OK,
I'm using IE 6.0 and Windows XP Home. My homepage has been hijacked to
http:searchv.comI can reset it to google by going to tools>internet options. Every time I reboot, it has been changed back again. I have deleted all cookies & temporary files. I have used the latest versions of "hijack this", "adaware" and "spybot" but every time I reboot the problem comes back.
I want this ****ing thing off my computer, and I want it off YESTERDAY!
The problem is obviously that something runs at startup and alters my registry settings. "Hijack this" said the following things were running at startrup, but its all gobbledegook to me. How am I supposed to know which one is causing all the problem!!!!!!!!!
HELP ME!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!
!!
Running processes:
C:\WINDOWS\System32\smss.e
xe
C:\WINDOWS\system32\winlog
on.exe
C:\WINDOWS\system32\servic
es.exe
C:\WINDOWS\system32\lsass.
exe
C:\WINDOWS\system32\svchos
t.exe
C:\WINDOWS\System32\svchos
t.exe
C:\WINDOWS\system32\spools
v.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG6\a
vgserv.exe
C:\Program Files\Folder Shield\FSService.exe
C:\Program Files\Folder Shield\fsp.exe
C:\WINDOWS\System32\nvsvc3
2.exe
C:\WINDOWS\System32\svchos
t.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\IE New Window Maximizer\iemaximizer.exe
C:\WINDOWS\System32\ctfmon
.exe
C:\Program Files\GetRight\getright.ex
e
C:\Program Files\GetRight\getright.ex
e
C:\Program Files\NAPA Software\Wallpaper Magic\wpm.exe
C:\Program Files\ARM Software\MacroMaker\MacroM
aker.exe
C:\Program Files\Taskbar Hider\TaskBarHider.exe
C:\Program Files\Shortkey\SHORTKEY.EX
E
C:\Program Files\TClock\TClock.exe
C:\Program Files\Wonderful\wonderfl.e
xe
C:\Program Files\AOL 8.0\waol.exe
C:\Program Files\AOL 8.0\shellmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Grisoft\AVG6\avgcc32
.exe
C:\WINDOWS\regedit.exe
--------------------------
----------
----------
----
Listing of startup folders:
Shell folders Startup:
MacroMaker.lnk = ?
Shortcut to TaskBarHider.exe.lnk = C:\Program Files\Taskbar Hider\TaskBarHider.exe
ShortKeys Lite.lnk = C:\Program Files\Shortkey\SHORTKEY.EX
E
TClock.lnk = C:\Program Files\TClock\TClock.exe
The Wonderful Icon.lnk = C:\Program Files\Wonderful\wonderfl.e
xe
Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
AOL 8.0 Tray Icon.lnk = C:\Program Files\AOL 8.0\aoltray.exe
GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.ex
e
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
Wallpaper Magic Tray Icon.lnk = C:\Program Files\NAPA Software\Wallpaper Magic\wpm.exe
--------------------------
----------
----------
----
Checking Windows NT UserInit:
[HKLM\Software\Microsoft\W
indows NT\CurrentVersion\Winlogon
]
UserInit = C:\WINDOWS\system32\userin
it.exe,
--------------------------
----------
----------
----
Autorun entries from Registry:
HKLM\Software\Microsoft\Wi
ndows\Curr
entVersion
\Run
AdaptecDirectCD = C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
fspr = "C:\Program Files\Folder Shield\FolderShield.exe" CR
--------------------------
----------
----------
----
Autorun entries from Registry:
HKCU\Software\Microsoft\Wi
ndows\Curr
entVersion
\Run
IE New Window Maximizer = C:\Program Files\IE New Window Maximizer\iemaximizer.exe
MSMSGS = "C:\Program Files\Messenger\msmsgs.exe
"
--------------------------
----------
----------
----
Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:
Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*
Shell & screensaver key from Registry:
Shell=explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*
Policies Shell key:
HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*
--------------------------
----------
----------
----
Enumerating ShellServiceObjectDelayLoa
d items:
PostBootReminder: C:\WINDOWS\system32\SHELL3
2.dll
CDBurn: C:\WINDOWS\system32\SHELL3
2.dll
WebCheck: C:\WINDOWS\System32\webche
ck.dll
SysTray: C:\WINDOWS\System32\stobje
ct.dll
--------------------------
----------
----------
----
Start Free Trial
