windtalker6
join:2005-09-11
1 edit | reply to thrill471
Re: HJT Log - homepage redirect and popup
Your problem is caused by the SpyAxe trojan. Although your log is almost clean of anything SpyAxe related, there is one object that need to be removed - namely it redirects your web browser and displays annoying bubble messages. This entry is:
O2 - BHO: HomepageBHO - {1ca480cd-c0e5-4548-874e-b85b17905b3a} - C:\WINDOWS\system32\hp360F.tmp
Link Removed. WCB! is related to SpyAxe.
To get rid of it please do the following:
1. Launch Internet Explorer.
Within it click on the Tools menu and then select the Manage Add-ons entry.
This should open the add-on manager. Find the HomePageBHO add-on, select it with your mouse or keyboard and then check the Disable option located below. Press OK. This should disable the SpyAxe-related malicious add-on.
2. Now locate the svchosts.dll file (it should be in your default system directory) and delete it (you may want to reboot your PC in Safe Mode)
3. Search your system for the ioctrl.dll file and delete it using the smitRem tool.
4. You also should locate the hp360F.tmp file and delete it. It should be in your system directory. |
