Reboot into safe mode following the instructions here & navigate to & delete the following:
C:\DOCUME~1\default\LOCALS~1\Temp< folder contents
Unzip HJT into it's own permanent folder before doing anything in order for it to create backups. (Not a temporary folder or directly on the desktop & not directly on your hard drive). Close all (browser) windows & rescan with hijackthis. When the scan is finished place a check in the box to the left of the following entries & click 'fix checked' :
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\default\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\default\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\default\LOCALS~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\default\LOCALS~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\default\LOCALS~1\Temp\sp.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\default\LOCALS~1\Temp\sp.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
Reboot normally & give spykiller the boot as it is a rip off of another product.
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
ok, before you guys bitch at me about reading that other topic and not having other people do the work for me, i did but i'm not computer smart at all and none of it made sense to me. now, i was told you guys can help me out, so hopefully you'll be able too. i ran hijack this log, and this is what i've got:
what the problem is, is that it keeps changing my homepage to about:blank, except it's not blank, it's some site that says "search the web" or something. i run cw shredder and it gets rid of it, but if i leave my computer on for more than 10 minutes, that "about:blank" thing becomes the homepage again. if you guys could help me out, i'd really appreciate it. thanks...
I'm not trying to be rude, and I'm sure we're all happy to help you out here, but the threads listed at the top of this forum don't really require "computer smarts"-- they really only require the ability to follow directions.
The great thing about spyware removal tools these days are that they're made so that the average computer user can utilize them with little effort, especially when accompanied with good documentation and pretty straightforward interfaces.
In the time that it took to compose this post, you could have checked out some of the tools we've listed, and perhaps fixed your own problem. Again, I reiterate: HiJackThis is *NOT* a cure-all tool for spyware. It's really just a tool to troubleshoot what's going on in your system. If you've exhausted all other spyware removal methods, and you're still having a problem, then start investigating with HJT. It's really not "fixing" your system to go in and uncheck a bunch of stuff in there, and not know what put it in there, or what to do about preventing it.
alc6379
Cookie... That's it
2,820 posts since Dec 2003
Reputation Points: 186
Solved Threads: 147
