#1
Member
Profile: Join Date: Jul 2009
Posts: 39
Computer Experience:
[Resolved] search setting 1.21 reinstallation
thanks for replying my post.wan to continue or cancel. Pressing continue will close all my browsers but pressing cancel for a few times will let me continue browsing.
Didn't find the information you thought to find?Similar Threads
#2
Profile: Join Date: Dec 2001
Location: Birkirkara, Malta
Posts: 11,010
Computer Experience:
Quote:
Originally Posted by
shengxian
P.S can i post more questions on the same thread?
No, each problem/question has to be addressed separately in the correct forum.
#3
Member
Profile: Join Date: Jul 2009
Posts: 39
Computer Experience:
ok thanks.
#4
Profile: Join Date: Dec 2001
Location: Birkirkara, Malta
Posts: 11,010
Computer Experience:
As posted in our Malware Instructions
Quote:
Please be patient when waiting for a response. Do NOT bump your topic! We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump. If it has been seven days or more without a response, please PM a moderator or Admin with a link to your New Topic.
#5
Malware Analyst
Profile: Join Date: Aug 2002
Location: Daly City, CA
Posts: 10,074
Computer Experience:
Quote:
the computer will require me to reinstall search setting 1.21
Is it some kind of program, you're familiar with, or you have no clue what that is?
#6
Member
Profile: Join Date: Jul 2009
Posts: 39
Computer Experience:
i'm sorry. HJT Report ===============TCP : {8A5C5CD7-ACCB-4AD9-8AB6-0A05B07F35EC} = 202.188.0.133,202.188.1.5js : browser.startup.homepage - hxxp://apps.facebook.com/inthemafia/index.php?xw_controller=index&xw_action=view|http://apps.facebook.com/piratesrule...ewpro&uid=6692 js : keyword.URL - hxxp://mye.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_mye&p=js - pref("media.enforce_same_site_origin", false);js - pref("media.cache_size", 51200);js - pref("media.ogg.enabled", true);js - pref("media.wave.enabled", true);js - pref("media.autoplay.enabled", true);js - pref("browser.urlbar.autocomplete.enabled", true);js - pref("capability.policy.mailnews.*.wholeText", "noAccess");js - pref("dom.storage.default_quota", 5120);js - pref("content.sink.event_probe_rate", 3);js - pref("network.http .prompt-temp-redirect", true);js - pref("layout.css.dpi", -1);js - pref("layout.css.devPixelsPerPx", -1);js - pref("gestures.enable_single_finger_input", true);js - pref("dom.max_chrome_script_run_time", 0);js - pref("network.tcp .sendbuffer", 131072);js - pref("geo.enabled", true);js - pref("security.remember_cert_checkbox_default_setting", true);js - pref("browser.search.param.yahoo-fr", "moz35");js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");js - pref("extensions.blocklist.level", 2);js - pref("browser.urlbar.restrict.typed", "~");js - pref("browser.urlbar.default.behavior", 0);js - pref("privacy.clearOnShutdown.history", true);js - pref("privacy.clearOnShutdown.formdata", true);js - pref("privacy.clearOnShutdown.passwords", false);js - pref("privacy.clearOnShutdown.downloads", true);js - pref("privacy.clearOnShutdown.cookies", true);js - pref("privacy.clearOnShutdown.cache", true);js - pref("privacy.clearOnShutdown.sessions", true);js - pref("privacy.clearOnShutdown.offlineApps", false);js - pref("privacy.clearOnShutdown.siteSettings", false);js - pref("privacy.cpd.history", true);js - pref("privacy.cpd.formdata", true);js - pref("privacy.cpd.passwords", false);js - pref("privacy.cpd.downloads", true);js - pref("privacy.cpd.cookies", true);js - pref("privacy.cpd.cache", true);js - pref("privacy.cpd.sessions", true);js - pref("privacy.cpd.offlineApps", false);js - pref("privacy.cpd.siteSettings", false);js - pref("privacy.sanitize.migrateFx3Prefs", false);js - pref("browser.ssl_override_behavior", 2);js - pref("security.alternate_certificate_error_page", "certerror");js - pref("browser.privatebrowsing.autostart", false);js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
#7
Malware Analyst
Profile: Join Date: Aug 2002
Location: Daly City, CA
Posts: 10,074
Computer Experience:
Please download ComboFix from Here Here **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop** Please, never rename Combofix unless instructed.
Close any open browsers.
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.Very Important! disable your anti-virus , script blocking and any anti-malware real-time protection before "unpredictable results" .Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask. Close any open browsers.
WARNING: Combofix will disconnect your machine from the Internet as soon as it startsPlease do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.
Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review.
**Note: Do not mouseclick combofix's window while it's running. That may cause it to stall** Make sure, you re-enable your security programs, when you're done with Combofix. HijackThis :http://www.trendsecure.com/portal/en...kthis/download Download HijackThis Installer Do NOT attempt to fix anything! NOTE. If you're using Vista, right click on HijackThis , and click Run as Administrator
#8
Member
Profile: Join Date: Jul 2009
Posts: 39
Computer Experience:
excuse me sir.
