Thread: HiJack
View Single Post
Old March 30th, 2005, 06:34 AM     #2 (permalink)
jrsweger
Ultimate Member
 
jrsweger's Avatar
 
Join Date: Oct 2004
Location: Upstate NY
Posts: 1,635
There are a few places that you can go to get this analyzed very easily. Most of us will use these to give you the answer so you can check them yourself just as easily. You can find them here: http://www.techimo.com/forum/t137826.html

The Help2go lists the following for starters:

These entries have been positively identified as malicious programs. In the HijackThis program, place a check mark next to the following entries.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://minisearch.startnow.com/
(Description: Search hijacker)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://minisearch.startnow.com/
(Description: Search hijacker)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startnow.com
(Description: Search hijacker)

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://minisearch.startnow.com/
(Description: Search hijacker)

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://minisearch.startnow.com/
(Description: Search hijacker)

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://minisearch.startnow.com/
(Description: Search hijacker)

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://minisearch.startnow.com/
(Description: Search hijacker)

O2 - BHO: &EliteBar - {28CAEFF3-0F18-4036-B504-51D73BD81ABC} - (no file)
(Description: A hidden or missing adware entry.)

O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - (no file)
(Description: A blank toolbar entry. Possibly an adware toolbar that was removed by an anti-virus or anti-spyware program.)

O10 - Hijacked Internet access by New.Net
(Description: New.Net browser hijacker)


*_*_*_*_*_*_*_*_*_*_*_*_*_*_*_*_*_*_*_*

/EDIT

You should probably download and have LSPfix available before getting rid of the New.net one. Also I noticed the the sites sort of conflict with their information. One says to get rid of the minisearch one the other says it's ok. You pick, if you know about it.
__________________
If you don't volunteer don't bitch!

Last edited by jrsweger : March 30th, 2005 at 06:42 AM. Reason: hold the phone
jrsweger is offline   Reply With Quote