pumhijackho issue

[herbc]

No, you don't need to add anything now. You will have the updates ti grab after the install.

So Windows update will automatically download anything i need regarding SP1 stuff or updates addressing security patches.

I was confused about the WIN 7 iso being out of date but if i'm thinking correctly (and thats a huge IF) i only need to be concerned with SP1 updates and security updates because WIN 7 is WIN 7 .

 

[VistaKing]

Windows 7 sp1 is different then Windows 7 .

You can't do a repair install with a Windows 7 disc if your Windows has Sp1 . You're good with the Windows 7 SP1 disc .

 

[herbc]

OK, i used Dban which made three separate wipes, i then re installed the Windows 7 SP1 disk and added my drivers only to scan with M Bytes which found the PumHijackHo thing back just like before.

I did read that IE 8 has had major issues with being exploited and Microsoft just released a patch a few days ago. I mention this because IE 8 is what i need to use after re installing to get on the net, is this where i am getting this problem do you think?

During the upgrade i eventually end up with IE 10 but it starts with IE 8. What else can i do to get rid of it, i used Bleeping Computer first then Seven Forums and both while helpful seem to not have the answer.

Am i out of luck?

 

[VistaKing]

Download the program below

Click here Adwcleaner

:ar: Click on Download Now button

:ar: Save to the Desktop

:ar: Right-click on AdwCleaner.exe and choose Run as administrator

:ar: Click the Search button

:ar: Upload the AdwCleaner[Sn].txt in your reply.

   Note

The log file is at C:\AdwCleaner[Sn].txt

 

[Britton30]

A 1st priority after a new, clean install is to install your security.

 

[herbc]

OK, here is the adwcleaner log, as you can see it's the same thing (in bold) and while i deleted it's value it just keeps coming back. I want a permanent deletion so it doesn't come back but that seems to not be possible.



# AdwCleaner v2.301 - Logfile created 05/19/2013 at 15:51:12
# Updated 16/05/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : alan - ALAN-PC
# Boot Mode : Normal
# Running from : C:\Users\alan\Downloads\AdwCleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****

Value Found : HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel [Homepage]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Google Chrome v26.0.1410.64

File : C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [745 octets] - [19/05/2013 15:51:12]

########## EOF - C:\AdwCleaner[R1].txt - [804 octets] ##########

 

[herbc]

A 1st priority after a new, clean install is to install your security.

I have some people say install all your drivers first and then your AV and then some who say AV first then your drivers and then some who say all Windows updates and then your drivers and then AV .

It seems like i need to use IE 8 to get my updates and this is when i am unprotected, i am even unprotected when i am downloading AV but the Windows Firewall is on including defender.

There seems to be no way i can get around using IE 8 at first.




Take a look at this, i do not have this on my IE 8.


http://www.bleepingcomputer.com/for...-it-for-vulnerability-in-internet-explorer-8/

 

[herbc]

Alright guys, just wanted to thank all again, i'm going to officially close out my time here because it seems we have taken it as far as it's going to go.

I will post a fix when i find a permanent solution to the PumHijackHo thing in case someone else runs into it in the future.

Thanks again

 

[Britton30]

I don't know why it appeared on a fresh install. All I can figure is you attached a drive or USB flash stick or some media with the infection.

 

[VistaKing]

herbc

Can you navigate to this location in the registry

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel [Homepage]

Delete the Homepage on the right hand side