#9
Malware Analyst
Profile: Join Date: Aug 2002
Location: Daly City, CA
Posts: 10,074
Computer Experience:
Quote:
can u reassure me that every posts allowed by moderator are not scammers'.
Only Staff members, and Malware Analysts are allowed to reply here. Nothing to worry about
Quote:
When i run Combofix, it alert me with the presence of norton anti-virus in my laptop while i never know i had have it.
Thanks for asking. Most likely, some registry leftovers. Disregard warning about Norton.
#10
Member
Profile: Join Date: Jul 2009
Posts: 39
Computer Experience:
hey, sir.
#11
Malware Analyst
Profile: Join Date: Aug 2002
Location: Daly City, CA
Posts: 10,074
Computer Experience:
Nah, it doesn't work that way. I need to see Combofix, and HJT logs.
#12
Member
Profile: Join Date: Jul 2009
Posts: 39
Computer Experience:
ok. thanksTCP : {8A5C5CD7-ACCB-4AD9-8AB6-0A05B07F35EC} = 202.188.0.133,202.188.1.5js : browser.startup.homepage - hxxp://apps.facebook.com/inthemafia/index.php?xw_controller=index&xw_action=view|http://apps.facebook.com/piratesrule...ewpro&uid=6692 js : keyword.URL - hxxp://mye.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_mye&p=js - pref("media.enforce_same_site_origin", false);js - pref("media.cache_size", 51200);js - pref("media.ogg.enabled", true);js - pref("media.wave.enabled", true);js - pref("media.autoplay.enabled", true);js - pref("browser.urlbar.autocomplete.enabled", true);js - pref("capability.policy.mailnews.*.wholeText", "noAccess");js - pref("dom.storage.default_quota", 5120);js - pref("content.sink.event_probe_rate", 3);js - pref("network.http .prompt-temp-redirect", true);js - pref("layout.css.dpi", -1);js - pref("layout.css.devPixelsPerPx", -1);js - pref("gestures.enable_single_finger_input", true);js - pref("dom.max_chrome_script_run_time", 0);js - pref("network.tcp .sendbuffer", 131072);js - pref("geo.enabled", true);js - pref("security.remember_cert_checkbox_default_setting", true);js - pref("browser.search.param.yahoo-fr", "moz35");js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");js - pref("extensions.blocklist.level", 2);js - pref("browser.urlbar.restrict.typed", "~");js - pref("browser.urlbar.default.behavior", 0);js - pref("privacy.clearOnShutdown.history", true);js - pref("privacy.clearOnShutdown.formdata", true);js - pref("privacy.clearOnShutdown.passwords", false);js - pref("privacy.clearOnShutdown.downloads", true);js - pref("privacy.clearOnShutdown.cookies", true);js - pref("privacy.clearOnShutdown.cache", true);js - pref("privacy.clearOnShutdown.sessions", true);js - pref("privacy.clearOnShutdown.offlineApps", false);js - pref("privacy.clearOnShutdown.siteSettings", false);js - pref("privacy.cpd.history", true);js - pref("privacy.cpd.formdata", true);js - pref("privacy.cpd.passwords", false);js - pref("privacy.cpd.downloads", true);js - pref("privacy.cpd.cookies", true);js - pref("privacy.cpd.cache", true);js - pref("privacy.cpd.sessions", true);js - pref("privacy.cpd.offlineApps", false);js - pref("privacy.cpd.siteSettings", false);js - pref("privacy.sanitize.migrateFx3Prefs", false);js - pref("browser.ssl_override_behavior", 2);js - pref("security.alternate_certificate_error_page", "certerror");js - pref("browser.privatebrowsing.autostart", false);js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);js - pref("geo.wifi.uri", "https://www.google.com/loc/json");http://www.gmer.net SP2 (WinNT 5.01.2600)http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://javadl.sun.com/webapps/downlo...BundleId=19588
#13
Malware Analyst
Profile: Join Date: Aug 2002
Location: Daly City, CA
Posts: 10,074
Computer Experience:
Uninstall Combofix :Start > Run combofix /u Note the space between the "combofix" and the "/u" Norton Removal Tool : http://service1.symantec.com/Support...05033108162039 http://www.free-av.com/en/download/1...antivirus.html http://www.avast.com/eng/download-avast-home.html http://www.pctools.com/free-antivirus/ http://www.pctools.com/firewall/ http://www.personalfirewall.comodo.com/ on , or use PC Tools Firewall Plus, or Comodo firewall..off .IMPORTANT! Make sure, you use only ONE antivirus, and ONE firewall. HJT log.
#14
Member
Profile: Join Date: Jul 2009
Posts: 39
Computer Experience:
can i use kaspersky?
#15
Malware Analyst
Profile: Join Date: Aug 2002
Location: Daly City, CA
Posts: 10,074
Computer Experience:
Quote:
downloaded following youtube
??...
All times are GMT +1. The time now is 08:05 .
