Search pages Hi-jacked Please help.

  1. #1
    Ballo is offline Newbie

    Exclamation Search pages Hi-jacked Please help.

    Ok heres the problem, all of the search pages i go on google, yahoo ect are being hijacked by some kind of ActiveX script ive tried removing this problem on my own, i got it from tampering with my results to show only ones from certan sites where they want you to buy stuf, to just blocking the ActiveX script and not letting me on to the page at all. So any information you guys could give me i would be very gratefull.
    Thanks in advance Chris.
    Attached Files


  2. #2
    Jaynee is offline Senior Member
    Can you please move HijackThis to it's own permanent folder such as c:\HJT\HijackThis.exe <-----Very important; needed to keep/maintain backups in.

    Uninstall: C:\Program Files\Messenger Plus! 3\MsgPlus.exe using add and remove programs. (You can reinstall it again later without accepting the sponsorship agreement)

    Restart hijackthis and put a checkmark against the following:


    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    O1 - Hosts: 213.219.251.78 www.google.com
    O1 - Hosts: 213.219.251.78 google.com
    O1 - Hosts: 213.219.251.78 www.google.co.uk
    O1 - Hosts: 213.219.251.78 google.co.uk
    O1 - Hosts: 213.219.251.78 www.google.ca
    O1 - Hosts: 213.219.251.78 google.ca
    O1 - Hosts: 213.219.251.78 www.google.es
    O1 - Hosts: 213.219.251.78 google.es
    O1 - Hosts: 213.219.251.78 www.google.de
    O1 - Hosts: 213.219.251.78 google.de
    O1 - Hosts: 213.219.251.78 www.google.fr
    O1 - Hosts: 213.219.251.78 google.fr
    O1 - Hosts: 213.219.251.78 www.google.com.au
    O1 - Hosts: 213.219.251.78 google.com.au
    O1 - Hosts: 213.219.251.79 www.yahoo.com
    O1 - Hosts: 213.219.251.79 yahoo.com
    O1 - Hosts: 66.218.75.184 mail.yahoo.com
    O1 - Hosts: 213.219.251.80 www.msn.com
    O1 - Hosts: 213.219.251.80 msn.com
    O1 - Hosts: 213.219.251.80 search.msn.com
    O1 - Hosts: 213.219.251.80 www.search.msn.com
    O1 - Hosts: 213.219.251.80 go.com
    O1 - Hosts: 213.219.251.80 www.go.com
    O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe (file missing)


    Fix checked and reboot and post a fresh log.


    Do you know what the items below are?

    O4 - HKLM\..\Run: [Registry Compact] "C:\Program Files\Systerac XP Tools 3\regcomp.exe" /Auto
    O4 - HKLM\..\Run: [Memory Optimizer] "C:\Program Files\Systerac XP Tools 3\memoryo.exe"
    O17 - HKLM\System\CCS\Services\Tcpip\..\{CE31D2F4-74B7-4091-8B35-AE30527B56B5}: NameServer = 194.106.56.6,194.106.33.42

  3. #3
    Ballo is offline Newbie
    Save 20% on AVG Internet Security 2012 Suite!
    I know what :
    O4 - HKLM\..\Run: [Registry Compact] "C:\Program Files\Systerac XP Tools 3\regcomp.exe" /Auto
    O4 - HKLM\..\Run: [Memory Optimizer] "C:\Program Files\Systerac XP Tools 3\memoryo.exe" are but i dont know what the other is, but the method you described as worked perfectly, thankyou very much

+ Reply to Thread