Forum Home
Press F1
 
Thread ID: 101380 2009-07-13 04:11:00 It's hijacked HotShotAB (15091) Press F1
Post ID Timestamp Content User
791310 2009-07-13 07:01:00 Tools /uninstall / save to text file in ccleaner will let you save whats in add/remove programs. Copy and paste whats in it, in here. So we can see whats in it. Malware may have installed on your system as well, and its entry will be here

Do the same for tools / startup in ccleaner, maxmise it press prtscrn then paste it in some paint / gfx program. Then save it / upload it to the link blam gave
Speedy Gonzales (78)
791311 2009-07-13 07:06:00 It doesn't give the the option to maximize the screen. I tried Cntrl + C to try and just copy and paste the highlighted words, but that didn't work either. HotShotAB (15091)
791312 2009-07-13 07:07:00 Tools /uninstall / save to text file in ccleaner will let you save whats in add/remove programs. Copy and paste whats in it, in here. So we can see whats in it. Malware may have installed on your system as well, and its entry will be here

Do the same for tools / startup in ccleaner, maxmise it press prtscrn then paste it in some paint / gfx program. Then save it / upload it to the link blam gave


Gotcha... sorry, I didn't see this until after I posted. BRB
HotShotAB (15091)
791313 2009-07-13 07:11:00 Adobe Acrobat - Reader 6.0.2 Update
Adobe Acrobat and Reader 6.0.3 Update
Adobe Atmosphere Player for Acrobat and Adobe Reader
Adobe Flash Player ActiveX
Adobe Reader 6.0.1
Banctec Service Agreement
Browser Mouse
CCleaner (remove only)
Conexant D850 56K V.9x DFVc Modem
Dell Digital Jukebox Driver
Dell Driver Reset Tool
Dell Media Experience
Dell System Restore
Dial 4.0
Digital Line Detect
eAcceleration
HP Deskjet 5700 Series
HP Photo & Imaging 3.1
HP Software Update
Intel(R) Extreme Graphics 2 Driver
Intel(R) PRO Network Adapters and Drivers
Intel(R) PROSet for Wired Connections
Jasc Paint Shop Photo Album
Jasc Paint Shop Pro 8 Dell Edition
Java 2 Runtime Environment, SE v1.4.2_03
Learn2 Player (Uninstall Only)
Logitech Desktop Messenger
Logitech Print Service
Logitech QuickCam Software
Logitech® Camera Driver
Macromedia Flash Player 8
Malwarebytes' Anti-Malware
Memories Disc Creator 2.0
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Basic Edition 2003
Microsoft Office XP Web Components
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Modem Helper
Mozilla Firefox (3.0.7)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
Musicmatch for Windows Media Player
Musicmatch® Jukebox
NetWaiting
NetZeroInstallers
PowerDVD 5.3
QuickTime
RealArcade
RealPlayer Basic
Scientific-Atlanta WebSTAR 2000 series Cable Modem
Sonic DLA
Sonic RecordNow!
Sonic Update Manager
Spybot - Search & Destroy
Viewpoint Media Player
Wal-Mart Music Downloads Store
Windows Genuine Advantage Validation Tool (KB892130)
Windows Live Favorites for Windows Live Toolbar
Windows Live installer
Windows Live Toolbar
Windows XP Service Pack 3
HotShotAB (15091)
791314 2009-07-13 07:15:00 www.imagef1.net.nz

This is the link to the picture.
HotShotAB (15091)
791315 2009-07-13 07:22:00 Delete the antivirus pro 2009 entry. Antivirus pro 2009 is rogue software (the messages its showing are FAKE). You can delete the teatimer entry, the Sun java update (uninstall all versions of Java its out of date then update it), the HP Software update entry, the Quicktime entry, the ISUSPM entry, and the DXDllRegExe entry. Then reboot

Did you scan with malwarebytes, it should have picked up Antivirus pro and removed it. If you didnt update it then scan. The entries in add/remove look ok. But I would update Java (after you uninstall it). And update adobe reader / or use an alternative. And update firefox its now up to 3.5
Speedy Gonzales (78)
791316 2009-07-13 07:25:00 This is one of your problems
www.bleepingcomputer.com
feersumendjinn (64)
791317 2009-07-13 07:28:00 Delete the antivirus pro 2009 entry. Antivirus pro 2009 is rogue software (the messages its showing are FAKE). You can delete the teatimer entry, the Sun java update (uninstall all versions of Java its out of date then update it), the HP Software update entry, the Quicktime entry, the ISUSPM entry, and the DXDllRegExe entry. Then reboot

Did you scan with malwarebytes, it should have picked up Antivirus pro and removed it. If you didnt update it then scan. The entries in add/remove look ok. But I would update Java (after you uninstall it). And update adobe reader / or use an alternative. And update firefox its now up to 3.5

I knew about the antivirus crap, that was my moms doing when she was trying to fix it herself. Anyway, when I try to find it now, I can't. I know it shows on the log, but I don't see it on the uninstall screen... let me look again before I stick my foot in my mouth any further.
HotShotAB (15091)
791318 2009-07-13 07:34:00 Delete its entry in startup and the other entries first then reboot. Then update malwarebytes and scan Speedy Gonzales (78)
791319 2009-07-13 07:53:00 AV pro 2009 can be a real bugger to remove - Malwarebytes will get most of it, but not all (usually) you may have to manually check and remove any left overs.

Once Malwarebytes has done its scan, run Spybot S&D, as well as super antispyware, you'll be surprised how many infections the whole lot combined remove ( Software Links from my sig) then have a look at This thread (www.bleepingcomputer.com) Scroll down the bottom, and check each one has been deleted - if they have not then it will reinfect.

NOTE: ALWAYS do full scans - not quick scans.
wainuitech (129)
1 2 3 4 5 6