944,000 Members | Top Members by Rank

Ad:
May 5th, 2005
0

hi jackthis took over my home page

Expand Post »
after trying everything from adaware to hijackthis i still can not remove hotoffers from taking over my home page....please help!



here is my HJT log

Logfile of HijackThis v1.99.1
Scan saved at 9:58:26 AM, on 5/5/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\ok here it goes\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotoffers.info/ad0352
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotoffers.info/ad0352
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
oldiescc is offline Offline
2 posts
since May 2005
May 5th, 2005
0

Re: hi jackthis took over my home page

Are you sure you posted the full contents of the HJT log? That one looks abnormally short...
DMR
Team Colleague
Reputation Points: 221
Solved Threads: 369
Wombat At Large
DMR is offline Offline
6,439 posts
since Dec 2003
May 5th, 2005
0

Re: hi jackthis took over my home page

yes this is the whole thing
Reputation Points: 10
Solved Threads: 0
Newbie Poster
oldiescc is offline Offline
2 posts
since May 2005
May 5th, 2005
0

Re: hi jackthis took over my home page

OK. There are a couple of different methods of removing Hotoffers that have worked for some of our other members. The procedures are described in the links below; give them a try and let us know the results:

http://www.daniweb.com/techtalkforums/thread19959.html

http://www.daniweb.com/techtalkforum...hotoffers.html
DMR
Team Colleague
Reputation Points: 221
Solved Threads: 369
Wombat At Large
DMR is offline Offline
6,439 posts
since Dec 2003

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Viruses, Spyware and other Nasties Forum Timeline: Hotoffers changed my Internet Explorer home page
Next Thread in Viruses, Spyware and other Nasties Forum Timeline: 100% cpu usage - spyware problem





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC