HijackThis

[Bare Foot Kid]

When someone has the time, will you please have a look at this for me?

View attachment 49152




Thank you very much!

 

[valtonray]

i know WHAT it is but what exactly am i supposed to be looking for?

 

[Bare Foot Kid]

I was mostly speaking to a couple of the MVPs that hang out here, sorry for not being clearer; everyone tells me I'm too cryptic.


Thanks though (a browser hijacker)

 

[Corrine]

Hi, Bare Foot Kid.

Are you having problems or merely requesting a "check-up"?

HijackThis isn't the best of tools these days and has problems properly recognizing services. That said, with Windows Vista or Windows 7, you should right-click the .exe and select Run as Administrator.

 

[D3ftOn3Z]

I'm not that good in using this application and can't verify much..But i downloaded your txt file and analyze it through HiJackThis's site..Everything's looks good to me though.You can analyze it through their website and see the results.

Here - HijackThis Logfileauswertung

 

[Bare Foot Kid]

Hello Corrine.


I got re-directed today and I'm not sure if there is a problem or not, if there is it would be just as easy for me to reinstall this OS, as it's one of several I have on this box.

I'll give your suggestion a go right now, thank you!

 

[Bare Foot Kid]

Here's the new one; thank you very much!

View attachment 49156

 

[Corrine]

Hi, D3ftOn3Z. I wouldn't advise going by an on-line log analyzer. They are highly prone to false-positives. Nothing beats an actual evaluation.

Bare Foot Kid, your log shows two IE start pages -- MSN and Fox with Bing as your search page. A BHO is not shown in the log.

Edit: I see you posted a new log. Let me take a look at it.

 

[Jacee]

See if you can run DDS:

Download DDS from one of these links:
Mirror 1 Mirror 2 Mirror 3

• Disable any script blocking protection
• Double click the dds icon to run the tool.
• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt
• Save both reports to your desktop.

Include the contents of both logs in your new topic.
The scan will instruct you to post Attach.txt as an attachment.

 

[D3ftOn3Z]

Ok corrine,noted...

 

[Bare Foot Kid]

Here you go Jacee.

 

[Corrine]

Jacee posted so that changes what I wrote.

 

[Bare Foot Kid]

Jacee posted so that changes what I wrote.

I want to thank you very much for taking the time to help me, thank you!

 

[Corrine]

You're welcome. I suspect Jaycee will confirm what I wrote & deleted since I didn't want to get in the middle of things.

 

[Jacee]

Corrine, what did you write? You can get in the middle lol!

 

[Jacee]

The logs look clean Bare Foot Kid.

 

[Bare Foot Kid]

The logs look clean Bare Foot Kid.

Thank you very much Jacee, I appreciate your time.

 

[Corrine]

lol Ok, when I saw the clean logs, I figured it was one of the following:

1) if the redirect from the initial website was to a sales/malicious website, most likely the initial website was infected.

2) the initial website owner either created the redirect to the new website -- i.e., business name changed and new domain purchased.

3) the domain name for the initial landing page was being used as a typo-squatting URL to redirect to the landing page that Bare Foot Kid ended up on.