Logfile
DCP-340CW
32 Bit HP CIO Components Installer
Acrobat.com
Acrobat.com
Adobe AIR
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9
Advanced Audio FX Engine
Amazon MP3 Downloader 1.0.9
Apple Application Support
Apple Mobile Device Support
Apple Software Update
AVS Update Manager 1.0
AVS Video Converter 6
AVS Video Editor 4
AVS Video Recorder 2.4
AVS YouTube Uploader version 2.1
AVS4YOU Software Navigator 1.4
Backup2 FTP 4
Bb SlimDX
Blaze Media Pro
Blaze Media Pro
Bluebeam PDF Revu Standard v9.2.1
Bluebeam PDF Revu Standard v9.2.1
Bonjour
BT Broadband Desktop Help
CoffeeCup Free HTML Editor
Compatibility Pack for the 2007 Office system
Conduit Engine
D3DX10
Debut Video Capture Software
Dell Dock
Dell Edoc Viewer
Dell Getting Started Guide
Dell Support Center (Support Software)
Dell Touchpad
Dell Webcam Central
Dell-eBay
Delphi 3
DHTML Editing Component
DragonFireSDK 1.3
eBay Toolbar
Express Burn Disc Burning Software
Feedback Tool
FileZilla Client 3.5.0
FlippingBook PDF Publisher
Golden Videos
GoToAssist 8.0.0.514
HiJackThis
honestech VHS to DVD 2.0 SE
Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB945282)
Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB946040)
Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB946308)
Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB947540)
Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB947789)
Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB948127)
HP Customer Participation Program 13.0
HP Imaging Device Functions 13.0
HP OfficeJet L7300/L7500/7600/7700
HP Smart Web Printing 4.60
HP Solution Center 13.0
HP Update
HPDiagnosticAlert
IDT Audio
ieSpell
IncrediMail
IncrediMail 2.0
IncrediMail JunkFilter Plus
IncrediMail MediaBar 2 Toolbar
IncrediMail Protection Center
Integrated Webcam Driver (1.02.01.0320)
Intel(R) Graphics Media Accelerator Driver
Intel(R) TV Wizard
Intel® Matrix Storage Manager
IS Express Delphi Edition
iTunes
Java(TM) 6 Update 13
JunkFilterPlus
LimeWire 5.4.6
Live! Cam Avatar Creator
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile
Microsoft Office Professional Edition 2003
Microsoft Office Suite Activation Assistant
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft SQL Server 2008
Microsoft SQL Server 2008 Common Files
Microsoft SQL Server 2008 Common Files
Microsoft SQL Server 2008 Database Engine Services
Microsoft SQL Server 2008 Database Engine Services
Microsoft SQL Server 2008 Database Engine Shared
Microsoft SQL Server 2008 Database Engine Shared
Microsoft SQL Server 2008 Management Objects
Microsoft SQL Server 2008 RsFx Driver
Microsoft SQL Server Compact 3.5 SP2 ENU
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Express Edition with SP1 - ENU
Microsoft Visual C++ 2008 Express Edition with SP1 - ENU
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries
Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - enu
Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32
Microsoft Works
MPM
MSVC80_x86_v2
MSVC90_x86
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
NCH EN Toolbar
NETGEAR Powerline Utility
NETGEAR Powerline Utility
Nokia Connectivity Cable Driver
Nokia Home Media Server
Nokia Map Loader
Nokia Ovi Player
Nokia Ovi Suite
Nokia Ovi Suite
Nokia Ovi Suite Software Updater
Nokia Photos
Nokia_Multimedia_Common_Components_2_5
Norton AntiVirus
OCR Software by I.R.I.S. 13.0
Ovi Desktop Sync Engine
OviMPlatform
Paint Shop Pro 7
PC Connectivity Solution
Pedigree Explorer 6.1.14
Pedigree Explorer DEMO 6.1.8
Photo Notifier and Animation Creator
Photo Notifier and Animation Creator
PhotoMail Maker
PhotoMail Maker
PL-2303 USB-to-Serial
Power Packet Utility
PowerDVD DX
Presto! OCR Pro 4.0
Printer Pro Desktop
Protection Center
Quick PDF to Word v3.0
QuickTime
Rapport
Rapport
Roxio Creator Audio
Roxio Creator Copy
Roxio Creator Data
Roxio Creator DE
Roxio Creator DE
Roxio Creator Tools
Roxio Express Labeler 3
Roxio Update Manager
Safari
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB2251487)
Series II MIDI
Service Pack 1 for SQL Server 2008 (KB968369)
Shop for HP Supplies
Skype Toolbars
Skype™ 4.2
SMI Grabber Device
Snagit 10
Sql Server Customer Experience Improvement Program
StartVADIS
Telkon 500 RSC
Ten PDF Reader 8.1
TenPDFCreator
TomTom HOME 2.7.6.2056
TomTom HOME Visual Studio Merge Modules
TwonkyMedia
VADIS Config
vanBasco's Karaoke Player
VideoPad Video Editor
Vodafone Mobile Connect Lite
WavePad Sound Editor
Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Movie Maker
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
WinPcap 4.1.1
Yahoo! Toolbar

Report •

#6
July 29, 2011 at 14:05:47
✔ Best Answer
gayhalo,

Looks as if you already uninstalled jZip, but some remnants are left…

Please run HijackThis once again
Check the box next to the following entries:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.jzip.com/

O2 - BHO: jZip Toolbar - {1e48c56f-08cd-43aa-a6ef-c1ec891551ab} - C:\PROGRA~1\WIF0E7~1\Datamngr\ToolBar\jzipdtx.dll (file missing)

O3 - Toolbar: jZip Toolbar - {1e48c56f-08cd-43aa-a6ef-c1ec891551ab} - C:\PROGRA~1\WIF0E7~1\Datamngr\ToolBar\jzipdtx.dll (file missing)

O4 - HKLM\..\RunOnce: [removejZipdatamngr] cmd.exe /c RD /S /Q "C:\Program Files\Windows jZip Toolbar"

O4 - HKLM\..\RunOnce: [removejZiptoolbar] cmd.exe /c RD /S /Q "C:\Program Files\Windows jZip Toolbar\Datamngr\ToolBar"

O20 - AppInit_DLLs:
(You may get an error message for this one. If so, disregard.)

