#1
Inactive
Profile: Join Date: Oct 2006
Posts: 5
Computer Experience:
Internet Explorer re-directing
Hello!SP2 (WinNT 5.01.2600)hjt \HijackThis.exehttp://www.comcast.net/comcast.html http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?linkid=39204 http://download.mcafee.com/molbin/sh...1/mcinsctl.cab http://h30155.www3.hp.com/ediags/dd/...dsolutions.cab http://download.mcafee.com/molbin/sh...26/mcgdmgr.cab IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
Didn't find the information you thought to find?Similar Threads
#2
SuperGeek
Profile: Join Date: May 2006
Location: PHX. AZ
Posts: 3,311
Computer Experience:
Hello and welcome to WindowsBBS Forums.ALL instructions carefully BEFORE proceeding.Add/Remove , and if found, uninstall the following:Messenger Stopper <<<--read here check the boxes next to them and press the "Fix Checked" button with HijackThis . When you are doing this, make sure you have No IE windows, or other browsers open , including this one. Reboot if I have specified below, and post a fresh HijackThis log.http://www.comcast.net/comcast.html http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 Open HJT , click the 'None of the above, just start the program' button.
Then click the 'Config' button in the lower right hand of the program.
Then select the 'Misc Tools' button.
Click the 'Open hosts file manager ' button.
Then hit the 'Open in notepad ' button.
Copy and paste the text here please.
HJT log file.
#3
Inactive
Profile: Join Date: Oct 2006
Posts: 5
Computer Experience:
Thank you for your help!
Thank you for your quick responce in this matter.TCP /IP for Windows.IP addresses to host names. EachIP address shouldIP address and the host name should be separated by at least oneHJT log fileSP2 (WinNT 5.01.2600)hjt \HijackThis.exehttp://www.comcast.net/toolbar2.0/search/ http://www.comcast.net/toolbar2.0/search/ http://go.microsoft.com/fwlink/?linkid=39204 http://download.mcafee.com/molbin/sh...1/mcinsctl.cab http://h30155.www3.hp.com/ediags/dd/...dsolutions.cab http://download.mcafee.com/molbin/sh...26/mcgdmgr.cab IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
#4
Inactive
Profile: Join Date: Oct 2006
Posts: 5
Computer Experience:
Part 2
I noticed that Messenger Stopper was a running process even after I uninstalled it, however it did not come back after a reboot.
#5
SuperGeek
Profile: Join Date: May 2006
Location: PHX. AZ
Posts: 3,311
Computer Experience:
I forgot to ask this last post, what search engine are you getting re-directed to?HJT :HJT , click the 'None of the above, just start the program' button. Then click the 'Config' button in the lower right hand of the program.
Then select the 'Misc Tools' button.
In the upper left hand side of the program tick the two boxes 'List also minor sections (full)' button and the 'List empty sections (complete)' button and select 'Yes' when promted by the dialog box.
HJT .HJT , click the 'None of the above, just start the program' button. Click on the Config button
Click on the Misc Tools button
Click on the Open Uninstall Manager button
Then click on the Save list button and specify where you would like to save this file.
When you press Save button a notepad will open with the contents of that file.
Copy and paste the contents of that notepad back into this thread for me to view.
#6
Inactive
Profile: Join Date: Oct 2006
Posts: 5
Computer Experience:
Originally it was going to a comcast.net search engine. After the first set of changes I did now it goes to an "Internet Explorer cannot display this webpage" error screenhjt \HijackThis.EXESP2 (WinNT 5.01.2600)hjt \HijackThis.exejs : not hiddenhttp://fpdownload.macromedia.com/get...irector/sw.cab http://go.microsoft.com/fwlink/?linkid=39204 http://download.mcafee.com/molbin/sh...1/mcinsctl.cab http://java.sun.com/update/1.5.0/jin...ndows-i586.cab http://h30155.www3.hp.com/ediags/dd/...dsolutions.cab http://download.mcafee.com/molbin/sh...26/mcgdmgr.cab http://java.sun.com/update/1.5.0/jin...ndows-i586.cab http://java.sun.com/update/1.5.0/jin...ndows-i586.cab http://download.macromedia.com/pub/s...sh/swflash.cab
#7
Inactive
Profile: Join Date: Oct 2006
Posts: 5
Computer Experience:
Part 2
Enumerating Windows NT/2000/XP servicesIDE /ESDI Hard Disk Controller: system32\DRIVERS\atapi .sys (system)DHCP Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)DNS Client: %SystemRoot%\system32\svchost.exe -k NetworkService (autostart)HTTP : System32\Drivers\HTTP .sys (manual start)HTTP SSL: %SystemRoot%\System32\svchost.exe -k HTTPFilter (manual start)IP Traffic Filter Driver: system32\DRIVERS\ipfltdrv.sys (manual start)IP in IP Tunnel Driver: system32\DRIVERS\ipinip.sys (manual start)IP Network Address Translator: system32\DRIVERS\ipnat.sys (manual start)ISA /EISA Bus Driver: system32\DRIVERS\isapnp.sys (system)TCP /IP NetBIOS Helper: %SystemRoot%\system32\svchost.exe -k LocalService (autostart)BIOS Driver: system32\DRIVERS\mssmbios.sys (manual start)WAN Driver: system32\DRIVERS\ndiswan.sys (manual start)IP service: C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe (autostart)TCP /IP Protocol Driver: System32\DRIVERS\NVTcp.sys (system)PCI Bus Driver: system32\DRIVERS\pci .sys (system)WAN Miniport (PPTP): system32\DRIVERS\raspptp.sys (manual start)WAN Miniport (L2TP): system32\DRIVERS\rasl2tp.sys (manual start)ICS ): %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)MS Software Shadow Copy Provider: C:\WINDOWS\system32\dllhost.exe /Processid:{6FA6DB55-659F-4852-A246-E45B5E6AD3DB} (manual start)TCP /IP Protocol Driver: system32\DRIVERS\tcpip.sys (system)ups .exe (manual start)IP ARP Driver: system32\DRIVERS\wanarp.sys (manual start)And the uninstall list Ad -Aware SE PersonalSP2 (KB925672)
#8
SuperGeek
Profile: Join Date: May 2006
Location: PHX. AZ
Posts: 3,311
Computer Experience:
Ok, a re-direct to your ISP isn't really a threat in so much as them trying to get you buy stuff from thier adverts. HJT :http://www.comcast.net/toolbar2.0/search/ http://www.comcast.net/toolbar2.0/search/
All times are GMT +1. The time now is 08:29 .