Click on: Fix Checked

Now, display hidden files and folders in Windows 7:
Open 'Folder Options' by clicking the Start button
Select: Control Panel
Clicking 'Appearance and Personalization'
And then click 'Folder Options'.
Click the 'View' tab.
Under 'Advanced Settings', click: Show hidden files and folders
ClickL OK


Search for the following folder (in bold), right click on it, and select: Delete
C:\Program Files\Windows jZip Toolbar

Delete the following file (in bold):
C:\PROGRA~1\WIF0E7~1\Datamngr\ToolBar\jzipdtx.dll
If the file is not found, move on.

Restart the computer.

Open Internet Explorer 9
Navigate to the webpage you want to set as the home page.

Click the ‘Tools’ button, and then click ‘Internet Options‘.
To set the current webpage as the home page, click: ‘Use current’
Click: OK


See if you now have the Home Page you like. ;-)

Post back.

~~~~
Retired - Doin' Dis, Dat, and slapping malware.


Report •

#7
July 29, 2011 at 15:00:20
Thats a fix. Absolutly brilliant. I may be odd but it really got up my nose that the jzip people went to so much trouble to impose their web page as my home page. I hope your efforts will stay on this forum to help other people who have or will fall into their trap. I thank you so much for your time and expertise spent fixing this problem for me.

Report •

#8
July 29, 2011 at 16:26:30
Thanks for your kind reply, gayhalo!
I am glad to help.

Before you go, there are some entries in the HijackThis log listed below that are reputed to have a certain trackware functionality. However, if the Conduit Engine is not causing any problems for you, and you use the Toolbar, it is your option whether you wish to remove it or not.

HJT log entries:
R3 - URLSearchHook: NCH EN Toolbar - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files\NCH_EN\prxtbNCH_.dll

O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll

O3 - Toolbar: NCH EN Toolbar - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files\NCH_EN\prxtbNCH_.dll

If you decide to remove the Conduit Engine and the NCH EN Toolbar, do so from Control Panel > Programs and Features, though.

Then, run HijackThis once again, see if the entries above are still there, and check them off, etc., or you can post the HJT log here once again, and I will take a look.

If the following folders are not gone, you would need to remove them:
C:\Program Files\NCH_EN Toolbar
C:\Program Files\ConduitEngine

As mentioned before, the removal of these toolbars is optional. If you want to keep them, that is OK also.

Good luck, gayhalo!!

~~~~
Retired - Doin' Dis, Dat, and slapping malware.


Report •

#9
August 2, 2011 at 10:22:18
I removed the toolbar as I did not use it. Thanks again for the help. I have one other issue, I wont mind if you are busy or whatever, it is only an agrivation. Everytime I open IE it asks me if I want IE to be my defalt browser and I say yes. I have been into internet options and it says IE is not my default browser. I say yes I want it to be and check tell me if anyone changes it. All to no avail. It still comes up as not the default browser and never tells me it is being changed. As I said its ony an agrivation.

Report •

#10
August 2, 2011 at 12:58:53
gayhalo,

See if IE is selected as your default Browser in the CUSTOM section of 'Set Program Access and Computer Defaults'.

Go to Start > Default Programs > click: ‘Set Program Access and Computer Defaults’
In the screen that appears, expand the configuration already ticked by clicking the arrow on the right.

Where it says: ‘Choose a default web browser‘, tick: ‘Internet Explorer‘, and click OK.


Now, in IE, go to Tools > Internet Options > Programs tab

In the ‘Default web browser‘ area, click: 'Make default'
Check: ‘Tell me if IE…etc..’

Click: OK

Post back with results.

Will be out for a while, but will check here later...

~~~~
Retired - Doin' Dis, Dat, and slapping malware.


Report •

#11
August 2, 2011 at 14:19:02
When i go to ‘Set Program Access and Computer Defaults’ it is always set to custom and in custom it has "use current Browser" set. I change it to IE and say OK. When I go back in it comes up as custom again and use current is selected. I have been to IE tools internet options programs and changed it there none of which stay changed. I think someone has hold of my browser as well.

Report •

#12
August 2, 2011 at 16:10:31
Is this a 32-bit or 64-bit IE9?

Apparently, there is a bug in IE9.

You are not the only person having this problem...

Need to do some more diggin' to see if there is some sort of solution.

~~~~
Retired - Doin' Dis, Dat, and slapping malware.


Report •

#13
August 2, 2011 at 16:21:10
32 Bit. An interesting exercise was to double click on an htm file and it comes up in IE so it is not acheiving anything just making me say yes to the "do you want IE to be your defalt" every time it starts up.

Report •

#14
August 2, 2011 at 16:39:08
If IE is 64-bit, it would say so to the right of the version.

Help > About Internet Explorer

http://www.sevenforums.com/attachme...

Please cross check...

~~~~
Retired - Doin' Dis, Dat, and slapping malware.


Report •

#15
August 2, 2011 at 21:44:34
Found the following info:

http://answers.microsoft.com/en-us/...

Don't know if it will help.

~~~~
Retired - Doin' Dis, Dat, and slapping malware.


Report •


Ask Question